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", 0x1000}], 0x5, &(0x7f0000007d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}}, {{&(0x7f0000007dc0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000008040)=[{&(0x7f0000007e00)="95232863d29cb36778084d7d2c2ca33b8951a5499d337bff5cac89fb4f1a968c3d174853a49569ab047407f4e81c10b9d530010a49bf22770457313c47e4ec5626189c4a9a0998dcf132d0cdf6ca2a5573692ba85c0fe689ca5cd5bd231904bdf3cb703f77a2c1610747b2ea0279be8a3dedc8f0868b7b6a43e601c0a7e9bfc7382bbfd461e813b0c582abdca706e6250f0699f14ab498", 0x97}, {&(0x7f0000007ec0)="0bcbe35aab5effbadfacc6533ab1b2edc8d5832649700f810d8a4676acda57c5cf6a7e2775fa521265", 0x29}, {&(0x7f0000007f00)="776944399eeacd84e36d764c09b730be763e6e3fe941d2bc77cc1a3f2a625cbf9591963b761955cdcd93a23e34f3c973df200657347e4e5e3888b4757b87b0c7277478272beafe1a91dcbe02e103cd2126d1a6d0f3708a7285", 0x59}, {&(0x7f0000007f80)="258c3712279db0aebbd4c1d9d0eb3b76caec2978f37a0ce0a6175a0952a31c61357dc70a6804e04f4ecac5128a59d7581d21163e8868e9878dcfa9bdff0bbb8fea9db232dce8a9ee5905d786c0551c690bad4a630515ca97a89d19be793f0a409c8db31c4b46", 0x66}, {&(0x7f0000008000)="5214bb851b73542e01a88d", 0xb}], 0x5, &(0x7f00000080c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x48}}], 0x30}}, {{&(0x7f0000008100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000008540)=[{&(0x7f0000008140)="27c9fcd593d1b4ee3989cb633bb5c897cb4fe0bebd931287a03711a6e03f168262fb2eac98521bd3836eb1379bb8e64427ac4e91c440abebbd36826169d0681b1edc7346c9b64de4ed64233315eb232c47bd52790ef3b17272f127c2d06b586ff0474ee795a0e9ce4af9de0b939c74bb43dc24964a8c6b267a776375e3fd6b7416dd73bb1d55d151308e46e97d64762de2f4e810cfc93a62b150f1d08d19744100121536", 0xa4}, {&(0x7f0000008200)="7d00bcf0bdc9a601713604bafc4cf8895c60d887d12e31399432eaa91f6e12fd", 0x20}, {&(0x7f0000008240)="af43b40f098ad28c90b929774f700b4be64cd693509d607652370111ab34109ec80a406a0128d98b1f5f696f1f22eed608d6ffc7f407fc6c50d15c25bdd533a061bf121818405712cb76941e0fa1b6290f56dea6f8ae988bf7c97e85cc3d477499f9ba9105992e3ea23593be62226d74b965cf79eb104ff290a83c223f66ca69fdd59b1a8255e4f45f9a8f39c6cff277aa99dff042e8fcb23b79ee0845c3d816b5813a3aaf910eda15d3cb031636d801299d81d20ab3a585aee10e17", 0xbc}, {&(0x7f0000008300)="ddd4220a7494a6eb2f334088b1f710852457b9c89d6bcd6261434749577eb0dd3801b8f702929c6deb102fc81369235f048911e39a4cd164a68f2c820cb6f082ed109af8cce2e85006ac82ef594e7337", 0x50}, {&(0x7f0000008380)="372f1bea30e9e69a0ccd93b0a68912f0b5da739fec2a3b64c25be9045131b40793a85388b6a934", 0x27}, {&(0x7f00000083c0)="2aaf0c8b883ab3e770e3610244d691b24226e1e0ebc4c528e3b0e8f42c8af0d4294f3e44dd2ba224d531b9eba0b24e99f8206b481c2709b09bc2c3c27dbce14c818fce348df68f7aa19a3c074bf87247e6a04fe8bab4e595bfaa1ee0caf36b4427ff58bedae64ea7870d38dc70f80d018fe6fbe9", 0x74}, {&(0x7f0000008440)="50bc128d3c87ae25e7d699a58939c55568173160f3167321b90264e2d33e3ef2728fb3825e75fdf7d595e574a9586da4ebcab38ab4da513afacaf0a105fbd223507182e4bbd3a5cfb2e1b31c3e0f1dad585590ad883cd9b9ee323168e562f3986340f8c6c3c1c9d7c1ab7f027d3a638cad5cfedf19fab564472f450197599f092a1b74b20161710fe3d8e9c042ef7dad9419898d71a680d5e9d18b87935cb66ced7ba2ce0a21b3e98f1fa7e390249fd3cfb2b63c79ae56023f45349a2490b3bff3", 0xc1}], 0x7}}], 0xa, 0x40) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xc}, 0x0) 12:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x9f030000}, 0x0) [ 1176.427464][ T27] audit: type=1804 audit(1690376187.070:2460): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1234/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 12:56:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3500}, 0x0) 12:56:27 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe}, 0x0) 12:56:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3600}, 0x0) 12:56:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x118, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x121}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ca}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ec}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd3bd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x118}}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r8, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x18, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x20040090) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, 0xffffffffffffffff, 0x0, 0x100000002) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="41b0a8cdcdfed616bcea575e127ae6de296814b98d47562099", @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="f9bbccd63f68f80d9e427ae7bb89c4af56183123fc0472afc6712e2b3608838eb6a62804e021584fd77ac2aa8acfc82575da23bad4636ca549a1687a70fcd7ae453239b44c012f1184ddfa7c6c452e2d1722bb427208c4be98b893d316926c42b984bb39775c2b5698cad989a86f1525ee42c6e7d915a5c6a425338b13d0448d396851835f4f3ff617aef6bde9f0b22424b8ad59827b69e4aa7f2170f1527090adbeba4f48"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r12, r11, 0x0, 0x10000a006) 12:56:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3700}, 0x0) [ 1176.851301][ T27] audit: type=1804 audit(1690376187.580:2461): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/673/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 12:56:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000084aa99690000004dd7529e8e8e96e4e42d121dce60f33f93165fc8d8becb826f4473e8a440013abd7bace674b989f5e36c99e5d857d9b33f6ee3ebb7e53da0947ed1c01ce6ce3ff4242f56fd1092f425aaefa30419faeb16daf891cab54de1c316f23a7cd51e0f2fece4760a0a40a97d69e603c7935c16c937dfeb888e4c2b6037da21200bd48e8aac630b78b611156e39cff71701c40543844018c62219df5fc2e21faa0ccacc0dded53a68033df28407df2a67631c32365bf65eabf69a453693f5f38a16124a962c2704c7499c7f2d9cef2d00000000000000"], 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) accept4$unix(r6, &(0x7f0000000280), &(0x7f0000000000)=0x6e, 0x800) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001600)={r9, "3e1a2b5c2909754f66fe0fa2203a3912"}) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3800}, 0x0) 12:56:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf}, 0x0) [ 1176.984076][ T27] audit: type=1804 audit(1690376187.620:2462): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/673/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 12:56:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xf0ffffff}, 0x0) 12:56:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x10}, 0x0) 12:56:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3900}, 0x0) 12:56:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000084aa99690000004dd7529e8e8e96e4e42d121dce60f33f93165fc8d8becb826f4473e8a440013abd7bace674b989f5e36c99e5d857d9b33f6ee3ebb7e53da0947ed1c01ce6ce3ff4242f56fd1092f425aaefa30419faeb16daf891cab54de1c316f23a7cd51e0f2fece4760a0a40a97d69e603c7935c16c937dfeb888e4c2b6037da21200bd48e8aac630b78b611156e39cff71701c40543844018c62219df5fc2e21faa0ccacc0dded53a68033df28407df2a67631c32365bf65eabf69a453693f5f38a16124a962c2704c7499c7f2d9cef2d00000000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) accept4$unix(r6, &(0x7f0000000280), &(0x7f0000000000)=0x6e, 0x800) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001600)={r9, "3e1a2b5c2909754f66fe0fa2203a3912"}) (async) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3a00}, 0x0) 12:56:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x11}, 0x0) 12:56:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x118, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x121}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ca}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ec}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd3bd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x118}}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r8, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x18, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x20040090) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, 0xffffffffffffffff, 0x0, 0x100000002) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="41b0a8cdcdfed616bcea575e127ae6de296814b98d47562099", @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="f9bbccd63f68f80d9e427ae7bb89c4af56183123fc0472afc6712e2b3608838eb6a62804e021584fd77ac2aa8acfc82575da23bad4636ca549a1687a70fcd7ae453239b44c012f1184ddfa7c6c452e2d1722bb427208c4be98b893d316926c42b984bb39775c2b5698cad989a86f1525ee42c6e7d915a5c6a425338b13d0448d396851835f4f3ff617aef6bde9f0b22424b8ad59827b69e4aa7f2170f1527090adbeba4f48"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 64) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r12, r11, 0x0, 0x10000a006) 12:56:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x9, 0xf2ef, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0x6, [{@remote, 0x8}, {@multicast1, 0x7fff}]}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x80000000}, {0x9, 0x4}, {0x3, 0x9}, {0xd}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x29, 0x4}]}, {0x0, [0x5f, 0x5f, 0x61, 0x2e, 0x61, 0x41, 0x2e, 0x30]}}, &(0x7f0000000500)=""/8, 0x6a, 0x8}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r11, r10, 0x0, 0x100000002) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000340)=@raw=[@alu={0x4, 0x1, 0xa, 0xa, 0x8, 0xffffffffffffffc0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0xb, 0x2, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x3, 0x6, 0x9, 0x7, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffa}, @generic={0x54, 0x4, 0x7, 0x6, 0x401}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x20}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}], &(0x7f00000003c0)='syzkaller\x00', 0x7ff, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x0, '\x00', r8, 0x15, r9, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x7, 0x6, 0x200}, 0x10, 0xffffffffffffffff, r10}, 0x80) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r13, r12, 0x0, 0x10000a006) 12:56:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3b00}, 0x0) 12:56:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x13}, 0x0) 12:56:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xfffff000}, 0x0) 12:56:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)={0x118, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x121}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ca}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ec}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd3bd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x118}}, 0x800) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r8, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x18, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}}, 0x20040090) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, 0xffffffffffffffff, 0x0, 0x100000002) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="41b0a8cdcdfed616bcea575e127ae6de296814b98d47562099", @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES8, @ANYBLOB="f9bbccd63f68f80d9e427ae7bb89c4af56183123fc0472afc6712e2b3608838eb6a62804e021584fd77ac2aa8acfc82575da23bad4636ca549a1687a70fcd7ae453239b44c012f1184ddfa7c6c452e2d1722bb427208c4be98b893d316926c42b984bb39775c2b5698cad989a86f1525ee42c6e7d915a5c6a425338b13d0448d396851835f4f3ff617aef6bde9f0b22424b8ad59827b69e4aa7f2170f1527090adbeba4f48"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r12, r11, 0x0, 0x10000a006) 12:56:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3c00}, 0x0) 12:56:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x60}, 0x0) [ 1177.941548][ T27] audit: type=1804 audit(1690376188.670:2463): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/674/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 12:56:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="4308522c9577969ddde0c5adca", 0xd}, {&(0x7f0000000340)}, {&(0x7f0000000380)="a05eda903af36c8f5832b4506c4776a21bb4eb415e7712b483aacd8cc02a768ca85e31dbb9c809e8a67f58c60440838b1d19e52de48076e030d8b5d0d2d99c01f460d54239dbd9a1d384172ece080d4d50d92fd3142210ee7c5210dafd8bb2b5e8fc6d7613f3c116d5dfeb324b7f6df6ef962eb460e2521135cc690850f89b1342bfb17d05c1a08431e05675871d92edfd98", 0x92}, {&(0x7f0000000580)="e527a6e9f64140306665eab4b838ea8164a42df92c8b797d3dfe539904dfe040657f953209547c0b8f749e7cea8c7ad7e62c946c5dc8ae7577c9e3798a021abd316fed46debde828f540f20e7cf7ade5546b88638dfe69c40d8cece497df0e8444911d41088a85e75801641bb5665f969010426a032ddbee57903920038f8d7763236f5e24a4c71f3a3deea32425ca954e6f88fd8aad5a32c2ccdaf4", 0x9c}], 0x4, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe5d8}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x43, [@multicast1, @remote, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xdd, 0x3, 0x5, [{@rand_addr=0x64010101, 0x7402e40d}, {@broadcast, 0x7fff}, {@local, 0x3f}, {@rand_addr=0x64010100, 0x7ff}, {@multicast1, 0x40}]}]}}}], 0x88}, 0x4000004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) [ 1178.101523][ T27] audit: type=1804 audit(1690376188.670:2464): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/674/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 [ 1178.277291][ T27] audit: type=1804 audit(1690376188.860:2465): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1237/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1178.411251][ T27] audit: type=1804 audit(1690376188.860:2466): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1237/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 12:56:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3d00}, 0x0) 12:56:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0}, 0x0) 12:56:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xffffff7f}, 0x0) 12:56:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (rerun: 32) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) (async, rerun: 64) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x9, 0xf2ef, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0x6, [{@remote, 0x8}, {@multicast1, 0x7fff}]}]}}}}}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x80000000}, {0x9, 0x4}, {0x3, 0x9}, {0xd}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x29, 0x4}]}, {0x0, [0x5f, 0x5f, 0x61, 0x2e, 0x61, 0x41, 0x2e, 0x30]}}, &(0x7f0000000500)=""/8, 0x6a, 0x8}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r11, r10, 0x0, 0x100000002) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000340)=@raw=[@alu={0x4, 0x1, 0xa, 0xa, 0x8, 0xffffffffffffffc0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0xb, 0x2, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x3, 0x6, 0x9, 0x7, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffa}, @generic={0x54, 0x4, 0x7, 0x6, 0x401}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x20}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}], &(0x7f00000003c0)='syzkaller\x00', 0x7ff, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x0, '\x00', r8, 0x15, r9, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x7, 0x6, 0x200}, 0x10, 0xffffffffffffffff, r10}, 0x80) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r13, r12, 0x0, 0x10000a006) 12:56:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) (async) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="4308522c9577969ddde0c5adca", 0xd}, {&(0x7f0000000340)}, {&(0x7f0000000380)="a05eda903af36c8f5832b4506c4776a21bb4eb415e7712b483aacd8cc02a768ca85e31dbb9c809e8a67f58c60440838b1d19e52de48076e030d8b5d0d2d99c01f460d54239dbd9a1d384172ece080d4d50d92fd3142210ee7c5210dafd8bb2b5e8fc6d7613f3c116d5dfeb324b7f6df6ef962eb460e2521135cc690850f89b1342bfb17d05c1a08431e05675871d92edfd98", 0x92}, {&(0x7f0000000580)="e527a6e9f64140306665eab4b838ea8164a42df92c8b797d3dfe539904dfe040657f953209547c0b8f749e7cea8c7ad7e62c946c5dc8ae7577c9e3798a021abd316fed46debde828f540f20e7cf7ade5546b88638dfe69c40d8cece497df0e8444911d41088a85e75801641bb5665f969010426a032ddbee57903920038f8d7763236f5e24a4c71f3a3deea32425ca954e6f88fd8aad5a32c2ccdaf4", 0x9c}], 0x4, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe5d8}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x43, [@multicast1, @remote, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xdd, 0x3, 0x5, [{@rand_addr=0x64010101, 0x7402e40d}, {@broadcast, 0x7fff}, {@local, 0x3f}, {@rand_addr=0x64010100, 0x7ff}, {@multicast1, 0x40}]}]}}}], 0x88}, 0x4000004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async, rerun: 64) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3e00}, 0x0) 12:56:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x300}, 0x0) 12:56:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x3f00}, 0x0) 12:56:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x9, 0xf2ef, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0x6, [{@remote, 0x8}, {@multicast1, 0x7fff}]}]}}}}}) (async, rerun: 32) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x0, 0x80000000}, {0x9, 0x4}, {0x3, 0x9}, {0xd}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x29, 0x4}]}, {0x0, [0x5f, 0x5f, 0x61, 0x2e, 0x61, 0x41, 0x2e, 0x30]}}, &(0x7f0000000500)=""/8, 0x6a, 0x8}, 0x20) (rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r11, r10, 0x0, 0x100000002) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xf, &(0x7f0000000340)=@raw=[@alu={0x4, 0x1, 0xa, 0xa, 0x8, 0xffffffffffffffc0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0xb, 0x2, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x0, 0x3, 0x6, 0x9, 0x7, 0xfffffffffffffffc, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffa}, @generic={0x54, 0x4, 0x7, 0x6, 0x401}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x20}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}], &(0x7f00000003c0)='syzkaller\x00', 0x7ff, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x0, '\x00', r8, 0x15, r9, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x7, 0x6, 0x200}, 0x10, 0xffffffffffffffff, r10}, 0x80) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 64) sendfile(r13, r12, 0x0, 0x10000a006) (rerun: 64) 12:56:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)="4308522c9577969ddde0c5adca", 0xd}, {&(0x7f0000000340)}, {&(0x7f0000000380)="a05eda903af36c8f5832b4506c4776a21bb4eb415e7712b483aacd8cc02a768ca85e31dbb9c809e8a67f58c60440838b1d19e52de48076e030d8b5d0d2d99c01f460d54239dbd9a1d384172ece080d4d50d92fd3142210ee7c5210dafd8bb2b5e8fc6d7613f3c116d5dfeb324b7f6df6ef962eb460e2521135cc690850f89b1342bfb17d05c1a08431e05675871d92edfd98", 0x92}, {&(0x7f0000000580)="e527a6e9f64140306665eab4b838ea8164a42df92c8b797d3dfe539904dfe040657f953209547c0b8f749e7cea8c7ad7e62c946c5dc8ae7577c9e3798a021abd316fed46debde828f540f20e7cf7ade5546b88638dfe69c40d8cece497df0e8444911d41088a85e75801641bb5665f969010426a032ddbee57903920038f8d7763236f5e24a4c71f3a3deea32425ca954e6f88fd8aad5a32c2ccdaf4", 0x9c}], 0x4, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe5d8}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x43, [@multicast1, @remote, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xdd, 0x3, 0x5, [{@rand_addr=0x64010101, 0x7402e40d}, {@broadcast, 0x7fff}, {@local, 0x3f}, {@rand_addr=0x64010100, 0x7ff}, {@multicast1, 0x40}]}]}}}], 0x88}, 0x4000004) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x3e8}, 0x0) 12:56:29 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4000}, 0x0) 12:56:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x20, 0x4, {{0x24, 0x4, 0x0, 0x17, 0x90, 0x64, 0x0, 0xcc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x1, [{@local, 0x96}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x9, [{@broadcast, 0x8}, {@private=0xa010100, 0x401}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@loopback, 0x7fff}]}, @timestamp={0x44, 0x20, 0xd7, 0x0, 0x4, [0x81, 0x7ff, 0x7, 0x4, 0x4, 0xcab, 0xfffffffc]}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x4, [{@loopback, 0x800}, {@loopback, 0x4}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0xc8, 0x40, 0x7, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x5a3, 0x5}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000740)=0x200, 0x4) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) r13 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8085) 12:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xffffff9e}, 0x0) 12:56:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x481}, 0x0) 12:56:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4100}, 0x0) 12:56:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x500}, 0x0) 12:56:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x600}, 0x0) 12:56:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4200}, 0x0) [ 1179.690210][ T6360] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 12:56:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x700}, 0x0) [ 1179.785841][ T6360] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 12:56:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4300}, 0x0) 12:56:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r6, r5, 0x0, 0x10000a006) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x20, 0x4, {{0x24, 0x4, 0x0, 0x17, 0x90, 0x64, 0x0, 0xcc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x1, [{@local, 0x96}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x9, [{@broadcast, 0x8}, {@private=0xa010100, 0x401}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@loopback, 0x7fff}]}, @timestamp={0x44, 0x20, 0xd7, 0x0, 0x4, [0x81, 0x7ff, 0x7, 0x4, 0x4, 0xcab, 0xfffffffc]}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x4, [{@loopback, 0x800}, {@loopback, 0x4}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0xc8, 0x40, 0x7, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x5a3, 0x5}}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000740)=0x200, 0x4) (async) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) (async) r13 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8085) 12:56:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xfffffff0}, 0x0) 12:56:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4400}, 0x0) 12:56:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x900}, 0x0) 12:56:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xa00}, 0x0) 12:56:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4500}, 0x0) 12:56:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:31 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x20, 0x4, {{0x24, 0x4, 0x0, 0x17, 0x90, 0x64, 0x0, 0xcc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x1, [{@local, 0x96}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x9, [{@broadcast, 0x8}, {@private=0xa010100, 0x401}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@loopback, 0x7fff}]}, @timestamp={0x44, 0x20, 0xd7, 0x0, 0x4, [0x81, 0x7ff, 0x7, 0x4, 0x4, 0xcab, 0xfffffffc]}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x4, [{@loopback, 0x800}, {@loopback, 0x4}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x20, 0x4, {{0x24, 0x4, 0x0, 0x17, 0x90, 0x64, 0x0, 0xcc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xff, 0x1, 0x1, [{@local, 0x96}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x9, [{@broadcast, 0x8}, {@private=0xa010100, 0x401}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7}, {@loopback, 0x7fff}]}, @timestamp={0x44, 0x20, 0xd7, 0x0, 0x4, [0x81, 0x7ff, 0x7, 0x4, 0x4, 0xcab, 0xfffffffc]}, @timestamp_prespec={0x44, 0x14, 0xcd, 0x3, 0x4, [{@loopback, 0x800}, {@loopback, 0x4}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0xc8, 0x40, 0x7, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x5a3, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0xc8, 0x40, 0x7, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x5a3, 0x5}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000740)=0x200, 0x4) socket(0x11, 0x800000003, 0x0) (async) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) socket(0x11, 0x800000003, 0x0) (async) r13 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x9}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x8085) 12:56:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x3000000000000}, 0x0) 12:56:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4600}, 0x0) 12:56:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb00}, 0x0) 12:56:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4700}, 0x0) 12:56:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x5bdd, 0x0, 0x2, 0x9, 0x0, 0xff}, 0x20) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r7 = accept4(r3, &(0x7f0000000380)=@rc={0x1f, @fixed}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x18, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8012}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r8, 0x0, 0x10000a006) 12:56:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xc00}, 0x0) [ 1181.211697][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 1181.211719][ T27] audit: type=1804 audit(1690376191.940:2489): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/681/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4800}, 0x0) 12:56:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xdb3}, 0x0) 12:56:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x40030000000000}, 0x0) 12:56:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1181.325181][ T27] audit: type=1804 audit(1690376191.940:2490): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/681/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe00}, 0x0) 12:56:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4900}, 0x0) [ 1181.605159][ T27] audit: type=1804 audit(1690376192.340:2491): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/682/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf00}, 0x0) 12:56:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = accept(r0, &(0x7f0000000440)=@isdn, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000500)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x34, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) (async) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x5bdd, 0x0, 0x2, 0x9, 0x0, 0xff}, 0x20) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r7 = accept4(r3, &(0x7f0000000380)=@rc={0x1f, @fixed}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x18, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8012}, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r8, 0x0, 0x10000a006) 12:56:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4a00}, 0x0) [ 1181.775139][ T27] audit: type=1804 audit(1690376192.340:2492): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/682/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) (async) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x5bdd, 0x0, 0x2, 0x9, 0x0, 0xff}, 0x20) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r7 = accept4(r3, &(0x7f0000000380)=@rc={0x1f, @fixed}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x18, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8012}, 0x1) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r8, 0x0, 0x10000a006) 12:56:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1100}, 0x0) 12:56:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4b00}, 0x0) 12:56:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) [ 1182.043944][ T27] audit: type=1804 audit(1690376192.780:2493): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1243/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 12:56:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1300}, 0x0) 12:56:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 12:56:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4c00}, 0x0) [ 1182.148782][ T27] audit: type=1804 audit(1690376192.800:2494): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/683/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 12:56:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40000010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) [ 1182.307383][ T27] audit: type=1804 audit(1690376192.800:2495): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/683/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 12:56:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x5865}, 0x0) [ 1182.376701][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.383108][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.497016][ T27] audit: type=1804 audit(1690376192.810:2496): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1243/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 12:56:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = accept(r0, &(0x7f0000000440)=@isdn, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000500)) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x34, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6000}, 0x0) 12:56:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4d00}, 0x0) [ 1182.621682][ T27] audit: type=1804 audit(1690376193.320:2497): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/684/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 12:56:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x100000000000000}, 0x0) 12:56:33 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 12:56:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4e00}, 0x0) [ 1182.767361][ T27] audit: type=1804 audit(1690376193.330:2498): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/684/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 12:56:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6558}, 0x0) 12:56:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1410, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = accept(r0, &(0x7f0000000440)=@isdn, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000500)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x34, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x4f00}, 0x0) 12:56:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x8100}, 0x0) 12:56:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40000010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40000010) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r6, r5, 0x0, 0x10000a006) (async) 12:56:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5000}, 0x0) 12:56:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 12:56:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb30d}, 0x0) 12:56:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x200000000000000}, 0x0) 12:56:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5100}, 0x0) 12:56:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe803}, 0x0) 12:56:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5200}, 0x0) 12:56:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf000}, 0x0) 12:56:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 12:56:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5300}, 0x0) 12:56:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x40000010) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x34000}, 0x0) 12:56:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x300000000000000}, 0x0) 12:56:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5400}, 0x0) 12:56:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) r7 = socket$caif_stream(0x25, 0x1, 0x4) write$binfmt_script(r7, &(0x7f00000002c0)=ANY=[], 0x3af4701e) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 12:56:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4004) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x400300}, 0x0) 12:56:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5500}, 0x0) 12:56:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5600}, 0x0) 12:56:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 12:56:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x4004) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async, rerun: 32) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 64) sendfile(r6, r5, 0x0, 0x10000a006) (rerun: 64) 12:56:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5700}, 0x0) 12:56:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x400000000000000}, 0x0) 12:56:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffff}, 0x0) 12:56:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000000)={{r4}, {@val, @actul_num={@val=0x2d, 0x9d00000000000000, 0x6d}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000e28bd70040000000014000000080003829a9151765b9b27c556c4f241af68f806763aa57e85c0c1d727a4ec45c679c2af72b2fa", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000002) recvmmsg(r8, &(0x7f0000001480)=[{{&(0x7f0000000280)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000500)}, 0x101}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3, &(0x7f0000000800)=""/167, 0xa7}, 0xe9d1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f00000006c0)}], 0x3, &(0x7f0000000a40)=""/97, 0x61}, 0x1f}, {{&(0x7f0000000ac0)=@ax25={{0x3, @null}, [@netrom, @netrom, @rose, @remote, @bcast, @remote, @netrom, @default]}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/250, 0xfa}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)=""/15, 0xf}], 0x4, &(0x7f0000000d80)=""/151, 0x97}, 0x7}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/143, 0x8f}, {&(0x7f0000000f40)=""/115, 0x73}, {&(0x7f0000000fc0)=""/147, 0x93}, {&(0x7f0000001080)=""/168, 0xa8}, {&(0x7f0000001140)=""/167, 0xa7}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/213, 0xd5}], 0x8, &(0x7f00000013c0)=""/180, 0xb4}, 0x8}], 0x5, 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) r7 = socket$caif_stream(0x25, 0x1, 0x4) write$binfmt_script(r7, &(0x7f00000002c0)=ANY=[], 0x3af4701e) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5800}, 0x0) 12:56:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1000000}, 0x0) 12:56:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x0) 12:56:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x500000000000000}, 0x0) 12:56:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x2000000}, 0x0) 12:56:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5900}, 0x0) 12:56:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x3000000}, 0x0) 12:56:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5a00}, 0x0) 12:56:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r6, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) (async) r7 = socket$caif_stream(0x25, 0x1, 0x4) write$binfmt_script(r7, &(0x7f00000002c0)=ANY=[], 0x3af4701e) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x0) 12:56:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000000)={{r4}, {@val, @actul_num={@val=0x2d, 0x9d00000000000000, 0x6d}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000e28bd70040000000014000000080003829a9151765b9b27c556c4f241af68f806763aa57e85c0c1d727a4ec45c679c2af72b2fa", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000002) (async) recvmmsg(r8, &(0x7f0000001480)=[{{&(0x7f0000000280)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000500)}, 0x101}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3, &(0x7f0000000800)=""/167, 0xa7}, 0xe9d1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f00000006c0)}], 0x3, &(0x7f0000000a40)=""/97, 0x61}, 0x1f}, {{&(0x7f0000000ac0)=@ax25={{0x3, @null}, [@netrom, @netrom, @rose, @remote, @bcast, @remote, @netrom, @default]}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/250, 0xfa}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)=""/15, 0xf}], 0x4, &(0x7f0000000d80)=""/151, 0x97}, 0x7}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/143, 0x8f}, {&(0x7f0000000f40)=""/115, 0x73}, {&(0x7f0000000fc0)=""/147, 0x93}, {&(0x7f0000001080)=""/168, 0xa8}, {&(0x7f0000001140)=""/167, 0xa7}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/213, 0xd5}], 0x8, &(0x7f00000013c0)=""/180, 0xb4}, 0x8}], 0x5, 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5b00}, 0x0) 12:56:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x4000000}, 0x0) 12:56:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x600000000000000}, 0x0) 12:56:37 executing program 3: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000580)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000440)=0x9, 0x8) r6 = accept4$ax25(r3, &(0x7f0000000340)={{0x3, @netrom}, [@remote, @netrom, @default, @default, @default, @default, @null, @rose]}, &(0x7f0000000000)=0x48, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x10) write$binfmt_script(r9, &(0x7f00000003c0)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5c00}, 0x0) 12:56:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x5000000}, 0x0) [ 1186.394560][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 1186.394579][ T27] audit: type=1804 audit(1690376197.130:2526): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/691/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 12:56:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000000)={{r4}, {@val, @actul_num={@val=0x2d, 0x9d00000000000000, 0x6d}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000e28bd70040000000014000000080003829a9151765b9b27c556c4f241af68f806763aa57e85c0c1d727a4ec45c679c2af72b2fa", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000002) (async) recvmmsg(r8, &(0x7f0000001480)=[{{&(0x7f0000000280)=@x25={0x9, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000500)}, 0x101}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3, &(0x7f0000000800)=""/167, 0xa7}, 0xe9d1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f00000006c0)}], 0x3, &(0x7f0000000a40)=""/97, 0x61}, 0x1f}, {{&(0x7f0000000ac0)=@ax25={{0x3, @null}, [@netrom, @netrom, @rose, @remote, @bcast, @remote, @netrom, @default]}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/250, 0xfa}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/161, 0xa1}, {&(0x7f0000000d00)=""/15, 0xf}], 0x4, &(0x7f0000000d80)=""/151, 0x97}, 0x7}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/143, 0x8f}, {&(0x7f0000000f40)=""/115, 0x73}, {&(0x7f0000000fc0)=""/147, 0x93}, {&(0x7f0000001080)=""/168, 0xa8}, {&(0x7f0000001140)=""/167, 0xa7}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/213, 0xd5}], 0x8, &(0x7f00000013c0)=""/180, 0xb4}, 0x8}], 0x5, 0x2, 0x0) (async, rerun: 32) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (rerun: 32) sendfile(r6, r5, 0x0, 0x10000a006) [ 1186.531017][ T27] audit: type=1804 audit(1690376197.160:2527): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/691/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 12:56:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x0) 12:56:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5d00}, 0x0) 12:56:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6000000}, 0x0) 12:56:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5e00}, 0x0) 12:56:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x700000000000000}, 0x0) 12:56:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r7, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x154, 0x0, 0x8ed521bbda3d0219, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x78f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd4c}, {0x6, 0x11, 0xe22}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb7661cd}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf5b430}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x3f}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 12:56:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x7000000}, 0x0) 12:56:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x5f00}, 0x0) [ 1187.004337][ T27] audit: type=1804 audit(1690376197.740:2528): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/692/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1187.131544][ T27] audit: type=1804 audit(1690376197.740:2529): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/692/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1187.281817][ T27] audit: type=1804 audit(1690376197.990:2530): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1252/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1187.365114][ T27] audit: type=1804 audit(1690376198.000:2531): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1252/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1187.427404][ T27] audit: type=1804 audit(1690376198.100:2532): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1499/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 1187.488663][ T27] audit: type=1804 audit(1690376198.100:2533): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1499/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 12:56:38 executing program 3: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000580)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000440)=0x9, 0x8) r6 = accept4$ax25(r3, &(0x7f0000000340)={{0x3, @netrom}, [@remote, @netrom, @default, @default, @default, @default, @null, @rose]}, &(0x7f0000000000)=0x48, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x10) write$binfmt_script(r9, &(0x7f00000003c0)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) (async) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x800000000000000}, 0x0) 12:56:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x8000000}, 0x0) 12:56:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6000}, 0x0) 12:56:38 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:38 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r7, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x154, 0x0, 0x8ed521bbda3d0219, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x78f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd4c}, {0x6, 0x11, 0xe22}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb7661cd}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf5b430}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x3f}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x810) [ 1187.553670][ T27] audit: type=1804 audit(1690376198.130:2534): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1252/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 12:56:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6100}, 0x0) 12:56:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x9000000}, 0x0) 12:56:38 executing program 3: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000580)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000440)=0x9, 0x8) r6 = accept4$ax25(r3, &(0x7f0000000340)={{0x3, @netrom}, [@remote, @netrom, @default, @default, @default, @default, @null, @rose]}, &(0x7f0000000000)=0x48, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000002c0)) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x10) write$binfmt_script(r9, &(0x7f00000003c0)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xa000000}, 0x0) 12:56:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6200}, 0x0) [ 1187.839436][ T27] audit: type=1804 audit(1690376198.570:2535): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/693/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 12:56:38 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r7, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x154, 0x0, 0x8ed521bbda3d0219, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x78f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd4c}, {0x6, 0x11, 0xe22}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xb7661cd}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf5b430}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x3f}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 12:56:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6300}, 0x0) 12:56:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x900000000000000}, 0x0) 12:56:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb000000}, 0x0) 12:56:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r6, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x5ec, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x378}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xdca}, @NL80211_ATTR_FRAME={0x1b8, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_a, @device_b, @initial, {0x1, 0x81}}, 0x1012, 0x65, @default, @val, @void, [{0xdd, 0xe4, "2a4e82e71ece00729d2ba35e36c9fc4200b8f78414d4f881f5984b75b01f71ce31bd29ed8c96982104f3fc41b32abb7925d89a1d5ce932299a1702b50c6e00f43282fcdb1d74933f9ea15841b32792823878861d4213cea718326d5baf0ffa51206321a03a1b9c4cd3351eb71d0ec8a84e4b4f6888d98b0bc7196f3ed504c443ea1a32d2837d42e73f0d507259db618d2c2952ea9d00f8ea1f719ca6236e9366ce5ddb979400de35055ac5e0da3eba4ea7fb30a91d67d2af8729ab4e3e96a2b62af8cb6c4dee7bc19331aa5047d2d2572d539a17c42687c7c02a936468584d2cd84634a1"}, {0xdd, 0xac, "99572515695ef4862b224cac82eaa37e1816a3562c03aa3b07e1b7d017604a32dc054242d26747cb606edc842d4abe250b018bddb803ced987f8da2ee2d342592193095ab48649c5fef144c89b253386462dcf36f850a4210d27fa5a8e01dcf913ff7c8c4286d308abf4770bf1183ce36a522826ca63baffaf9c13dda736e6e3df4c75845903d5b471a13cd8c10c0fc25bc4bd73535d0b02de5bab76b0eac690eb9c2084862027f440267e75"}]}}, @NL80211_ATTR_FRAME={0x392, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_a, @broadcast, @random="b30afb21b399", {0x4, 0x4}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x4000, 0xe, @default, @val={0x1, 0x5, [{0x36, 0x1}, {0xb, 0x1}, {0x5}, {0x6c, 0x1}, {0x30}]}, @void, [{0xdd, 0xb2, "ed54078d8e9c81e4c70d532a24f7597801d2c1a5cc92d4a2bc3a66d888b6f1d308367813425f62c003af8defb9a49d3b1273e933f9765f29bf19ae8195f5865c935ffcff679498f27b2e68d97897eb357874a4e52ecb2a6458a430c64fc0ff267e188527b7f6c9d39a1def2b039ed690f4211c27c3235a939f71af9adb44bdfe8480e48aedcf1695b63452a17d4200f2df06c70afe3bed3db21ffda09bd1c119307b42f0e2decf1e73f74d9c2629e64bff95"}, {0xdd, 0x51, "a4598af855c6d9c1ad762a6836d50099f27e78139ea8971f8cad30fc810a4104aa813b4926f8a664617278ea6f6a2fab92344e3a529761e2c9b148421f56309dbba0f590f7205bb1920d00f2e5419298a4"}, {0xdd, 0xc1, "c46f476c517171ed3a80e0d3c23d858a86a6aa4f3a61b76c88fde3f17915be453b537d7bdee2f47d443e59cb1277c30b358c9231fc770582ded3580f7ea4aae7e424b00d73ae8a2b6de7f5da96766b34d54ffbe2d24b727f3e72962af7664f98deeb5d9586b950cba026ac211184cab09330eea88fe15d63fdcc109ecf1472cf83db01c3010e21b88430819ecb764c7c9a149f17029b04c893776947d6fdfa4c747ac25e0e251e25325a9d9b588fb9e504e3eabdabaf0773f3d6775a21cf37f9f4"}, {0xdd, 0x5d, "0c0a648cbbac1ef8ec95e4239ce97d3c625cb9a6e71d248f074104ec168cacb0608225118c06f996412ca0901060500858c3835533b0c8b7a437b3d52aac7d60811fe349c555e12674b76f9174725f4e79df5f1560e24fca790b86492b"}, {0xdd, 0x6a, "ede616d3f438606e234c95a61ff471e0868a5f9483e92d8d73b4f222d3b6754feb1c8aefe723de091f55e1516e26e2bd16079bde33fb75915b7a3e7988ff73f33b4b4d4440e33f29fe99238afeb67313875ac28643b3680c84d2887a3d82ea9345caf3d04d30c686fdf8"}, {0xdd, 0x3c, "0571f64a5ea280b584981536bef27be5738c37023714786c79a534713b559e7d3bca835d35a337ab5a1193642c29d7d42fe688933ba328901b9a9ab4"}, {0xdd, 0x65, "a88f6bf6130b8fe571459aed0f824b18763d67c03d553bbf6ef11b607d44f323e9b7277e727ab3a1547ce8d865609f98dead867aeea4c318a60e5b6c102e2f099c046e2ad6ab88191ec5eed3a5ecca0d390c92ecfba9dce11fa2e7fa4cb554ad42d2f5a2af"}, {0xdd, 0x1a, "3d23e4f2a27187e73d80d63b92cfcd7eebb386e92d6944ea432f"}, {0xdd, 0xd, "ec0e703179bc83d3f252a6c1b6"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x21f}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="a640442aa7e0", {0x6, 0x5}}, @ver_80211n={0x0, 0x3f, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x9, @val={0x8c, 0x18, {0x4ea, "2784f285aa53", @long="1415f2e465635bfee52c15546a5c411d"}}}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="170099000000000000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6400}, 0x0) 12:56:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xc000000}, 0x0) 12:56:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xe00000000000000}, 0x0) 12:56:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6500}, 0x0) 12:56:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe000000}, 0x0) 12:56:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r6, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x5ec, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x378}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xdca}, @NL80211_ATTR_FRAME={0x1b8, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_a, @device_b, @initial, {0x1, 0x81}}, 0x1012, 0x65, @default, @val, @void, [{0xdd, 0xe4, "2a4e82e71ece00729d2ba35e36c9fc4200b8f78414d4f881f5984b75b01f71ce31bd29ed8c96982104f3fc41b32abb7925d89a1d5ce932299a1702b50c6e00f43282fcdb1d74933f9ea15841b32792823878861d4213cea718326d5baf0ffa51206321a03a1b9c4cd3351eb71d0ec8a84e4b4f6888d98b0bc7196f3ed504c443ea1a32d2837d42e73f0d507259db618d2c2952ea9d00f8ea1f719ca6236e9366ce5ddb979400de35055ac5e0da3eba4ea7fb30a91d67d2af8729ab4e3e96a2b62af8cb6c4dee7bc19331aa5047d2d2572d539a17c42687c7c02a936468584d2cd84634a1"}, {0xdd, 0xac, "99572515695ef4862b224cac82eaa37e1816a3562c03aa3b07e1b7d017604a32dc054242d26747cb606edc842d4abe250b018bddb803ced987f8da2ee2d342592193095ab48649c5fef144c89b253386462dcf36f850a4210d27fa5a8e01dcf913ff7c8c4286d308abf4770bf1183ce36a522826ca63baffaf9c13dda736e6e3df4c75845903d5b471a13cd8c10c0fc25bc4bd73535d0b02de5bab76b0eac690eb9c2084862027f440267e75"}]}}, @NL80211_ATTR_FRAME={0x392, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_a, @broadcast, @random="b30afb21b399", {0x4, 0x4}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x4000, 0xe, @default, @val={0x1, 0x5, [{0x36, 0x1}, {0xb, 0x1}, {0x5}, {0x6c, 0x1}, {0x30}]}, @void, [{0xdd, 0xb2, "ed54078d8e9c81e4c70d532a24f7597801d2c1a5cc92d4a2bc3a66d888b6f1d308367813425f62c003af8defb9a49d3b1273e933f9765f29bf19ae8195f5865c935ffcff679498f27b2e68d97897eb357874a4e52ecb2a6458a430c64fc0ff267e188527b7f6c9d39a1def2b039ed690f4211c27c3235a939f71af9adb44bdfe8480e48aedcf1695b63452a17d4200f2df06c70afe3bed3db21ffda09bd1c119307b42f0e2decf1e73f74d9c2629e64bff95"}, {0xdd, 0x51, "a4598af855c6d9c1ad762a6836d50099f27e78139ea8971f8cad30fc810a4104aa813b4926f8a664617278ea6f6a2fab92344e3a529761e2c9b148421f56309dbba0f590f7205bb1920d00f2e5419298a4"}, {0xdd, 0xc1, "c46f476c517171ed3a80e0d3c23d858a86a6aa4f3a61b76c88fde3f17915be453b537d7bdee2f47d443e59cb1277c30b358c9231fc770582ded3580f7ea4aae7e424b00d73ae8a2b6de7f5da96766b34d54ffbe2d24b727f3e72962af7664f98deeb5d9586b950cba026ac211184cab09330eea88fe15d63fdcc109ecf1472cf83db01c3010e21b88430819ecb764c7c9a149f17029b04c893776947d6fdfa4c747ac25e0e251e25325a9d9b588fb9e504e3eabdabaf0773f3d6775a21cf37f9f4"}, {0xdd, 0x5d, "0c0a648cbbac1ef8ec95e4239ce97d3c625cb9a6e71d248f074104ec168cacb0608225118c06f996412ca0901060500858c3835533b0c8b7a437b3d52aac7d60811fe349c555e12674b76f9174725f4e79df5f1560e24fca790b86492b"}, {0xdd, 0x6a, "ede616d3f438606e234c95a61ff471e0868a5f9483e92d8d73b4f222d3b6754feb1c8aefe723de091f55e1516e26e2bd16079bde33fb75915b7a3e7988ff73f33b4b4d4440e33f29fe99238afeb67313875ac28643b3680c84d2887a3d82ea9345caf3d04d30c686fdf8"}, {0xdd, 0x3c, "0571f64a5ea280b584981536bef27be5738c37023714786c79a534713b559e7d3bca835d35a337ab5a1193642c29d7d42fe688933ba328901b9a9ab4"}, {0xdd, 0x65, "a88f6bf6130b8fe571459aed0f824b18763d67c03d553bbf6ef11b607d44f323e9b7277e727ab3a1547ce8d865609f98dead867aeea4c318a60e5b6c102e2f099c046e2ad6ab88191ec5eed3a5ecca0d390c92ecfba9dce11fa2e7fa4cb554ad42d2f5a2af"}, {0xdd, 0x1a, "3d23e4f2a27187e73d80d63b92cfcd7eebb386e92d6944ea432f"}, {0xdd, 0xd, "ec0e703179bc83d3f252a6c1b6"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x21f}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="a640442aa7e0", {0x6, 0x5}}, @ver_80211n={0x0, 0x3f, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x9, @val={0x8c, 0x18, {0x4ea, "2784f285aa53", @long="1415f2e465635bfee52c15546a5c411d"}}}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf000000}, 0x0) 12:56:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6600}, 0x0) 12:56:39 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r6, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x5ec, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x378}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xdca}, @NL80211_ATTR_FRAME={0x1b8, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_a, @device_b, @initial, {0x1, 0x81}}, 0x1012, 0x65, @default, @val, @void, [{0xdd, 0xe4, "2a4e82e71ece00729d2ba35e36c9fc4200b8f78414d4f881f5984b75b01f71ce31bd29ed8c96982104f3fc41b32abb7925d89a1d5ce932299a1702b50c6e00f43282fcdb1d74933f9ea15841b32792823878861d4213cea718326d5baf0ffa51206321a03a1b9c4cd3351eb71d0ec8a84e4b4f6888d98b0bc7196f3ed504c443ea1a32d2837d42e73f0d507259db618d2c2952ea9d00f8ea1f719ca6236e9366ce5ddb979400de35055ac5e0da3eba4ea7fb30a91d67d2af8729ab4e3e96a2b62af8cb6c4dee7bc19331aa5047d2d2572d539a17c42687c7c02a936468584d2cd84634a1"}, {0xdd, 0xac, "99572515695ef4862b224cac82eaa37e1816a3562c03aa3b07e1b7d017604a32dc054242d26747cb606edc842d4abe250b018bddb803ced987f8da2ee2d342592193095ab48649c5fef144c89b253386462dcf36f850a4210d27fa5a8e01dcf913ff7c8c4286d308abf4770bf1183ce36a522826ca63baffaf9c13dda736e6e3df4c75845903d5b471a13cd8c10c0fc25bc4bd73535d0b02de5bab76b0eac690eb9c2084862027f440267e75"}]}}, @NL80211_ATTR_FRAME={0x392, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_a, @broadcast, @random="b30afb21b399", {0x4, 0x4}}, @ver_80211n={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x4000, 0xe, @default, @val={0x1, 0x5, [{0x36, 0x1}, {0xb, 0x1}, {0x5}, {0x6c, 0x1}, {0x30}]}, @void, [{0xdd, 0xb2, "ed54078d8e9c81e4c70d532a24f7597801d2c1a5cc92d4a2bc3a66d888b6f1d308367813425f62c003af8defb9a49d3b1273e933f9765f29bf19ae8195f5865c935ffcff679498f27b2e68d97897eb357874a4e52ecb2a6458a430c64fc0ff267e188527b7f6c9d39a1def2b039ed690f4211c27c3235a939f71af9adb44bdfe8480e48aedcf1695b63452a17d4200f2df06c70afe3bed3db21ffda09bd1c119307b42f0e2decf1e73f74d9c2629e64bff95"}, {0xdd, 0x51, "a4598af855c6d9c1ad762a6836d50099f27e78139ea8971f8cad30fc810a4104aa813b4926f8a664617278ea6f6a2fab92344e3a529761e2c9b148421f56309dbba0f590f7205bb1920d00f2e5419298a4"}, {0xdd, 0xc1, "c46f476c517171ed3a80e0d3c23d858a86a6aa4f3a61b76c88fde3f17915be453b537d7bdee2f47d443e59cb1277c30b358c9231fc770582ded3580f7ea4aae7e424b00d73ae8a2b6de7f5da96766b34d54ffbe2d24b727f3e72962af7664f98deeb5d9586b950cba026ac211184cab09330eea88fe15d63fdcc109ecf1472cf83db01c3010e21b88430819ecb764c7c9a149f17029b04c893776947d6fdfa4c747ac25e0e251e25325a9d9b588fb9e504e3eabdabaf0773f3d6775a21cf37f9f4"}, {0xdd, 0x5d, "0c0a648cbbac1ef8ec95e4239ce97d3c625cb9a6e71d248f074104ec168cacb0608225118c06f996412ca0901060500858c3835533b0c8b7a437b3d52aac7d60811fe349c555e12674b76f9174725f4e79df5f1560e24fca790b86492b"}, {0xdd, 0x6a, "ede616d3f438606e234c95a61ff471e0868a5f9483e92d8d73b4f222d3b6754feb1c8aefe723de091f55e1516e26e2bd16079bde33fb75915b7a3e7988ff73f33b4b4d4440e33f29fe99238afeb67313875ac28643b3680c84d2887a3d82ea9345caf3d04d30c686fdf8"}, {0xdd, 0x3c, "0571f64a5ea280b584981536bef27be5738c37023714786c79a534713b559e7d3bca835d35a337ab5a1193642c29d7d42fe688933ba328901b9a9ab4"}, {0xdd, 0x65, "a88f6bf6130b8fe571459aed0f824b18763d67c03d553bbf6ef11b607d44f323e9b7277e727ab3a1547ce8d865609f98dead867aeea4c318a60e5b6c102e2f099c046e2ad6ab88191ec5eed3a5ecca0d390c92ecfba9dce11fa2e7fa4cb554ad42d2f5a2af"}, {0xdd, 0x1a, "3d23e4f2a27187e73d80d63b92cfcd7eebb386e92d6944ea432f"}, {0xdd, 0xd, "ec0e703179bc83d3f252a6c1b6"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x21f}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3c, 0x33, @disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="a640442aa7e0", {0x6, 0x5}}, @ver_80211n={0x0, 0x3f, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x9, @val={0x8c, 0x18, {0x4ea, "2784f285aa53", @long="1415f2e465635bfee52c15546a5c411d"}}}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6700}, 0x0) 12:56:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xa}, 0x0) 12:56:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x10000000}, 0x0) 12:56:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xf00000000000000}, 0x0) 12:56:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="170099000000000000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6800}, 0x0) 12:56:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000340)=""/107, 0x6b}], 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x134, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0c22127a4e9e7d3a4ca061f7f6d83e7614021abd91ab7a22"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc0f6a8c791b8836b9743926be5ee357623fdfb4fae40a4c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ce1b020dad07936048d4f2e39c652533b87b02653bbe4bc"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a305ab27f11f82a3bd92dc2342f349af0cc88f09588383f6"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9f01cda8942b6efe95fcfad932e21449967ffa6598d8a42"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r12, r11, 0x0, 0x10000a006) 12:56:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6900}, 0x0) 12:56:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x11000000}, 0x0) 12:56:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x8}, 0x0) 12:56:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="170099000000000000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="170099000000000000000000"], 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) (async) 12:56:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6a00}, 0x0) 12:56:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x13000000}, 0x0) 12:56:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004810) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6b00}, 0x0) 12:56:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 12:56:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x60000000}, 0x0) 12:56:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6c00}, 0x0) 12:56:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000340)=""/107, 0x6b}], 0x2, 0x0, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x134, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0c22127a4e9e7d3a4ca061f7f6d83e7614021abd91ab7a22"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc0f6a8c791b8836b9743926be5ee357623fdfb4fae40a4c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ce1b020dad07936048d4f2e39c652533b87b02653bbe4bc"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a305ab27f11f82a3bd92dc2342f349af0cc88f09588383f6"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9f01cda8942b6efe95fcfad932e21449967ffa6598d8a42"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r12, r11, 0x0, 0x10000a006) 12:56:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x65580000}, 0x0) 12:56:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6d00}, 0x0) 12:56:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x81000000}, 0x0) 12:56:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000340)=""/107, 0x6b}], 0x2, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x134, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0c22127a4e9e7d3a4ca061f7f6d83e7614021abd91ab7a22"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc0f6a8c791b8836b9743926be5ee357623fdfb4fae40a4c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6ce1b020dad07936048d4f2e39c652533b87b02653bbe4bc"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a305ab27f11f82a3bd92dc2342f349af0cc88f09588383f6"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9f01cda8942b6efe95fcfad932e21449967ffa6598d8a42"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 32) sendfile(r12, r11, 0x0, 0x10000a006) (rerun: 32) 12:56:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6e00}, 0x0) 12:56:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x3}, 0x0) 12:56:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x81040000}, 0x0) 12:56:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x4000000000000000}, 0x0) 12:56:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x6f00}, 0x0) 12:56:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:42 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7000}, 0x0) 12:56:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x88a8ffff}, 0x0) 12:56:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7100}, 0x0) 12:56:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x9effffff}, 0x0) 12:56:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7200}, 0x0) 12:56:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) (async) 12:56:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x5400000000000000}, 0x0) 12:56:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb30d0000}, 0x0) 12:56:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7300}, 0x0) [ 1191.968392][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1191.968413][ T27] audit: type=1804 audit(1690376202.700:2550): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/699/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 12:56:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000840)=""/107, 0x6b}], 0x6, 0x4bae, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000000)) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe8030000}, 0x0) [ 1192.112199][ T27] audit: type=1804 audit(1690376202.740:2551): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/699/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 12:56:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7400}, 0x0) [ 1192.426505][ T27] audit: type=1804 audit(1690376203.160:2552): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1508/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 1192.566050][ T27] audit: type=1804 audit(1690376203.240:2553): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1508/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 1192.632546][ T27] audit: type=1804 audit(1690376203.250:2554): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1508/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 12:56:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffff}, 0x0) 12:56:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7500}, 0x0) 12:56:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x6000000000000000}, 0x0) 12:56:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7600}, 0x0) 12:56:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf1ffffff}, 0x0) 12:56:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/157, 0x9d}, {}], 0x2, 0x3, 0x4) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001600)={0x0, 0x2d, 0x2a, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000000740)={0x0, 0x5, @start={r10, 0x1, "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", "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"}, [0x8, 0x6, 0x0, 0x8, 0x4, 0x0, 0x401, 0x400, 0xfffffffffffffeff, 0x7ff, 0x8000, 0x7ff, 0x2, 0x8, 0x56b, 0x20, 0x1, 0x0, 0x7fffffff, 0x2, 0x9, 0x4, 0x8, 0x2, 0x1, 0x800, 0xffffffefffffffff, 0x6, 0xff, 0x10000, 0x10, 0xfffffffffffffff9, 0x100000000, 0x7fffffff, 0x0, 0x5, 0x10001, 0x8, 0xb1a, 0x3, 0x5, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd, 0xaa, 0x1, 0x3, 0x2, 0xffffffffffff0001, 0x3, 0x0, 0x7, 0xffffffffffffff24, 0x20, 0x101, 0xdba, 0x9, 0xf28, 0x7, 0x1, 0x0, 0x0, 0x8000, 0x400]}) 12:56:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfcffffff}, 0x0) 12:56:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7700}, 0x0) 12:56:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) (async) preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000840)=""/107, 0x6b}], 0x6, 0x4bae, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000000)) (async, rerun: 32) sendfile(r7, r6, 0x0, 0x10000a006) (rerun: 32) 12:56:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffa888}, 0x0) [ 1193.359302][ T27] audit: type=1804 audit(1690376204.090:2555): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/700/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 1193.532603][ T27] audit: type=1804 audit(1690376204.130:2556): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/700/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 1193.673664][ T27] audit: type=1804 audit(1690376204.140:2557): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1264/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1193.734706][ T27] audit: type=1804 audit(1690376204.150:2558): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1264/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 12:56:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7800}, 0x0) 12:56:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffff000}, 0x0) 12:56:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 12:56:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) (async) preadv(r4, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000840)=""/107, 0x6b}], 0x6, 0x4bae, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000000)) (async) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/157, 0x9d}, {}], 0x2, 0x3, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001600)={0x0, 0x2d, 0x2a, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000000740)={0x0, 0x5, @start={r10, 0x1, "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", "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"}, [0x8, 0x6, 0x0, 0x8, 0x4, 0x0, 0x401, 0x400, 0xfffffffffffffeff, 0x7ff, 0x8000, 0x7ff, 0x2, 0x8, 0x56b, 0x20, 0x1, 0x0, 0x7fffffff, 0x2, 0x9, 0x4, 0x8, 0x2, 0x1, 0x800, 0xffffffefffffffff, 0x6, 0xff, 0x10000, 0x10, 0xfffffffffffffff9, 0x100000000, 0x7fffffff, 0x0, 0x5, 0x10001, 0x8, 0xb1a, 0x3, 0x5, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd, 0xaa, 0x1, 0x3, 0x2, 0xffffffffffff0001, 0x3, 0x0, 0x7, 0xffffffffffffff24, 0x20, 0x101, 0xdba, 0x9, 0xf28, 0x7, 0x1, 0x0, 0x0, 0x8000, 0x400]}) 12:56:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd700000000000140000b13b0c4010", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7900}, 0x0) 12:56:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffff7f}, 0x0) 12:56:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/157, 0x9d}, {}], 0x2, 0x3, 0x4) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001600)={0x0, 0x2d, 0x2a, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f0000000740)={0x0, 0x5, @start={r10, 0x1, "3a9f78740408129b92c9186388a39af57acb0d30304fe2d86e3043a7bd0233d41a2e62d0ffac42a7a6c6238207c060e78216d584b289e887d5a0f068a916c3ec9c49a0361506f76a70a16cea979c7b7c381a65525221d0f84801f8b89a5a681cc0b982ff02edc2137a8b0b9c080fda609530b3a3e4cc33903d29ef3c9a9827eeb420a961d3541efc70a457a42ac61b0435bc7bcbca0cf157a86783f7c0311b9ff9843787bea21fc2e0dc63c51939199018fac58e715c05d267c230b1f50c3730c6ddabced12a43b0218afb82ab799e6c86201fb18b0c3753708c8e7161a3c761ecd1d840c62fde14443568a84fa55434fba85377a0482656ddc55ede6a7c17f018bd534954a0923f29d329547244a269207a4522cded0e0cb64d6afdfae1ff16bdd7ffff8e51f79415b00da3899c4a2f3f9bdfe1220d50fa0352033a537e458657df76c4d76f99484f57e701c2f474ae137d7b5f8e6202d0bc79b5c09c12401ec7b3100ddca0a33c58ffe723f1296049dfe5327d67975f5a440e83034186a5d3855e29e92b4843ac820fd8456ad49fcf575b8afa2932d0b937ba3c9f1bd8bd8b625fb91207a1142127412f6a2a94f0ffd819f6272ce986c24164e0f72f8bbfc4475939772d682abf4b2a1ea73cc673ce20d5ff8005ff3200e129d743645612ae7f4eda76c54ea286168833e566139e9cd3448f38dd9668c87428354f52891450eaf1cd09b5187030ce96c527c29d7e82d378f07f28583ec7a619f49d60e8fba10eb522eb737f639f4898fa4a93c9dd61af50116ab2a993e628fa5ee31ef82d3099cd212d63573e72fd341b84e81301c1c99cbabbd99e91abcc46e7a4c6cc19af4e8bf28067a1fd959ad4dc3d633607bbe9d5e3405dbf79116d9ba6a52625fe7a7741b5322aaa3f062067918ac4a26d28e95ae3dc7314d0194d7277825c2ec03b18f8919f01219c415ba3a4d33b9655f5a6c7b20c34d8995c2320f9cac592b0b1b95a19f815effd004e4d00e90609eb55f5fbfc1e4460f967e83a66b94064b428eeca37d3d424fba3a439cd010a805b476bfb19a482b6a64aed9980f41682b297200acc4edbfd5848a5d7ee4f896c192c4baf7f3e65baead8f3ff48ba34f9cd45607f47c1aa6c085f51a19ba017ff5581c12e66adf7aad2d32bd6095bed5a2bc9338890d89991bdd71b90a3ad89722d29d8ec44c1758aae1b375b13860100031a7f1de50f5c6cdeba7ff59b5ae96935392a93aebf6d75adb4e204d1d61f634dc593e8d4729155538ec27b3e304171543e155723d83f7aa4425923a2e4080929c407601fbb4c0c5c207035743a77d0dcd3b99457200203f158ba106341e67bb51ca8b6d58eacd715f15b0a44ebf425dc9096ebd881907449420fd150426facdd70b41fe52867870d7b77c180d08ddf330c8378c56005a5dd325de0d8e8dac70cbda7", "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"}, [0x8, 0x6, 0x0, 0x8, 0x4, 0x0, 0x401, 0x400, 0xfffffffffffffeff, 0x7ff, 0x8000, 0x7ff, 0x2, 0x8, 0x56b, 0x20, 0x1, 0x0, 0x7fffffff, 0x2, 0x9, 0x4, 0x8, 0x2, 0x1, 0x800, 0xffffffefffffffff, 0x6, 0xff, 0x10000, 0x10, 0xfffffffffffffff9, 0x100000000, 0x7fffffff, 0x0, 0x5, 0x10001, 0x8, 0xb1a, 0x3, 0x5, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd, 0xaa, 0x1, 0x3, 0x2, 0xffffffffffff0001, 0x3, 0x0, 0x7, 0xffffffffffffff24, 0x20, 0x101, 0xdba, 0x9, 0xf28, 0x7, 0x1, 0x0, 0x0, 0x8000, 0x400]}) 12:56:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7a00}, 0x0) [ 1194.444986][ T27] audit: type=1804 audit(1690376205.180:2559): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/701/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffff9e}, 0x0) 12:56:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[@ANYRES32=r7], 0x3af4701e) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x2, 0x0, 0xf19, 0xc, r3, 0xffffff56, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) sendfile(r5, r10, 0x0, 0x10000a006) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) 12:56:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7b00}, 0x0) 12:56:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x9f03000000000000}, 0x0) 12:56:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffff0}, 0x0) 12:56:45 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x11}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:56:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), &(0x7f00000002c0)=0x4) (async) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd700000000000140000b13b0c4010", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7c00}, 0x0) 12:56:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffff1}, 0x0) 12:56:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000), &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd700000000000140000b13b0c4010", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7d00}, 0x0) 12:56:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffffc}, 0x0) 12:56:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendfile(r8, r7, 0x0, 0x100000002) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[@ANYRES32=r7], 0x3af4701e) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x2, 0x0, 0xf19, 0xc, r3, 0xffffff56, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) sendfile(r5, r10, 0x0, 0x10000a006) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) 12:56:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7e00}, 0x0) 12:56:46 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@phonet, &(0x7f0000000500)=0x80, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={0x0, 0x7fe0}, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050ffca9e5cfe84a1851846bd98a65d0e1e9475cf3d83b25fecf0ac45feab1cee3d4a0b58c1467fb5d2139df6c8c3599974b233847f390322be2da25f584debd1fa0bd545940e0280707f2a5a2810ba5be638404183f8aeb1adef9ad723041eefa12609d7be07066e88a22ced1318b1dfc1e14f4a92ca0271cf"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1000117e5}, 0x0) 12:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 12:56:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x7f00}, 0x0) 12:56:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x48100000000}, 0x0) 12:56:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) write$binfmt_script(r6, &(0x7f00000002c0)=ANY=[@ANYRES32=r7], 0x3af4701e) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)=ANY=[], 0x208e24b) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1d, 0x2, 0x0, 0xf19, 0xc, r3, 0xffffff56, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) sendfile(r5, r10, 0x0, 0x10000a006) (async) openat$cgroup_ro(r3, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) 12:56:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x7ff34ba7cb29}, 0x0) 12:56:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1000000000000}, 0x0) 12:56:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8100}, 0x0) 12:56:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 12:56:47 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x24040981) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48040000", @ANYRESHEX=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYRES64=r0], 0x448}, 0x1, 0x0, 0x0, 0x801}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="bd70000000000014000000000000000024e2731ed2c10000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.group_wait_time\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(r2, &(0x7f0000000440)='cgroup.kill\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r10, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25130000000c000600020000000200000008000300", @ANYRES32=r6, @ANYBLOB="05001a00000000000c000600000000000000000008000300", @ANYRES32=r11, @ANYBLOB="05001a0000b9fdfd69d9f6aa7beb8071e231acdd0ff61e"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 12:56:47 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@phonet, &(0x7f0000000500)=0x80, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={0x0, 0x7fe0}, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050ffca9e5cfe84a1851846bd98a65d0e1e9475cf3d83b25fecf0ac45feab1cee3d4a0b58c1467fb5d2139df6c8c3599974b233847f390322be2da25f584debd1fa0bd545940e0280707f2a5a2810ba5be638404183f8aeb1adef9ad723041eefa12609d7be07066e88a22ced1318b1dfc1e14f4a92ca0271cf"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async, rerun: 32) sendfile(r7, r6, 0x0, 0x10000a006) (rerun: 32) 12:56:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8200}, 0x0) 12:56:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x40030000000000}, 0x0) 12:56:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffffffffff}, 0x0) 12:56:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8300}, 0x0) 12:56:47 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@phonet, &(0x7f0000000500)=0x80, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={0x0, 0x7fe0}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050ffca9e5cfe84a1851846bd98a65d0e1e9475cf3d83b25fecf0ac45feab1cee3d4a0b58c1467fb5d2139df6c8c3599974b233847f390322be2da25f584debd1fa0bd545940e0280707f2a5a2810ba5be638404183f8aeb1adef9ad723041eefa12609d7be07066e88a22ced1318b1dfc1e14f4a92ca0271cf"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050ffca9e5cfe84a1851846bd98a65d0e1e9475cf3d83b25fecf0ac45feab1cee3d4a0b58c1467fb5d2139df6c8c3599974b233847f390322be2da25f584debd1fa0bd545940e0280707f2a5a2810ba5be638404183f8aeb1adef9ad723041eefa12609d7be07066e88a22ced1318b1dfc1e14f4a92ca0271cf"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x64, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendfile(r7, r6, 0x0, 0x10000a006) (async) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x100000000000000}, 0x0) [ 1197.138836][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1197.138855][ T27] audit: type=1804 audit(1690376207.870:2572): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/704/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1197.323667][ T27] audit: type=1804 audit(1690376207.900:2573): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/704/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 12:56:48 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:56:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8400}, 0x0) 12:56:48 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x24040981) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @local}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48040000", @ANYRESHEX=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYRES64=r0], 0x448}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="bd70000000000014000000000000000024e2731ed2c10000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.group_wait_time\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000440)='cgroup.kill\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='cpuacct.stat\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r10, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25130000000c000600020000000200000008000300", @ANYRES32=r6, @ANYBLOB="05001a00000000000c000600000000000000000008000300", @ANYRES32=r11, @ANYBLOB="05001a0000b9fdfd69d9f6aa7beb8071e231acdd0ff61e"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r4, r3, 0x0, 0x10000a006) 12:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 12:56:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x200000000000000}, 0x0) 12:56:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000340)) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8500}, 0x0) 12:56:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x300000000000000}, 0x0) 12:56:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:48 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555c}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x24040981) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @local}}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48040000", @ANYRESHEX=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYRES64=r0], 0x448}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="bd70000000000014000000000000000024e2731ed2c10000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.group_wait_time\x00', 0xb00000000065808, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000440)='cgroup.kill\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000480)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r10, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf25130000000c000600020000000200000008000300", @ANYRES32=r6, @ANYBLOB="05001a00000000000c000600000000000000000008000300", @ANYRES32=r11, @ANYBLOB="05001a0000b9fdfd69d9f6aa7beb8071e231acdd0ff61e"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r4, r3, 0x0, 0x10000a006) [ 1197.946763][ T27] audit: type=1804 audit(1690376208.680:2574): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1517/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 12:56:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8600}, 0x0) 12:56:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x400000000000000}, 0x0) [ 1198.091723][ T27] audit: type=1804 audit(1690376208.720:2575): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1517/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 12:56:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c04330002aad813c8b250295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0xffffffff, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440)=0xfffffffe, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) r7 = socket$netlink(0x10, 0x3, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 12:56:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8700}, 0x0) 12:56:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x500000000000000}, 0x0) 12:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 12:56:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8800}, 0x0) [ 1198.431975][ T27] audit: type=1804 audit(1690376209.160:2576): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/706/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 12:56:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x600000000000000}, 0x0) 12:56:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000340)) sendfile(r5, r4, 0x0, 0x10000a006) [ 1198.599231][ T27] audit: type=1804 audit(1690376209.200:2577): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/706/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 12:56:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x700000000000000}, 0x0) [ 1198.730876][ T27] audit: type=1804 audit(1690376209.390:2578): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1273/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1198.877303][ T27] audit: type=1804 audit(1690376209.390:2579): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1273/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 12:56:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="48040000", @ANYBLOB="e8da91a2e71880e6c29f680513068aa3290af778af53b509edf11d8a77aee51b9c9333aae0c2bf62130cb4c123610fd33072206a692c4433cb488bec6c5978e0d493b01c259d22df744b0bfe9a64d5a5a0af9bbc60a32aee78b5785991094095b891eca2f06aca45aef1e3f1def8113f3a6f27ac914a3851f893efb1dd9cfc3e793704259b01", @ANYBLOB="01e5ff000000000004003b1c2100080003000c6c27de2da62c1238020261f6ef516cc3150e7df030388fff7820b9f766ede5c60bc66a7bab714de6faee87e951fd6816c8d214f3a438926f4d2e41b28ce0b64d8add002566430154e669d02ff29bcabd7010a7ff7aa56f96e9cfef35759743d8c71269872c74c2411985f601367a782562d82a4769b73d8ca7ef7dd3c44930b92831699e503f4c67ab1586400d7b88e022d51e1f2f5dd79e474b572c050733659bd9b7117ce1c60076ee6b87cefbea7a84bda5df6959fbfb1b6b68e3c20750328f24dedd953256f6906b2b34c18f965d6f0a14c86d0d6cc6ebe43254da354946", @ANYRES32=r1, @ANYBLOB="2c0433005000c32056838f00000000000000000000000000000000000000e5bab5ef6895905221643bc7e7239f77ccea4093b6574e531e636c15dcd96eb646343aa1e5fa58f57ee465daf104a752cc771cdb925511fb6c50b491bcccca3e0ced9f2db2a940d67b21939de588df7f843b1c7f2ffb7c4d86022c520862216c994160dbcb0d763f8de22349aa43600c0f1211ab5adc4a193a43877496acfabf308cf66252"], 0x448}, 0x1, 0x0, 0x0, 0x40}, 0x4810) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000002) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) write$binfmt_script(r4, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES64=r5, @ANYRESHEX=r5, @ANYRES8=r4, @ANYRESDEC=r1, @ANYRES32=r8, @ANYRESOCT=r2], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240)=ANY=[], 0x3af4701e) r13 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r13, 0x89a0, &(0x7f0000000000)='wg0\x00') r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='bcache_keyscan\x00', r5}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r14, 0x1, 0x3, 0x3}) ioctl$PPPIOCGUNIT(r15, 0x80047456, &(0x7f00000002c0)) sendfile(r10, r9, 0x0, 0x10000a006) 12:56:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8900}, 0x0) 12:56:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x800000000000000}, 0x0) 12:56:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000340)) sendfile(r5, r4, 0x0, 0x10000a006) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000340)) (async) sendfile(r5, r4, 0x0, 0x10000a006) (async) 12:56:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c04330002aad813c8b250295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0xffffffff, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440)=0xfffffffe, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) r7 = socket$netlink(0x10, 0x3, 0x2) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 12:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}}, 0x0) 12:56:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8a00}, 0x0) 12:56:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x900000000000000}, 0x0) 12:56:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xa00000000000000}, 0x0) [ 1199.338095][ T27] audit: type=1804 audit(1690376210.070:2580): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1519/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8b00}, 0x0) [ 1199.463959][ T27] audit: type=1804 audit(1690376210.070:2581): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1519/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:56:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8c00}, 0x0) 12:56:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb00000000000000}, 0x0) 12:56:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c04330002aad813c8b250295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0xffffffff, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440)=0xfffffffe, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 64) sendfile(r5, r4, 0x0, 0x10000a006) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x2) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 12:56:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="480400000ab67a00000000849ed8009fc6488a9da3590a93b017c3b0bee61fc900ed1cc7e31285c9b05c94ccb312aa0fd84d7cb98257f20648473774b6a385723f24a5077ba2bdc6750ef1f40e7968fcfab9426f709907f3b539c9eab17ff8c139114d9fb0", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000200)=0x4) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8d00}, 0x0) 12:56:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xc00000000000000}, 0x0) 12:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x0) 12:56:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8e00}, 0x0) 12:56:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe00000000000000}, 0x0) 12:56:50 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) accept4$x25(r5, 0x0, &(0x7f0000000000), 0x100000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x8f00}, 0x0) 12:56:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf00000000000000}, 0x0) 12:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9000}, 0x0) 12:56:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d0437d8f7c5097c9e2aff47c212d5fcdc988132900000000fb5f", @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) 12:56:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1000000000000000}, 0x0) 12:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x3}, 0x0) 12:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9100}, 0x0) 12:56:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="480400000ab67a00000000849ed8009fc6488a9da3590a93b017c3b0bee61fc900ed1cc7e31285c9b05c94ccb312aa0fd84d7cb98257f20648473774b6a385723f24a5077ba2bdc6750ef1f40e7968fcfab9426f709907f3b539c9eab17ff8c139114d9fb0", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="240433005000de295b3acba52ee4080211000001501050505004bfae23aacc814a50e1e14b4c8d000000000000000000000000000000272c6ad6f3a28eae11c503d3f56d5d69f48b719237677c652d831a7fb08e003b20f485adbf2dc8aa4c772044ed6df9cb9ec88d178bd10fc717d1de3334fb615b197cf7ee57903a90a8277eda239e48f887df6961831f7c188518b9fa57970e34acaf25ff86fe89cb219b08da4e699d890c09130b7c020fda0cd93e1a0eb03337ae876ac158ebe3faa98eb22fb6768ad794f8740d3fd3f936730b2b8e8234299dedaa0e72097dfeee277b9c72441e44eb653e1397d29b0c64c8fb1325a6eac6e2b63da70038916f1e78fd5da20e29312b3cf41b80f4d630eae9dfc0f68b7e6ac3c2b74a3eaa9c92e49d61b4a3032a015636dfe64150fe7716fb"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000200)=0x4) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9200}, 0x0) 12:56:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1100000000000000}, 0x0) 12:56:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="480400000ab67a00000000849ed8009fc6488a9da3590a93b017c3b0bee61fc900ed1cc7e31285c9b05c94ccb312aa0fd84d7cb98257f20648473774b6a385723f24a5077ba2bdc6750ef1f40e7968fcfab9426f709907f3b539c9eab17ff8c139114d9fb0", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000200)=0x4) (async) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x1300000000000000}, 0x0) 12:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9300}, 0x0) 12:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12:56:51 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000740)) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) accept4$x25(r5, 0x0, &(0x7f0000000000), 0x100000) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 32) sendfile(r7, r6, 0x0, 0x10000a006) (rerun: 32) 12:56:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:56:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x29cba74bf37f0000}, 0x0) 12:56:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9400}, 0x0) 12:56:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000000}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x0) 12:56:52 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000002) (async) sendfile(r3, r2, 0x0, 0x100000002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000740)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) accept4$x25(r5, 0x0, &(0x7f0000000000), 0x100000) (async) accept4$x25(r5, 0x0, &(0x7f0000000000), 0x100000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:56:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9500}, 0x0) 12:56:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6000000000000000}, 0x0) 12:56:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9600}, 0x0) 12:56:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) preadv(r0, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000840)=""/219, 0xdb}, {&(0x7f0000000940)=""/142, 0x8e}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x9, 0xffffffff, 0x9) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4804003b", @ANYRES16=r2, @ANYBLOB="00e5ff0000000000", @ANYRESDEC=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a030000", @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000002) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) sendfile(r7, r0, &(0x7f0000000040)=0xfff, 0x101) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r4, 0x0, 0x10000a006) 12:56:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="48040000", @ANYRES64, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES8=r0], 0x448}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdfa, 0xfffffffffffffffc) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) mmap(&(0x7f0000516000/0x2000)=nil, 0x2000, 0x2000001, 0x30, r4, 0xe1c4f000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r5, 0x0, 0x10000a006) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000002) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) write$binfmt_misc(r5, &(0x7f0000000340)={'syz0', "2ba50f32050d54e148672cfa9d3c1d72c4556cd4b30d52b0efa34d037880f97fe16d65e7c5f340fb8354f9212b0775c00da4d0125e062be28cb745b248ec1cebad76bb20039809753b9b81e617b24f8b8695f9ee801f1500d2fe78e73caa1770651de75b9fe19bb6bbb0278a828d87fd8799c429bdac7f044a525f26751990d6f563a4972e3d4edd1a"}, 0xfffffffffffffec6) write$binfmt_script(r10, &(0x7f0000000100)=ANY=[], 0x208e24b) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) 12:56:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x6558000000000000}, 0x0) 12:56:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9700}, 0x0) 12:56:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x8100000000000000}, 0x0) 12:56:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000000}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000000}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) (async) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x6}, 0x0) 12:56:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9800}, 0x0) 12:56:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9900}, 0x0) [ 1202.249869][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1202.249891][ T27] audit: type=1804 audit(1690376212.980:2601): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/711/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 12:56:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x88a8ffff00000000}, 0x0) [ 1202.382584][ T27] audit: type=1804 audit(1690376213.020:2602): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1279/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 12:56:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x8000000}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) (rerun: 32) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r8, r7, 0x0, 0x10000a006) 12:56:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9a00}, 0x0) [ 1202.577403][ T27] audit: type=1804 audit(1690376213.040:2603): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/711/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1202.735029][ T27] audit: type=1804 audit(1690376213.040:2604): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1279/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 1202.871561][ T27] audit: type=1804 audit(1690376213.040:2605): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1279/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 1202.915599][ T27] audit: type=1804 audit(1690376213.160:2606): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1279/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 12:56:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0xffff, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:56:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x9effffff00000000}, 0x0) 12:56:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9b00}, 0x0) 12:56:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x7}, 0x0) 12:56:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socket$l2tp6(0xa, 0x2, 0x73) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}, {0x20, 'wlan1\x00'}, {0x20, 'net_prio.prioidx\x00'}, {0x20, '$)'}, {0x20, 'wlan1\x00'}, {0x20, '^@'}, {0x20, '}!'}, {0x20, 'nl80211\x00'}, {0x20, '@:-'}, {0x20, 'cgroup.controllers\x00'}], 0xa, "8906925e69d6b3dcf922b7793c2d30b2cb1e3b177b0f3c774b984fcfa67f5bb9b01d2d17567b403704f4dbd1483b395a2cc43e09def47ce536d037950cfe6d7e186110fe4a480581fd879e0d3ee3663ae345d9090e46a11745540cfc99e035a8a75f72bf1c70b3cd00902a7d0dd5123ccce0b7d3420eb790c4a30e5dc7fc32f67c47e8cd7626aa0ffa6afd943d0663aa7874ab5f6ea2eb973ee2699090db119387ade7ac6bd527a9fc8e5b3de1876683eb9c40fc0c2f25daff0cfed4159b34ef65ef938e2a9e72dc7ca768bd47b42b6e"}, 0x139) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x1f1482e25dc8c0dd, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x448}}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x20, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) [ 1202.958117][ T27] audit: type=1804 audit(1690376213.160:2607): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/711/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1202.990424][ T27] audit: type=1804 audit(1690376213.270:2608): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/711/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 12:56:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb30d000000000000}, 0x0) 12:56:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9c00}, 0x0) 12:56:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x200080cc) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r8, r7, 0x0, 0x10000a006) [ 1203.248646][ T27] audit: type=1804 audit(1690376213.980:2609): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1526/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 12:56:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9d00}, 0x0) 12:56:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe517010001000000}, 0x0) [ 1203.385275][ T27] audit: type=1804 audit(1690376214.020:2610): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1526/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 12:56:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9e00}, 0x0) 12:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0) 12:56:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xe803000000000000}, 0x0) 12:56:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x9f00}, 0x0) 12:56:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa000}, 0x0) 12:56:55 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x8, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:56:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf0ffffff00000000}, 0x0) 12:56:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa100}, 0x0) 12:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x9}, 0x0) 12:56:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xb30d000000000000}, 0x0) 12:56:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa200}, 0x0) 12:56:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xf1ffffff00000000}, 0x0) 12:56:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x11}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004013) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa300}, 0x0) 12:56:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfcffffff00000000}, 0x0) 12:56:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) socketpair(0x23, 0x80000, 0x2edd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04006c002233cbd54ed7b839be7a2c8ff805216873c7b70cc80681f2661234fea831a587fbb12dce9f1036a8af4e32f307569e90f0e7fddd9f15e6987b886ae604ec93494b31d1"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8040018) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\x01\x01\x01\x01\x01\x01'}, {0x20, ')'}, {}, {0x20, ']'}, {0x20, ']e'}, {0x20, 'nl80211\x00'}], 0xa, "ab433e841a8be5a753fa5d7aad74c1fc79edc73d459924a5c5bdcc4920a06de80bff3bf9772faf8503d09e85e33425b45f6b9b022c0c02030e2b3a28ad31265731f88800a0194ece63c48e4d005d4a7579ae4627ca57ca2ecb4d5fdae7a36ac82723a6649e54da2befd1d49e"}, 0x8f) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r8, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099050000000000000000"], 0x28}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getaddr={0x14, 0x16, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r10, r9, 0x0, 0x10000a006) 12:56:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 12:56:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa400}, 0x0) 12:56:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffff7f00000000}, 0x0) 12:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xe}, 0x0) 12:56:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa500}, 0x0) 12:56:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xffffffff00000000}, 0x0) 12:56:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa600}, 0x0) 12:56:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0xfffffffffffff000}, 0x0) 12:56:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x11}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004013) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xf}, 0x0) 12:56:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa700}, 0x0) [ 1205.883165][ T7627] __nla_validate_parse: 2 callbacks suppressed [ 1205.883188][ T7627] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1205.920682][ T7627] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1205.998749][ T7627] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1206.095646][ T7627] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.5'. 12:56:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) socketpair(0x23, 0x80000, 0x2edd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04006c002233cbd54ed7b839be7a2c8ff805216873c7b70cc80681f2661234fea831a587fbb12dce9f1036a8af4e32f307569e90f0e7fddd9f15e6987b886ae604ec93494b31d1"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8040018) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\x01\x01\x01\x01\x01\x01'}, {0x20, ')'}, {}, {0x20, ']'}, {0x20, ']e'}, {0x20, 'nl80211\x00'}], 0xa, "ab433e841a8be5a753fa5d7aad74c1fc79edc73d459924a5c5bdcc4920a06de80bff3bf9772faf8503d09e85e33425b45f6b9b022c0c02030e2b3a28ad31265731f88800a0194ece63c48e4d005d4a7579ae4627ca57ca2ecb4d5fdae7a36ac82723a6649e54da2befd1d49e"}, 0x8f) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r8, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r8, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099050000000000000000"], 0x28}}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getaddr={0x14, 0x16, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r10, r9, 0x0, 0x10000a006) [ 1206.142218][ T7627] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.5'. 12:56:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x2}, 0x0) 12:56:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x7}, 0x0) 12:56:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa800}, 0x0) 12:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x54}, 0x0) 12:56:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x3}, 0x0) 12:56:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xa900}, 0x0) 12:56:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) socketpair(0x23, 0x80000, 0x2edd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04006c002233cbd54ed7b839be7a2c8ff805216873c7b70cc80681f2661234fea831a587fbb12dce9f1036a8af4e32f307569e90f0e7fddd9f15e6987b886ae604ec93494b31d1"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8040018) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\x01\x01\x01\x01\x01\x01'}, {0x20, ')'}, {}, {0x20, ']'}, {0x20, ']e'}, {0x20, 'nl80211\x00'}], 0xa, "ab433e841a8be5a753fa5d7aad74c1fc79edc73d459924a5c5bdcc4920a06de80bff3bf9772faf8503d09e85e33425b45f6b9b022c0c02030e2b3a28ad31265731f88800a0194ece63c48e4d005d4a7579ae4627ca57ca2ecb4d5fdae7a36ac82723a6649e54da2befd1d49e"}, 0x8f) (async) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) (async) connect$inet6(r8, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) (async) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099050000000000000000"], 0x28}}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getaddr={0x14, 0x16, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c4}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r10, r9, 0x0, 0x10000a006) 12:56:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x4}, 0x0) 12:56:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xaa00}, 0x0) 12:56:57 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xffffffffffffff08}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r8, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000004040)=@newtaction={0x2b20, 0x30, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{0x2720, 0x1, [@m_xt={0x130c, 0x18, 0x0, 0x0, {{0x7}, {0x122c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb6, 0x6, {0x6a, 'security\x00', 0x7f, 0x32, "3e0ed5251b153a4e4a86a25439125cdc94dbca4d132bcd6f95675c7b78ae445be9618d6242fa8832d91c1149f5672222fcc1a63595b82436c66e16d7730cd4b3802bdefab774d8b7d2fe9d8fccf99228f11b98edad1a6d2ec4296074e09f184fcb1940f064434326f634e03e5b1abf58f176343819e0b5122eadcf060d822c72b2d8c704f2d9fb18a76b6fe7"}}, @TCA_IPT_TARG={0x6e, 0x6, {0xffff, 'security\x00', 0x2, 0xc2, "ff557bff09b1f496a258e2508c987c955d781696faffef0a7b82cc94b5c52ac27cd92d7339778d16cefc55e30040cb7121786d110db4dcf95d57348d4e8d5770005fa13a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x102a, 0x6, {0x5, 'mangle\x00', 0x1, 0x3ff, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x7a, 0x6, {0x4, 'raw\x00', 0x3, 0x6, "a4f260f64f0d81e951422f24ba1870407850a5a69680bacb0ef5f83e6099781fdec378018026400b4f73b17b3f5a09093e601265dc3a01f5200fe00856bef75d7f87f29b3cf3bd57cd45c26cf6e34d32"}}]}, {0xbc, 0x6, "2729760b39dc4df712b35e16ad819da3b39b39fb4669abb6e2b8b48d15b48336fc7316a958dad3e3970b70fbff8bccb3ac14342f31d07194d42754fba42f9af06bab32b16a2279c36ab2211623ed32ca8ce49891175b4c36ded613bbc70aeb4b625334f4825aff0e9b877ed3da752f0364126236793582ddfb426536621652a70830a8643036df665a68e015458854934ebe8a716f18e343c324dd64727d79d023ad6ef703f1ede81dc0b59cec03b47fdd80a53731685955"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xdc, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x3, 0x1, 0x57}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x800, 0x8, 0x5, 0x7}, 0xb}}]}, {0x77, 0x6, "30505b4fa3b919a0216b5212cb21874d983b41c6e7bd728365d26209bb41e561377047b62ca4b96d76d344baf0f4546fed8d5e5b159cd8625f129bc9893c880fbdb61370db499ce8359ddddb558cfbd5a17568d6f29c046085b6f3d1952ba6b8e89c307d9f8061ab3030f87f6e554a23f9e92c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x18c, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x10001, 0x2, 0x2d52, 0x4cf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x101, 0x3, 0x1ff, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8de, 0xe7f, 0x0, 0x7, 0x4}, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x6, 0x200, 0x5}, @multicast1, @private=0xa010101, 0xffffff00}}]}, {0xc2, 0x6, "01689cc2e70469854a3578885870c53bc405682e8b33db01a1c7f5a3161e8925d3acb7a48ecaa8e03a65a69fd99fd186cdd616f4ea946e44c260d4e7403da40a20eca1237759cdab179fa257ac140df26fddf91e2b084bfdb454931ce883a4deff0a1384c4b77ad048c3fcc39d01b2a0504af8b8de95a446cb56a4d4c882f3959efc76aacb33346562d9341610b2a3ad628c20dced70c335cb3febc33e551465055dde0fa2855e3048513a0b0124c7679a34166a381732d0b0b4119e8f3f"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x11a8, 0x19, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x1, 0x6, 0xffff, 0xfffffffa}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0x0, 0xffffffffffffffff, 0xe7c, 0xc0}, 0xa}}]}, {0x1128, 0x6, "b809c2b73200ae907050ab379ffd5cbec90178f4dc433f66202af060d2bc8b86f944ed6235a2249d0722349d9efd084c4435cd4aa0aeb288244c3801a488bddba7a6fbd0749cef7e47d80c0351cc838b74c3fccf41336d7eaceceeb825bbc2a9af7bcbe5298e0d028df023b3c0ec1a019d72ef8e62426c515e251ecf12e6432468e6f2d63461074461c6445b53dcfc247bcf9a961c61bfd53a066dd1589d25d2edbd26a74d640537d6c40cac21c752d74e9c828be4844246b9760bff04959f419446515d020bcf2c7e3acbe6b70864905ff0c9424663cec807dbfbf82b25ee53418ee364ebb4a65c916a986d12fc5679c0a388dd34483b3e59ce09ca054183f1bc4a0915c21e1c5cb0bb59daa0da2fa5e39943285dd1d94e62f71e814d94e8f12d0ec4d8c9c4847d0b2a4bdc01f633e453a45c8d058c4f38abf9911196bd28109841e921ddbd97362d024c4214294c755578efbecd373af131e72957fc09aa192fba8e537415fbef71428aeb2fcf87f6dd15dea4193f9ec0a53b53b0d49dda8bc4d23d2f792680c165c42b7cad2288c882992f43113f622c0cc98569a8617972bd1513564c7f4fa8bbf0ff586da37300466cc0e8e8c21bb77225db4713b8caa149650b7db87f45593ac98e810e05fbd55e2f071b7f06bcf3cf81a2f326eeec8016338d02a490c5b1ac247925d10ac8166ae2284b4c2bb5e56f9e1b656204e37296f4db5a067f5f0e82720917f5fc6ad4cef4c61869e1d68370abceabb780ace903afef680be9d2d8286a9c191446e7484694633e98854dc02ff530140fa0854c774d5121fb601b70d320e27d6f96a409549e7278e60f64b84ae3d6bc5bec81e4ef65057e182f21bf7cc8aa42dc1fc95558c7741aa7af6b97b47b1c1a62a25da7ba56803bcb7813473edda6e3d9d8f2addcea1ec0911cdedd2cafa40e9ec6cf046afe306f7e69a3df01bda90518ccb246f6498ad7531bc082153a9deb4725c92ec3f01b3bb4ceeba9c574b3cc6bc779b6bb4b027d6c46e287c58c28b4a0dd18e2188297ee0d553a1dfa14e368388242c97d3bae5d9d3b2d2771825f7f92a263663b3cd0e571f37819eba775e0720e26abc46e4278dd9163e3507246275a019b6ef7f9c0c92b8022f400007310890c69c7e3e2539c2909769d37b44d930fdf324d2f35a6f17178150d720c379ad6f221fd7002678c879aad7db382a3f00ef5aad89464ac1179b187399be68c455bbc81fcd283437995e715368d5b1494489fc1408df398ca2aa1605d6c5d3d4af482df80782f1b318747653fa453db9ea92597597d9f9676889f75eb6fafd6ed8260aab2fa9b7462dda75be1dbf951e053a95f3c36db19f3ef912f70c9bbf00f794566a790d67e05acdf76325599b6b9ce311a58e72b48861aef1f1b9b1791470fd5bb9cc0080887f2edd51c8a3a6be105301d50677a802720adcab2f500df9192fbddede3e81771dacc2305a2aad2fb25b8a78cabeb3fc6ee88993cb06f11cfecfaf723ea9eaddf4a3a851ec95f2f7b2b081325bab264f59050f8631e4ee8db96b3f0f8fedc5a20164383dd23dcef5fe5221dd7e2dfa082f1ea9f91ef49767f4b147409e716d6b5296eadf20d6adb525dc59e587f422e12244c67c21f900b03fd53889318b55e35e33fe847a6b3f1a1888d082c41a8244c4696e8eb8b1ba12dc0a485b3c951bf79f4f8361af4c34d4865696f0eda1680a11f3894dcc5ca5e565e6cd881fcb3a4c435cbb0f8c52283652a21f5d13e44519b1f0e82d3da10ef37f59aa92da02509ee69f4c7562a2992af07a1f19979ecb8ad9690b3af20f5389c51839ac03069382a2d397a7cf8eb496968e6179e70f922b55d22f2ec34669bee37d98693367160f393594f13f36cba134d5841d9aab02ad694ea179e00e2e1c669395e4d43b5c7485ec9d33a2c9b8a963834ef1d1f705eb9a0a8e5e6435e19bf45571696f1ce86166264f8c53cb3b8b8f729a5d8ed38df02354b62aef2817b645fc68c813ad3df581c9bea9f776d241ae22fa1b7c9bfa6cfadf84c5a54dd4dc893aa8a782ea935ace6f4149b6d2f0caf226b7d19177563382a7b32d1008108a905e76542921d8f1588346f2138d95fa7f51fac6574957dcf6596291d55036c77e709a16e005a76d8e2854d2627b6ae995c8cf326cd369c918ddee037c19f64840fb154eb34ee4f9555f1728fa872d58c45b0c0d19c4a5c27bc5ca94337e9fac2aece8ea774eefece94d3554786eb1f6a1f51326ebf7ef77ae2b374eb2a84b3cae908f502e2b2371cc47407a2d86cc3e7f7868ac6c8c3dce8f5287bc83a0b2c1d921621d20636e13985c3ae8890165a3e77ece3c2823194759ffca1a9344d83a4b3ef4c90769b172a3cbb6a2c0d21fda76c73ec46349fc970a814fe08ed5f48bacdd3279f9423dfbc1330d67037433c32eab1826d58cf2b2796858503e5e3ae57c396746530ee2b8ca6d86d403cdbd4666ea33fe585c030b462f0f78fb143dc5cfb7eb3c41ad2ca610e4ddecfd047a5f505ef36e21625a6bd6fca71d942c8e36f3ee240bd788c6fa0461942fb0c0771cb5be9305f08af908ac4f8d5fa0fe8caed7fc02e02b48f6fcee9ce375907c833f81d31bc84400e92f26c546f65ba4e25e3a3a0ccebc6891edd16a62f5776221504c97fd294c96c606faac53d632c34ba6bdaa16fef9a60cead782328971108146b9147ba2f00ee09216fa573b384749503a9b491cb29eb3e5b77b0e3ee2c049118fe801933e22428ceef0f9415ef61d1fdf5c8f740a072ac15545a6b0eefe866e0cbc02ffcfce727397b4f2ba477f681eebdf14610f2dc7f65f81719ce500281890148733bdee68e8b8f4ac1b69e9ca680696e629d10f161d8098760c1b73f342dfa257ab964194c4f4c8f6efcd55dbf8c9c367c26a7285fe6d784c1a2785a5ba832ac1d0f389f9068648b4cd28db18366de084e7705dabcfb5732dbc5da0cbc95f85603b8edb153c2524c91c918a43d0a0710b9aebe53a583a552010f73281c8aaa73d232362e8511a027629e6ca32a3dcee6060f7fa1f8ef4c09315afa3e4fe186ddc8b1446cbfc6d55d3e2fb5bf1f07cc9a6d9e4dc52c62e3048c27aa66cbb3dc5cae46236491502880caf88011b0bf36cf0e9624e34a6d40982a5c07db43da3919c8ba4ad9f2f7aba978bd36201cf633d7d2d7dfed6a9188f3d9e4dd50b4448a36d19488971090f77df12b62431481a830298f7a6e6dc3caa4d053858a2c387f0f3a435095cdf9e4feb53a2d1d42369481be5eaca71a41591982d4c2604e557ccd44902b93b43cca9f647eb5a930cbe076e950faea22fdc034b773681336874bc2b7a63b9c4f212b465e676cb27afcd1d32b6a2791f03947137c452b089bccbc4aed16a93d06699d781c621ec107eb5af118c73826646728c6ce1f0e361503807cc9764d61e1b568d8b9c1e5be3724db96c5929ec32cedc88aedaefd9e8e5661d462a1976bf6e9e624131e1a16ba3b1897abd32ac7045e3cee09e8d597b8e017acf1239aed621d0209048acbb1a0803d664d8325257b61e64509466aae43448e44dfe742713524c189e1e3054df528f70eab6698314ba25c21692f86d9f3f86fd434bba779ef87f6acc9f8227499c14e6f710b40455dc43a8570614f8177ad45846a253e78684a3e5501a90e3db079f9f4c4c57fe984fb4cbc7ce4e3aec04a9a31796bdafc3395399f1a46fef85ef83dea5e5d26a40ab2be3c37bf407639dabe89135f9721b66bf2ab2cc89578970ac892a8ada2467383ee5f1b95bc796a399878015167c88ec9f374985bd0929df30ccf0ecf51095d39e8439e94cea2532f7bdf4fb243f2857e395a5406523ba895671a8221f53cee9b3be833864736a164aeebcae102afd9a5869e8d768c00d586c71dbb71c593ddae273364fec91b92275d051791efe5eb51bf2575bf068ab510defbe32dac6ed319294db08c49d100d285a555cfca2a8273232619ea41379929c77d6a599ef2e72f1f2109d0d3654fd3da1729bce5333d096eb342a6816c78aa85185b4913a909f13e173adefac2823bb0cb884c5c8f797c793de7de27f82f697ac3c0f4dae6bee20800000046e994f70c9547bffd3a09f3a0d12a30de08782daef2f39eefb0737665dc82acce5c7de7bf07b16310847480ee29e3ce14d70d22d44057823d2352ddd03eed454ab082c9fb3b89c54ffeabe7006f0619e9b5c375496ba02b888046ab0a47489f2503a6497644342bcc91b69f800fed0765e055302c5efba68c14584b51484ef2fc56c6b202076617026b54bd9cada103551c919409d2a7484587e1f549bd003f6ebd2298b6551bd3b4dbadd3735d94e116e4419d7a99a258ba3d3c6ccaa2040c196a30798097cf88be622d0eef81f918b0d6b9a10547000fe93824acd58174e68c39278a4fe16095234f78f9ad55c4b106ef64ff9eba48cecb7a1ffa3f2bf0ea79495c31217ea832d59de26d6eb81af00600000000000000b6aa030215146beb7e4d79836ef450b7d97421d5c6e75430f153c6a326386ffca166861e8e2cd95cc7089cd2a1bdc452cef9a036c17ffe37df7b29eea3f86e1efeee19f1e6f8cdff57d314209cee7653e9c5b706eb8180235daf1706e198fb9f1e78bd7e34f8a6f7d0f78802d372d17f94eb2fed07cab288ba75571719ca96300b7603b08d2e4a9410242b60e5132fe030892575c3eb1130bb4d0cd5dca8db990d0e2fb326af06294831676392b6873e93a270c3b4014468ba0434117b3070740e5cf0a39aef567fdfce912a669825af371c9c2276f0139b449251b98934cdb15549c537ff370ad58f02d292ac0d8e61f7192aab44102cc2701f9f2bfc4b001c55fbb7cdaea65143b81ca8081d5a54f8eed8b3d4d67b633ec695773569a23159258cb7c856335ffeb509ae10b6d041603ab9a1651851ae140d9391e82f313641cb0ce17e5dbaae67b1a33b1dc8ebb86c5908e2b9c21129ab07cf01c313908c66045d3b1ce26e2d4f7fdb96d70e93fb0c2492f9aba718c6bbcfdd1a5d432af40ea2e7c9002bf510fd393d3e5353a290e52fb65e041f9447334ad39a75cc863eb860763530bc0b8a36346196831911d3a82bc3aeafc213b76b099e6193c28e5c1353ebedc10c032340be81b63719e24772df631a8c503bf3ac9c70629bfc0de16b361811e6df77308159662a070ea507828d021c3894941821b9d19f4c2b4f65489e3485f54e481d452ca09820c2cbd3be7e820aa74ea7be011971beae501e6a3d31128488554a61f078ed30c717c93755a89d85641d1be466ed1a094dcafe9e0ddb5ab3e091093c275e69c4b266d7640cdfae794f3777aa4da56022a38b91ba6f165d0af8cd2dfda8f980536fb7634765db25330204369e1fa2467ebd0f7d8f9d72aab188d881758ec36bb0bb1a077dc308431d8b7f2a2cef78632be24bc2c18fd448a845fdec939f075ef4366343d9287d187c20b13d2fe8e64b68771b15b0f220e841e3a8690b876392a03506930df1ff82d8f58cbe8bdeb51699d002af1252e9e313a7ba9ad003d1c8d148ae2cee11f45c8dd5d1f1a7ebcf653c07afe93f1590bdb643e89abd615220343203b38ef9eb0ff73af793b0d74961b213503340e21b6e25a597a5279dcfab9b244775cda15acd35fa7969e5a583c9a7bafbe47b8c9f6dd5859b28f07369bfacb65b596096260606f7f1bdcbac47fe95c1fd66f4b908967b27f688bb62694e6940fee08aa947ca31e074316cc33e70b6bc11e9bd6df292ed8935643553295156358d51dec9561410cad9869682215554e0ed514948cfe9c17b452d92dd93b481f3ce032f1a97b7016b5627989b6f082108c6f0aa83745555cd5ce6ab4b1042ee36a4a27ae78c1cb9ed6bdc1faec012dba41391a152a8d47fa7a42ddcd3b410f196b9c11deb9e52ef16113955c27996145cca1673fa1cef4f99bfc203fd2fa0fd5ab74ff1a676f1056617d69eb9a08ce9c8f894e87695f50a9b65cdb51fc600fe231f8aab1f32e15a4029fd97394c2dcebd7b4a55236949d121c1276c113e07f00217379179e00047f37723c70287338775c6ea07d1297fc4e090a05f069f90cb19bee71a9c5a633834a4c560693f4db2d19a3a2806929f75127a3587d51f67ac2ed27c2624f52b14fdd25a4db7d9e6e3239ecb2ab22429ad09fcfa84ee3bb58079e921bc9ff45b9e81"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x1a0, 0x1, [@m_skbedit={0x124, 0x1f, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x52d9, 0xffffff79, 0x7, 0x10001, 0x2}}]}, {0xd7, 0x6, "6f580099cbf598a5204635fa75e08a52c40e3247973228e004b96cb31571a9eb3e0caed1b55f0366088fbca66919b349aa45090cd806c0a2ffcbacfc54400e02f84de01f578dd125723c133ecacfb489d5d328fcb95e681dbbbccc52872ad521e5b16e37cd86483f660b77f60aa519ca226d329f21332c5eba230af4a1d316aef5ece607bab8515e28f74939f8f3ef7a373eb6580c8588734678a1afcf9953cf911cc277d96c0e568503b9bb39962dfe2ff5423a31f49ab4948036a26c6a70fde847153909ebddbeabf3f654022d178c342847"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x78, 0x20, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffb, 0x1, 0xffffffffffffffff, 0x80, 0x64fa}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0x13, 0x6, "8b94b98d0ec3e6f3e8f0e64c5afff4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x24c, 0x1, [@m_bpf={0xf8, 0x8, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x40, 0x20000000, 0x100, 0xfffffffc}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0x68cbdd42eeadb831, 0x80000001, 0x6}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xfffffff9, 0xffffffffffffffff, 0x58d4373a}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x1, 0x0, 0x1f, 0x2}, {0x4, 0x8, 0x40, 0x200}, {0xf800, 0x3f, 0x1, 0x6}, {0x2, 0x7f, 0x51, 0x2}, {0x5, 0x4, 0x2, 0x4}, {0x8, 0x20, 0x7, 0xfffffffc}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x24, 0x6, "f1d6c6fd9c352072716e2cf12df1cee756c85ba9ca5e0a0acb4cebb12d89446d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x150, 0x1f, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x0, 0xff, 0xfffffffc}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffc1}]}, {0xcc, 0x6, "28855f5c783d1f29c5e6962ee996c80f2641efef50cc7f03fb831323e748e442d649673f067f8935dfec3892705d6e90d2bc64eb7555946fc536650cc87dbd411c5756acca8aacdbdb0c02131e7f0ebfe9760ec6983ad22cc7b2fb4e7eab97230ca283501faf6a0c589c26d7110ed46ee9a1352a515d2bb1f9f3535e171b4e5c01fd9de14365d6fbfabedf61da8dae7e7cfca59c9a41bfc933e3555bddb415f996dc70fc20a3efe42b3cf8f77dae1f03f7d763f5d0f97b4357b127a66e6c336f0cd84c65c0189e16"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b20}, 0x1, 0x0, 0x0, 0x2}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a006) 12:56:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xab00}, 0x0) 12:56:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x5}, 0x0) 12:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x60}, 0x0) 12:56:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xac00}, 0x0) 12:56:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6}, 0x0) [ 1207.279201][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 1207.279221][ T27] audit: type=1804 audit(1690376218.010:2628): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1285/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 12:56:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xad00}, 0x0) 12:56:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x7}, 0x0) [ 1207.443760][ T27] audit: type=1804 audit(1690376218.010:2629): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1285/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1207.565612][ T27] audit: type=1804 audit(1690376218.100:2630): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1532/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 12:56:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 12:56:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x8}, 0x0) 12:56:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xffffffffffffff08}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r8, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000004040)=@newtaction={0x2b20, 0x30, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{0x2720, 0x1, [@m_xt={0x130c, 0x18, 0x0, 0x0, {{0x7}, {0x122c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb6, 0x6, {0x6a, 'security\x00', 0x7f, 0x32, "3e0ed5251b153a4e4a86a25439125cdc94dbca4d132bcd6f95675c7b78ae445be9618d6242fa8832d91c1149f5672222fcc1a63595b82436c66e16d7730cd4b3802bdefab774d8b7d2fe9d8fccf99228f11b98edad1a6d2ec4296074e09f184fcb1940f064434326f634e03e5b1abf58f176343819e0b5122eadcf060d822c72b2d8c704f2d9fb18a76b6fe7"}}, @TCA_IPT_TARG={0x6e, 0x6, {0xffff, 'security\x00', 0x2, 0xc2, "ff557bff09b1f496a258e2508c987c955d781696faffef0a7b82cc94b5c52ac27cd92d7339778d16cefc55e30040cb7121786d110db4dcf95d57348d4e8d5770005fa13a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x102a, 0x6, {0x5, 'mangle\x00', 0x1, 0x3ff, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x7a, 0x6, {0x4, 'raw\x00', 0x3, 0x6, "a4f260f64f0d81e951422f24ba1870407850a5a69680bacb0ef5f83e6099781fdec378018026400b4f73b17b3f5a09093e601265dc3a01f5200fe00856bef75d7f87f29b3cf3bd57cd45c26cf6e34d32"}}]}, {0xbc, 0x6, "2729760b39dc4df712b35e16ad819da3b39b39fb4669abb6e2b8b48d15b48336fc7316a958dad3e3970b70fbff8bccb3ac14342f31d07194d42754fba42f9af06bab32b16a2279c36ab2211623ed32ca8ce49891175b4c36ded613bbc70aeb4b625334f4825aff0e9b877ed3da752f0364126236793582ddfb426536621652a70830a8643036df665a68e015458854934ebe8a716f18e343c324dd64727d79d023ad6ef703f1ede81dc0b59cec03b47fdd80a53731685955"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xdc, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x3, 0x1, 0x57}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x800, 0x8, 0x5, 0x7}, 0xb}}]}, {0x77, 0x6, "30505b4fa3b919a0216b5212cb21874d983b41c6e7bd728365d26209bb41e561377047b62ca4b96d76d344baf0f4546fed8d5e5b159cd8625f129bc9893c880fbdb61370db499ce8359ddddb558cfbd5a17568d6f29c046085b6f3d1952ba6b8e89c307d9f8061ab3030f87f6e554a23f9e92c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x18c, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x10001, 0x2, 0x2d52, 0x4cf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x101, 0x3, 0x1ff, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8de, 0xe7f, 0x0, 0x7, 0x4}, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x6, 0x200, 0x5}, @multicast1, @private=0xa010101, 0xffffff00}}]}, {0xc2, 0x6, "01689cc2e70469854a3578885870c53bc405682e8b33db01a1c7f5a3161e8925d3acb7a48ecaa8e03a65a69fd99fd186cdd616f4ea946e44c260d4e7403da40a20eca1237759cdab179fa257ac140df26fddf91e2b084bfdb454931ce883a4deff0a1384c4b77ad048c3fcc39d01b2a0504af8b8de95a446cb56a4d4c882f3959efc76aacb33346562d9341610b2a3ad628c20dced70c335cb3febc33e551465055dde0fa2855e3048513a0b0124c7679a34166a381732d0b0b4119e8f3f"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x11a8, 0x19, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x1, 0x6, 0xffff, 0xfffffffa}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0x0, 0xffffffffffffffff, 0xe7c, 0xc0}, 0xa}}]}, {0x1128, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x1a0, 0x1, [@m_skbedit={0x124, 0x1f, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x52d9, 0xffffff79, 0x7, 0x10001, 0x2}}]}, {0xd7, 0x6, "6f580099cbf598a5204635fa75e08a52c40e3247973228e004b96cb31571a9eb3e0caed1b55f0366088fbca66919b349aa45090cd806c0a2ffcbacfc54400e02f84de01f578dd125723c133ecacfb489d5d328fcb95e681dbbbccc52872ad521e5b16e37cd86483f660b77f60aa519ca226d329f21332c5eba230af4a1d316aef5ece607bab8515e28f74939f8f3ef7a373eb6580c8588734678a1afcf9953cf911cc277d96c0e568503b9bb39962dfe2ff5423a31f49ab4948036a26c6a70fde847153909ebddbeabf3f654022d178c342847"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x78, 0x20, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffb, 0x1, 0xffffffffffffffff, 0x80, 0x64fa}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0x13, 0x6, "8b94b98d0ec3e6f3e8f0e64c5afff4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x24c, 0x1, [@m_bpf={0xf8, 0x8, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x40, 0x20000000, 0x100, 0xfffffffc}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0x68cbdd42eeadb831, 0x80000001, 0x6}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xfffffff9, 0xffffffffffffffff, 0x58d4373a}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x1, 0x0, 0x1f, 0x2}, {0x4, 0x8, 0x40, 0x200}, {0xf800, 0x3f, 0x1, 0x6}, {0x2, 0x7f, 0x51, 0x2}, {0x5, 0x4, 0x2, 0x4}, {0x8, 0x20, 0x7, 0xfffffffc}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x24, 0x6, "f1d6c6fd9c352072716e2cf12df1cee756c85ba9ca5e0a0acb4cebb12d89446d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x150, 0x1f, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x0, 0xff, 0xfffffffc}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffc1}]}, {0xcc, 0x6, "28855f5c783d1f29c5e6962ee996c80f2641efef50cc7f03fb831323e748e442d649673f067f8935dfec3892705d6e90d2bc64eb7555946fc536650cc87dbd411c5756acca8aacdbdb0c02131e7f0ebfe9760ec6983ad22cc7b2fb4e7eab97230ca283501faf6a0c589c26d7110ed46ee9a1352a515d2bb1f9f3535e171b4e5c01fd9de14365d6fbfabedf61da8dae7e7cfca59c9a41bfc933e3555bddb415f996dc70fc20a3efe42b3cf8f77dae1f03f7d763f5d0f97b4357b127a66e6c336f0cd84c65c0189e16"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b20}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r6, r4, 0x0, 0x10000a006) 12:56:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xae00}, 0x0) 12:56:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xaf00}, 0x0) 12:56:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x9}, 0x0) [ 1207.906273][ T27] audit: type=1804 audit(1690376218.640:2631): pid=7728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1533/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 12:56:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xffffffffffffff08}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r8, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000004040)=@newtaction={0x2b20, 0x30, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{0x2720, 0x1, [@m_xt={0x130c, 0x18, 0x0, 0x0, {{0x7}, {0x122c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb6, 0x6, {0x6a, 'security\x00', 0x7f, 0x32, "3e0ed5251b153a4e4a86a25439125cdc94dbca4d132bcd6f95675c7b78ae445be9618d6242fa8832d91c1149f5672222fcc1a63595b82436c66e16d7730cd4b3802bdefab774d8b7d2fe9d8fccf99228f11b98edad1a6d2ec4296074e09f184fcb1940f064434326f634e03e5b1abf58f176343819e0b5122eadcf060d822c72b2d8c704f2d9fb18a76b6fe7"}}, @TCA_IPT_TARG={0x6e, 0x6, {0xffff, 'security\x00', 0x2, 0xc2, "ff557bff09b1f496a258e2508c987c955d781696faffef0a7b82cc94b5c52ac27cd92d7339778d16cefc55e30040cb7121786d110db4dcf95d57348d4e8d5770005fa13a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x102a, 0x6, {0x5, 'mangle\x00', 0x1, 0x3ff, "d5b3c969240aa76429ef49b58032a4fe697707c50510bc6fc6b5f10be038cfc99a1b8e95605e8c89f7f4cc8ae82a2cf9648fca17d180cd04c8377bf107315c6a72e9d65229ea40b2c1bbd55c7b23073064ab04206a823fb6687efae2891530d2a4b45b6b543fca8e208184ed3202898385a89fa145b72686da6f5f41d3c2566439a35128f52b918e7fb10fc94a16cb97ea25d10397d389c8df45805f4c975539d0920763692fd4abe361de064b5056e9ef788a3e4a47e71d75e7e9fd78a79a376a804cbfc3b46baf41612255335cd50cf4f94f8f21350f423a3cc80a0f40426d422f5734e466726804a1a4a731837a6bbf588e4d195bcd492213b11154ae97c953eafbd0211bc8fe76a967ab32f3e743cd3fd9b913c0818defce2ad49d3af4d125a415d44304503bbd39de1de05b173cc8960cdb2499441c2f219c644faaa760cc3969a3c59adbdaeae5df1984ef0a8e222b31b17cb6294e88e7d6ea96ca6e8dd2b8e5167d47161b81b59225b0f8aa982f1f2c09b0af292c1b83c47e7665dba595cf9d06c367b3e72c0f0417650988c47b11175dfca8abbc6c7a6984a102e8c93579f2cb95bfc5a560ccf39bcc7a5b7f994573a67cb8faedecd4c6224972468aca2dd4a4fda2395e51ad00c9b28bd64706718dceeb366744764554fc514c04407bdc959f3e548b61ac4df67d36e5fa4be32ff228c266feb1ad03f620a63b356e0261b0709ea6f34ade808bc7a84fad87d3cf6dc865d7e1f2c0f282951f6b6b75599b3c2e9c13004cfe114798e6aaeed0cb83fc4a629292a7abbd997f570253bdf880c58b5d3b4f65f2b00872576f10c88980af5aa80c90b9e4674f333c9fb3e041eb9555bc231a523dd29c571c3bc8d804da7eeb273ab6ddd172c0725e80c245b3bdb48d683c382120e80eada9a35e3f355fe66e86906b7b1fa7010b49c274fbae516340483c5b6c7841d6e5a8a8324d74399a5c4dd5762d235aaf7db0fc4d0033f5b0c7e646471b6f70c2f925d3f6cc3269ce195c242913cdb0eed38b09f010ea589983f97dc4e6f6860e9f121ce3ee664ddf2c73c81c6aa72dad42158c1fcadeeb935b579712e2138c0a4271fd2524e78da0fab885c36831c77d046f438717071f8f317cd1862254e248b6f1f5775f6ea92a5d64ab563b89c61b56d92818310023b7e1b0d5fb97485064cb02d16e121587cedfe62a847278a4c25d20ef3963b38551d176700a06624c13812623e380201aa4a9153db1092168a63a91110cee7d1aafc1f078767417af8fa0ce75bc8bdbbf99d926ac596843bc4d5e5850032a799f02ab08626a5661fec185fb53509727df03e0f6718be4544f2c6daf163605065a5017a464f0f7e3b5805f755a947c1f60ff60760f73629f33ef395e01798b9bd06f9180100b5523d2c753dd14ce6b2102b6952ba43931615f0ab0a2fae51868581875eb386d7c369ac979bd710cb90f52920f145284feb7d9ae54b4b787ef51bb329d9df2e4151531913090468a8e8895ee7b67e315fc67a9de9902f536f33c034869b2ef0c03897f44523cd374fb61f24b7a48af86a89a3f700b0638407073c5f76c85da7463f2046c6badcd770c33204db6a85763caf9e5e133ed92983d1c5c4941bc168aaf1a68018ce480e2d7727965125383202132b02ee7a32133b50ca04af61476124c194b2fa4ce68188cab28faabb8981b4fbeb031fe25ae349283bc35bf0410c4c8b6f1a648a877ef3be0844577515a42c16aa328dee0389f483ad4ed689daf31934bade198dcbc40aeeb823ff622ec8b2afd25de111551107cbc8542fed28711b1733744b259d4485a5202b5664a616691d7e61779760a7140aec01978565b6ef46f7ad3d427aa84ba5820d58ec2c706b2c503041d39805675e62218e7f82bca0b827649f0b6e6e49c401b2fbb31ce59b33136c25adf5b9e53e7f44da3125a929a34a581e1082b5c27fd13c0b0f24942a52b7009dbae34e57e2cc252c9872e79b8ad419cd32864f207e647baadec1351147636bfdab5fcb1e2fa2a5b15e74e1a6872967b31b91134483cdb80312199e98af0dba94f9407cbcb11fdf9701cc29f7e9cd2325821082f54ac28654afdb51ae6315c2b375ab4666c55904635f0c7cf5a70fa44f6549cc37a08d3ae1414f7187450980c39e9dfe7b94eee2e47598d43ed29beaad96465e8375cc065396f5d6b66009fa5f4c98fda4eb4a21959cb3b59494657468dd30a8791a1ae209088c9bd0d285eb331d5a036208ac8b1559ece1c29848d57e23208eb78779cb7448c315d2b6b8c27ebeb9bfe4cf558901bf49f4b904efaaf7fcbeb15aea5790462f697594974e3f93699901baee32fb15ea2d65e58d7bca1992238c26e141b3db9ad9d2ae1628bda9ec95e572e0a2fb06c9cf916da93ba89fcad2af812d446a4a3c56ef7b4a8e3a28269f981a70e3448050b96fcdb8f5c46561d0b14ffec5eb4a1c7808d98637d051feaba454cb0f66922618864354f32e90fb73c8cd8e6bba29ab810e9010a9fe1e7178752d01b52cac28b264331c07f3ddaa1016c93e1489ae6e075dc019d5bbcd08899f86bf4927f694a34262257a7e84d6cb8cbbad2fa1a6bb40dfcc3ed6e3626c67353c1658f16be3fb95d08bb09f78fee154f21a2c9bfd4422af91a4e639f6c334285a8feba9a8acb9ee3d063b03f80c033f6514eabbfdb7d5b3023776673258a3d2cc46ebff15abd648bc8c347b721e01e4a74ceb8bd7425a888245cdbdada1979aea8902c0335e578a9ad58ab7c9184adfb98493aebe23bf6ad4711561568584b7ddf0722eab7fd57092b5a2ac4abaec5217fbbcfe43a4e4e3c274c9838f48a028a41c13e283bcf41383ad9ff512d83dcc22c936ba45535b39cdb6b0e0c9f0c691e870241d08ae9d2785b9886d19af94ccf8eab9c84ec5c74b1340c69cfd1e16dcd7e90dbb9b6a880f378d3cfb3ded9b8eda59359dd7d1f641a577f82de4201d225214b19300a3283676dbd31658ac28aee5b9513a42bb5572daea1c743e06fd5cf9e10d1111961851722d9f93c03d21c79e26864f30ae73705e47008a408109a82abf368058a16d6a4777bbdf4473011cecd728f4f7a247b71b42776788cc2173ed53d7f0e5b4242d20db2b3be0ce304f2254448708f6742a314397f97672c83f9f0f1da55df828687fb41c1d6e0546dfa23590c84e04e57a17d0e53605e3bc97305ae6d2d8711ada713e4ed325a2c4c709e5cfef8d6d9fa239bc6b49e1a8bdb0bcc5b43d7414f4c8d2f96f50abac9057cf3cda7e496f9e087213f3a093a947bf3dec2f3a290825850419052bfecddf56cbadd447c8136351856f6d8ee9e991f049e9bfc7c3e058399698a6892967e8eab0bdcedb3e81a1c85720d9e187d11155a09ae60d62f51f989ed2edea1e5e2db68b1e7aab7f28e3d87b47d96c9c59dca876d74e8ce3e3f0d5a5c8b595610c1db5554a50dd3ba97129a91e5b1e3bbba84d3335c884d8e3381842cbe1f0667a21139e09ffc5351863b5c20705120f14e68adf0e0dfd23c2e4b1307c479ff579b22d4489cb0b5d33ab2aafe62b4e6601e813168e24a664144d91f64c4c575417c863e42bd6ce253309ad103efbec84bd4dbf500cb5f34dd4e82a77b47424523c78673550646261237fc939f86ab5d630647e58315b75ee1ed020be14b03e5b800b6faafaea72df0dfbe809cdac9474aee68362ef906804cc26f70f2564706727b5b4b97093f52b2f1a15f057896089e009d15ad4cad789cbb93781df9de3911c9e1a306a6334c32a4032d9556fdb08252b05af98ca060607281b65a843075a37d8a6f1bc75165eda25965d9df6a9b57e3e6fca06dd518063eff8058c34a3ca645a8df694700b403e6603025f30100753c72b049b1b115b4d69d5d361aad55f30dc84a1555d3eab974332f841069820ff11dcec8b0a23acba9df2a25bb57fb1772ec4ea4f831c48bbdb58e47db3d513758ba5c7bc1ccc8249502a783b7adcaab50c6003a483bee9c20f296e1fadeaa72a7c177642f5c26a899bef8d4605c8cb2d0006a3e8f9a98ac398f7f1935ac61218174bba91ddb2f3f9e86d1648a0c2474975e06922df1dc5946e50a36a7f462914d8628a7dbe081a2fe7fd1f5fa8350d1a37c90e3543043717c43b4b7580319ce8cbdc066f948c3ce8bf545bee816e98d78bf6b373d092197968bd8ad3372cf0fc282280b1844906b713cc3ef4271011ae68ef2d88e21be3222c3728df7dbc74dbba0b28ec91d3005fc6f4e5e0394e6e251a52397f369a3a4f25e52dbcce472f2be9536befe231129c7ce90bbdd667a44ea467273d6845cd2de44710fd69f12b69c4620aa2d46c0f80d41e24c67e2a4f449919bfb77151d4e5ff22318d4d89e1913feb7e01a1b781de734fa5b5afa3546957b0a1314e52f615b43bc5b8947bcaa3302694c89f6dcdc8658f344dfaaeedea7bfb67916002f5fd96f8ac0235258f84f8d5fd2f162ce2adbed615278ec182918c0db2fee02f3b89e921e57a058e6571888ffa69bb3123174872500ba3dbb1984876d6e0e2739a28d0c921f872f61d8f5afed643dbe56e306067d2ef53ae54a6b0e19314b6bf7810cd0423b854a1001b8fb3c3e8506bd79c59ae16c6c30ed902f5fa658c11550d5092a05a55cb4173993ac9eb03754c91625a9b8d60b4187f07c2eb1fd106410b4822ca76f2679be5e2be7e7e049ee8a9ad25f9c345a1345585f7baf67abe14aa6593d66d64d6758e066f9db4cac8dcaf4ecbd283dc529ccace15d130cb404d4ed5117b80ac5dc0927646344bbb54fb1d941856878b2855f2f9682a6617e4d82999214a0cf8130e24798033b7845de24c46181f2416eedfda8bf50c7a80ee0feef1d72ce5b30235fbfeb8f250b8b15aa8d7797667fb32c0bb75783c78f40335f4bc0f3a15aad1c5f3d8e40308a4a3d66d7295f701c2baba4f837fc411b551a179cc9113c242357cb32d093b5f412cc0df501dec53dbfd61bb47d49df916fc97839bd7a52396f85ff7a4df0c5a0a084e4dcca4ee8edbc454190f8fee3dcba58eb60a1fe57ec49db504972a43ac942a0cf82f1461beae12794a4ed1dbf75010720ac5e44ed9310226001f912097885dbe74716a79c6a6b334aaa868990cfb65032bd523e98f421381b8a42171c122fc62d9cbbe1d396714021f46ed6d71a3f1222901db2953f17c53cfb75b62cd3a83e468fda746007b225252bd933ffb38e632d84b68499c61a0c0611a67631e1c386fee62317ce29566669f43bf5a33af0ba7606d034f2f0c670d63eb9c0d050861d0fe6a4b43780059bfa06fd45b9468b799c4046b320936f83a4f38597cf337d2444f38a2b64b5113b81e3f2acc2a4f60685ac8820366596a52d343d7def7b4481faedc1e27a0c772a9f8301ba5ed3c7d92772e85c6e701d1d1e373fe663219a103cf2661f2c4c262e25bb578cd685343922dc523381a134f1284ca0295b457cbf81e6473fb059c4feb39060a06acb8ed5b0f0711b4cf81e826ddd56253ac723806757670b14a436a82897b9f3152c76407bb0c86351f90f309e4cdb55b72009c9adf4efbae7f0525d1d9b77251ed8b4f2e59fcd414aae6e0a068b24b480ac4058571942dec25ff0e6b9e76fba83e5e698734ffddb2294065f8dcd587fb05989a293b88c39aca57625a06cc05f224e9e08b6a2fa4584b9b1e8e2930a38bdff25af3efdc139f48e816c2c63434d3fdd147b136166598794d870fb6d7318b74db9a193fc43ef9fea92a15c85b8040d30aea4cdbae0633d2829d6672dc43245a9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x7a, 0x6, {0x4, 'raw\x00', 0x3, 0x6, "a4f260f64f0d81e951422f24ba1870407850a5a69680bacb0ef5f83e6099781fdec378018026400b4f73b17b3f5a09093e601265dc3a01f5200fe00856bef75d7f87f29b3cf3bd57cd45c26cf6e34d32"}}]}, {0xbc, 0x6, "2729760b39dc4df712b35e16ad819da3b39b39fb4669abb6e2b8b48d15b48336fc7316a958dad3e3970b70fbff8bccb3ac14342f31d07194d42754fba42f9af06bab32b16a2279c36ab2211623ed32ca8ce49891175b4c36ded613bbc70aeb4b625334f4825aff0e9b877ed3da752f0364126236793582ddfb426536621652a70830a8643036df665a68e015458854934ebe8a716f18e343c324dd64727d79d023ad6ef703f1ede81dc0b59cec03b47fdd80a53731685955"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xdc, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x3, 0x1, 0x57}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x800, 0x8, 0x5, 0x7}, 0xb}}]}, {0x77, 0x6, "30505b4fa3b919a0216b5212cb21874d983b41c6e7bd728365d26209bb41e561377047b62ca4b96d76d344baf0f4546fed8d5e5b159cd8625f129bc9893c880fbdb61370db499ce8359ddddb558cfbd5a17568d6f29c046085b6f3d1952ba6b8e89c307d9f8061ab3030f87f6e554a23f9e92c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x18c, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x10001, 0x2, 0x2d52, 0x4cf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x101, 0x3, 0x1ff, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8de, 0xe7f, 0x0, 0x7, 0x4}, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x80, 0x6, 0x200, 0x5}, @multicast1, @private=0xa010101, 0xffffff00}}]}, {0xc2, 0x6, "01689cc2e70469854a3578885870c53bc405682e8b33db01a1c7f5a3161e8925d3acb7a48ecaa8e03a65a69fd99fd186cdd616f4ea946e44c260d4e7403da40a20eca1237759cdab179fa257ac140df26fddf91e2b084bfdb454931ce883a4deff0a1384c4b77ad048c3fcc39d01b2a0504af8b8de95a446cb56a4d4c882f3959efc76aacb33346562d9341610b2a3ad628c20dced70c335cb3febc33e551465055dde0fa2855e3048513a0b0124c7679a34166a381732d0b0b4119e8f3f"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x11a8, 0x19, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x1, 0x6, 0xffff, 0xfffffffa}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0x0, 0xffffffffffffffff, 0xe7c, 0xc0}, 0xa}}]}, {0x1128, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x1a0, 0x1, [@m_skbedit={0x124, 0x1f, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x52d9, 0xffffff79, 0x7, 0x10001, 0x2}}]}, {0xd7, 0x6, "6f580099cbf598a5204635fa75e08a52c40e3247973228e004b96cb31571a9eb3e0caed1b55f0366088fbca66919b349aa45090cd806c0a2ffcbacfc54400e02f84de01f578dd125723c133ecacfb489d5d328fcb95e681dbbbccc52872ad521e5b16e37cd86483f660b77f60aa519ca226d329f21332c5eba230af4a1d316aef5ece607bab8515e28f74939f8f3ef7a373eb6580c8588734678a1afcf9953cf911cc277d96c0e568503b9bb39962dfe2ff5423a31f49ab4948036a26c6a70fde847153909ebddbeabf3f654022d178c342847"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x78, 0x20, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffb, 0x1, 0xffffffffffffffff, 0x80, 0x64fa}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}]}, {0x13, 0x6, "8b94b98d0ec3e6f3e8f0e64c5afff4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x24c, 0x1, [@m_bpf={0xf8, 0x8, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x40, 0x20000000, 0x100, 0xfffffffc}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x1, 0x68cbdd42eeadb831, 0x80000001, 0x6}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0xfffffff9, 0xffffffffffffffff, 0x58d4373a}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x1, 0x0, 0x1f, 0x2}, {0x4, 0x8, 0x40, 0x200}, {0xf800, 0x3f, 0x1, 0x6}, {0x2, 0x7f, 0x51, 0x2}, {0x5, 0x4, 0x2, 0x4}, {0x8, 0x20, 0x7, 0xfffffffc}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x24, 0x6, "f1d6c6fd9c352072716e2cf12df1cee756c85ba9ca5e0a0acb4cebb12d89446d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x150, 0x1f, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x0, 0xff, 0xfffffffc}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffffffc1}]}, {0xcc, 0x6, "28855f5c783d1f29c5e6962ee996c80f2641efef50cc7f03fb831323e748e442d649673f067f8935dfec3892705d6e90d2bc64eb7555946fc536650cc87dbd411c5756acca8aacdbdb0c02131e7f0ebfe9760ec6983ad22cc7b2fb4e7eab97230ca283501faf6a0c589c26d7110ed46ee9a1352a515d2bb1f9f3535e171b4e5c01fd9de14365d6fbfabedf61da8dae7e7cfca59c9a41bfc933e3555bddb415f996dc70fc20a3efe42b3cf8f77dae1f03f7d763f5d0f97b4357b127a66e6c336f0cd84c65c0189e16"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2b20}, 0x1, 0x0, 0x0, 0x2}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a006) (async) sendfile(r6, r4, 0x0, 0x10000a006) 12:56:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb000}, 0x0) 12:56:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xa}, 0x0) [ 1208.155570][ T27] audit: type=1804 audit(1690376218.890:2632): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/717/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 12:56:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb100}, 0x0) [ 1208.281631][ T27] audit: type=1804 audit(1690376218.910:2633): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3099405475/syzkaller.9zxEw4/717/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1208.459858][ T27] audit: type=1804 audit(1690376219.040:2634): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1534/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1208.532449][ T27] audit: type=1804 audit(1690376219.070:2635): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1286/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1208.561143][ T27] audit: type=1804 audit(1690376219.070:2636): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1286/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 12:56:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:56:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x500, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:56:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='ip6gretap0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="74feffff", @ANYRES16=0x0, @ANYBLOB="000028bd000300"/18, @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00000000000000001400", @ANYRES32=r1, @ANYBLOB="00007400020000000000c200010000000000c20009000000000019000200000000001900000000000000e400000000000000130101000000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x64008840) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000002) openat$cgroup_ro(r6, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001600)={{r9}, 0x0, 0x4, @unused=[0x3, 0x2000000000000000, 0xfffffffffffffffa, 0x6], @name="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"}) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendfile(r8, r5, 0x0, 0x10000a006) 12:56:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb}, 0x0) 12:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x300}, 0x0) 12:56:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb200}, 0x0) 12:56:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc}, 0x0) 12:56:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb300}, 0x0) 12:56:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 1209.021457][ T27] audit: type=1804 audit(1690376219.750:2637): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1535/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 12:56:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb400}, 0x0) 12:56:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe}, 0x0) 12:56:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0xc000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0xc00, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb500}, 0x0) 12:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x39f}, 0x0) 12:57:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf}, 0x0) 12:57:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x3000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='ip6gretap0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="74feffff", @ANYRES16=0x0, @ANYBLOB="000028bd000300"/18, @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00000000000000001400", @ANYRES32=r1, @ANYBLOB="00007400020000000000c200010000000000c20009000000000019000200000000001900000000000000e400000000000000130101000000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x64008840) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000002) openat$cgroup_ro(r6, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001600)={{r9}, 0x0, 0x4, @unused=[0x3, 0x2000000000000000, 0xfffffffffffffffa, 0x6], @name="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"}) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendfile(r8, r5, 0x0, 0x10000a006) (async) sendfile(r8, r5, 0x0, 0x10000a006) 12:57:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb600}, 0x0) 12:57:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000024a39933d813b22af6b5cbb228bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1cc10e1381"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r8, 0x0, 0x10000a006) 12:57:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x10}, 0x0) 12:57:00 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x60, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='ip6gretap0\x00'}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="74feffff", @ANYRES16=0x0, @ANYBLOB="000028bd000300"/18, @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00000000000000001400", @ANYRES32=r1, @ANYBLOB="00007400020000000000c200010000000000c20009000000000019000200000000001900000000000000e400000000000000130101000000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x64008840) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000002) openat$cgroup_ro(r6, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000001600)={{r9}, 0x0, 0x4, @unused=[0x3, 0x2000000000000000, 0xfffffffffffffffa, 0x6], @name="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"}) (async) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendfile(r8, r5, 0x0, 0x10000a006) 12:57:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb700}, 0x0) 12:57:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x11}, 0x0) 12:57:00 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb800}, 0x0) 12:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x500}, 0x0) 12:57:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1401, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000840)={0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b40bbbd7}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r12, r11, 0x0, 0x100000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000580)='GPL\x00', 0xfffeffff, 0xf8, &(0x7f00000005c0)=""/248, 0x41000, 0x28, '\x00', 0x0, 0x1a, r10, 0x8, &(0x7f00000006c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x6, 0x1, 0x2}, 0x10, 0x135f7, r1, 0x0, &(0x7f0000000780)=[r11, 0xffffffffffffffff]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x54, 0x7f, 0x1, 0x10, @empty, @private0, 0x80, 0x7, 0x4, 0x8}}) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:57:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x13}, 0x0) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xb900}, 0x0) 12:57:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xffffa888, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x60}, 0x0) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xba00}, 0x0) 12:57:01 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1401, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40000004) (async) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1401, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000540)) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000840)={0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b40bbbd7}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000840)={0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b40bbbd7}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r12, r11, 0x0, 0x100000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000580)='GPL\x00', 0xfffeffff, 0xf8, &(0x7f00000005c0)=""/248, 0x41000, 0x28, '\x00', 0x0, 0x1a, r10, 0x8, &(0x7f00000006c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x6, 0x1, 0x2}, 0x10, 0x135f7, r1, 0x0, &(0x7f0000000780)=[r11, 0xffffffffffffffff]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x54, 0x7f, 0x1, 0x10, @empty, @private0, 0x80, 0x7, 0x4, 0x8}}) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:57:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0}, 0x0) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xbb00}, 0x0) 12:57:01 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xf1ffffff, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:01 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x1401, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000840)={0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b40bbbd7}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r12, r11, 0x0, 0x100000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000580)='GPL\x00', 0xfffeffff, 0xf8, &(0x7f00000005c0)=""/248, 0x41000, 0x28, '\x00', 0x0, 0x1a, r10, 0x8, &(0x7f00000006c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x6, 0x1, 0x2}, 0x10, 0x135f7, r1, 0x0, &(0x7f0000000780)=[r11, 0xffffffffffffffff]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x54, 0x7f, 0x1, 0x10, @empty, @private0, 0x80, 0x7, 0x4, 0x8}}) write$binfmt_script(r9, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r7, r6, 0x0, 0x10000a006) 12:57:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x300}, 0x0) 12:57:01 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xbc00}, 0x0) 12:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xbd00}, 0x0) 12:57:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x3e8}, 0x0) 12:57:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x481}, 0x0) 12:57:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 12:57:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xbe00}, 0x0) 12:57:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x500}, 0x0) 12:57:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xbf00}, 0x0) 12:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x700}, 0x0) 12:57:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x600}, 0x0) 12:57:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 12:57:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc000}, 0x0) 12:57:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) (fail_nth: 1) 12:57:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x700}, 0x0) 12:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x900}, 0x0) 12:57:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 1) 12:57:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x900}, 0x0) 12:57:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc100}, 0x0) 12:57:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x81}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000560f50293c6f71f3b53a1f3ad30000089548fae726e8604d6b239d1afc7d367d53a7569a13e5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_begin\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x81}, 0x48) socket$netlink(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socket$inet6(0xa, 0x3, 0x103) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83050000000000325a306c66388304533c0c03dcc1840000", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x10000000d) [ 1212.123034][ T7932] FAULT_INJECTION: forcing a failure. [ 1212.123034][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.178827][ T7932] CPU: 1 PID: 7932 Comm: syz-executor.5 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1212.189242][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1212.199438][ T7932] Call Trace: [ 1212.202756][ T7932] [ 1212.205732][ T7932] dump_stack_lvl+0x125/0x1b0 [ 1212.210485][ T7932] should_fail_ex+0x496/0x5b0 [ 1212.215246][ T7932] _copy_from_user+0x30/0xf0 [ 1212.219907][ T7932] move_addr_to_kernel+0x68/0x150 [ 1212.225106][ T7932] __sys_sendto+0x193/0x340 [ 1212.229677][ T7932] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1212.235122][ T7932] ? vfs_write+0x14c/0xe40 [ 1212.239628][ T7932] ? __fget_files+0x279/0x410 [ 1212.244395][ T7932] ? ksys_write+0x1a7/0x250 [ 1212.248973][ T7932] ? __ia32_sys_read+0xb0/0xb0 [ 1212.253811][ T7932] __x64_sys_sendto+0xe0/0x1b0 [ 1212.258637][ T7932] ? syscall_enter_from_user_mode+0x26/0x80 [ 1212.264592][ T7932] do_syscall_64+0x38/0xb0 [ 1212.269063][ T7932] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1212.275026][ T7932] RIP: 0033:0x7ff9a787cb29 [ 1212.279503][ T7932] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1212.299164][ T7932] RSP: 002b:00007ff9a86710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1212.307633][ T7932] RAX: ffffffffffffffda RBX: 00007ff9a799bf80 RCX: 00007ff9a787cb29 [ 1212.315738][ T7932] RDX: 00000000000000ca RSI: 0000000020000180 RDI: 0000000000000004 12:57:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xa00}, 0x0) [ 1212.323782][ T7932] RBP: 00007ff9a8671120 R08: 0000000020000240 R09: 0000000000000014 [ 1212.331791][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.333904][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1212.333924][ T27] audit: type=1804 audit(1690376223.020:2656): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1543/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1212.339775][ T7932] R13: 000000000000000b R14: 00007ff9a799bf80 R15: 00007ffee94f2048 12:57:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc200}, 0x0) [ 1212.380376][ T7932] 12:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 1212.416755][ T27] audit: type=1804 audit(1690376223.150:2657): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1294/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 12:57:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb00}, 0x0) [ 1212.511144][ T7929] FAULT_INJECTION: forcing a failure. [ 1212.511144][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.548843][ T27] audit: type=1804 audit(1690376223.190:2658): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1294/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1212.571723][ T7929] CPU: 0 PID: 7929 Comm: syz-executor.0 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1212.585131][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1212.595328][ T7929] Call Trace: [ 1212.598650][ T7929] [ 1212.601621][ T7929] dump_stack_lvl+0x125/0x1b0 [ 1212.606365][ T7929] should_fail_ex+0x496/0x5b0 [ 1212.611129][ T7929] should_failslab+0x9/0x20 [ 1212.615726][ T7929] __kmem_cache_alloc_node+0x2fd/0x350 [ 1212.621264][ T7929] ? alloc_pipe_info+0x10f/0x580 [ 1212.626304][ T7929] kmalloc_trace+0x25/0xe0 [ 1212.630802][ T7929] alloc_pipe_info+0x10f/0x580 [ 1212.635667][ T7929] splice_direct_to_actor+0x78b/0xa30 [ 1212.641159][ T7929] ? folio_flags.constprop.0+0x150/0x150 [ 1212.646881][ T7929] ? apparmor_file_permission+0x21f/0x4f0 [ 1212.652667][ T7929] ? vfs_splice_read+0x3b0/0x3b0 [ 1212.657677][ T7929] ? bpf_lsm_file_permission+0x9/0x10 [ 1212.663119][ T7929] ? security_file_permission+0x94/0x100 [ 1212.668842][ T7929] do_splice_direct+0x1af/0x280 [ 1212.673767][ T7929] ? splice_direct_to_actor+0xa30/0xa30 [ 1212.679391][ T7929] ? propagate_umount+0x1af0/0x1af0 [ 1212.684668][ T7929] ? bpf_lsm_file_permission+0x9/0x10 [ 1212.690105][ T7929] ? security_file_permission+0x94/0x100 [ 1212.695818][ T7929] do_sendfile+0xb88/0x1390 [ 1212.700894][ T7929] ? bit_wait_timeout+0x160/0x160 [ 1212.705989][ T7929] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 1212.711375][ T7929] __x64_sys_sendfile64+0x1d6/0x220 [ 1212.716637][ T7929] ? ksys_write+0x1a7/0x250 [ 1212.721206][ T7929] ? __ia32_sys_sendfile+0x220/0x220 [ 1212.726574][ T7929] ? syscall_enter_from_user_mode+0x26/0x80 [ 1212.732554][ T7929] do_syscall_64+0x38/0xb0 [ 1212.737043][ T7929] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1212.742998][ T7929] RIP: 0033:0x7f3a3cc7cb29 [ 1212.747463][ T7929] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1212.767136][ T7929] RSP: 002b:00007f3a3da530c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1212.775627][ T7929] RAX: ffffffffffffffda RBX: 00007f3a3cd9c050 RCX: 00007f3a3cc7cb29 [ 1212.783660][ T7929] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 1212.791683][ T7929] RBP: 00007f3a3da53120 R08: 0000000000000000 R09: 0000000000000000 [ 1212.799706][ T7929] R10: 000000010000a006 R11: 0000000000000246 R12: 0000000000000001 [ 1212.807725][ T7929] R13: 000000000000006e R14: 00007f3a3cd9c050 R15: 00007ffeb11890a8 [ 1212.815779][ T7929] 12:57:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) (fail_nth: 2) 12:57:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc300}, 0x0) 12:57:03 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 2) 12:57:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc00}, 0x0) 12:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1212.980371][ T7955] FAULT_INJECTION: forcing a failure. [ 1212.980371][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.031082][ T7955] CPU: 0 PID: 7955 Comm: syz-executor.5 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1213.041508][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1213.051629][ T7955] Call Trace: [ 1213.054951][ T7955] [ 1213.057913][ T7955] dump_stack_lvl+0x125/0x1b0 [ 1213.062654][ T7955] should_fail_ex+0x496/0x5b0 [ 1213.067412][ T7955] should_failslab+0x9/0x20 [ 1213.071991][ T7955] kmem_cache_alloc_node+0x389/0x3f0 [ 1213.077353][ T7955] ? __alloc_skb+0x287/0x330 [ 1213.082024][ T7955] __alloc_skb+0x287/0x330 [ 1213.086523][ T7955] ? __napi_build_skb+0x50/0x50 [ 1213.091455][ T7955] alloc_skb_with_frags+0x9d/0x700 [ 1213.096650][ T7955] ? print_usage_bug.part.0+0x670/0x670 [ 1213.102276][ T7955] sock_alloc_send_pskb+0x7c8/0x950 [ 1213.107554][ T7955] ? sock_wmalloc+0x120/0x120 [ 1213.112299][ T7955] ? aa_profile_af_perm+0x470/0x470 [ 1213.117590][ T7955] packet_sendmsg+0x1e14/0x54c0 [ 1213.122607][ T7955] ? preempt_count_sub+0x150/0x150 [ 1213.127792][ T7955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1213.133772][ T7955] ? aa_sk_perm+0x2c1/0xae0 [ 1213.138350][ T7955] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1213.144299][ T7955] ? aa_af_perm+0x260/0x260 [ 1213.148894][ T7955] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1213.154244][ T7955] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1213.160213][ T7955] sock_sendmsg+0xd9/0x180 [ 1213.164700][ T7955] __sys_sendto+0x255/0x340 [ 1213.169274][ T7955] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1213.174728][ T7955] ? vfs_write+0x14c/0xe40 [ 1213.179237][ T7955] ? __fget_files+0x279/0x410 [ 1213.184001][ T7955] ? ksys_write+0x1a7/0x250 [ 1213.188602][ T7955] ? __ia32_sys_read+0xb0/0xb0 [ 1213.193451][ T7955] __x64_sys_sendto+0xe0/0x1b0 [ 1213.198294][ T7955] ? syscall_enter_from_user_mode+0x26/0x80 [ 1213.204265][ T7955] do_syscall_64+0x38/0xb0 [ 1213.208751][ T7955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1213.214712][ T7955] RIP: 0033:0x7ff9a787cb29 12:57:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xdb3}, 0x0) 12:57:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc400}, 0x0) 12:57:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x81}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000560f50293c6f71f3b53a1f3ad30000089548fae726e8604d6b239d1afc7d367d53a7569a13e5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_begin\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x81}, 0x48) (async) socket$netlink(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) socket$inet6(0xa, 0x3, 0x103) r2 = socket$rxrpc(0x21, 0x2, 0xa) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83050000000000325a306c66388304533c0c03dcc1840000", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x10000000d) [ 1213.219180][ T7955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1213.238971][ T7955] RSP: 002b:00007ff9a86710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1213.247443][ T7955] RAX: ffffffffffffffda RBX: 00007ff9a799bf80 RCX: 00007ff9a787cb29 [ 1213.255466][ T7955] RDX: 00000000000000ca RSI: 0000000020000180 RDI: 0000000000000004 [ 1213.263487][ T7955] RBP: 00007ff9a8671120 R08: 0000000020000240 R09: 0000000000000014 [ 1213.271520][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.279545][ T7955] R13: 000000000000000b R14: 00007ff9a799bf80 R15: 00007ffee94f2048 [ 1213.280583][ T27] audit: type=1804 audit(1690376224.010:2659): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1295/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1213.287570][ T7955] 12:57:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe00}, 0x0) 12:57:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc500}, 0x0) [ 1213.415468][ T7973] FAULT_INJECTION: forcing a failure. [ 1213.415468][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:57:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x81}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000560f50293c6f71f3b53a1f3ad30000089548fae726e8604d6b239d1afc7d367d53a7569a13e5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_begin\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x81}, 0x48) (async) socket$netlink(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) socket$inet6(0xa, 0x3, 0x103) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83050000000000325a306c66388304533c0c03dcc1840000", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x10000000d) 12:57:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf00}, 0x0) [ 1213.555485][ T27] audit: type=1804 audit(1690376224.290:2660): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1295/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1213.654438][ T7973] CPU: 0 PID: 7973 Comm: syz-executor.0 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1213.664857][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1213.674974][ T7973] Call Trace: [ 1213.678300][ T7973] [ 1213.681278][ T7973] dump_stack_lvl+0x125/0x1b0 [ 1213.686031][ T7973] should_fail_ex+0x496/0x5b0 [ 1213.690783][ T7973] _copy_from_user+0x30/0xf0 [ 1213.695442][ T7973] kstrtouint_from_user+0xd7/0x1b0 [ 1213.700622][ T7973] ? kstrtouint+0x130/0x130 [ 1213.705213][ T7973] ? lock_sync+0x190/0x190 [ 1213.709706][ T7973] proc_fail_nth_write+0x84/0x230 [ 1213.714843][ T7973] ? proc_task_getattr+0x1f0/0x1f0 [ 1213.720045][ T7973] vfs_write+0x2a4/0xe40 [ 1213.724375][ T7973] ? proc_task_getattr+0x1f0/0x1f0 [ 1213.729558][ T7973] ? kernel_write+0x6c0/0x6c0 [ 1213.734316][ T7973] ? __fget_files+0x279/0x410 [ 1213.739089][ T7973] ksys_write+0x12f/0x250 [ 1213.743485][ T7973] ? __ia32_sys_read+0xb0/0xb0 [ 1213.748436][ T7973] ? syscall_enter_from_user_mode+0x26/0x80 [ 1213.754412][ T7973] do_syscall_64+0x38/0xb0 [ 1213.758884][ T7973] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1213.764834][ T7973] RIP: 0033:0x7f3a3cc7b86f [ 1213.769291][ T7973] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 1213.788948][ T7973] RSP: 002b:00007f3a3da110c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1213.797412][ T7973] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3a3cc7b86f [ 1213.805425][ T7973] RDX: 0000000000000001 RSI: 00007f3a3da11130 RDI: 0000000000000009 [ 1213.813431][ T7973] RBP: 00007f3a3da11120 R08: 0000000000000000 R09: 0000000000000000 [ 1213.821458][ T7973] R10: 000000010000a006 R11: 0000000000000293 R12: 0000000000000001 [ 1213.829480][ T7973] R13: 000000000000006e R14: 00007f3a3cd9c1f0 R15: 00007ffeb11890a8 [ 1213.837512][ T7973] 12:57:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 12:57:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc600}, 0x0) 12:57:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 3) 12:57:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x40) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4170b2951bef6fdbd3f69d969e1c9db2144ecdf25f4455b25add45c4492740492624094874948af11f7535a51affb65b02d3504c149228cce2da143e0ac329fce49488956279a5624e0edd36fb98a08b5ccfefd0237c5557febd71d6f0b57e21f3d6d15c180fad0921445727d4e8ac08281c901b2ad8815ad41a59f9840f8b224314", 0x82) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 12:57:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1100}, 0x0) 12:57:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc700}, 0x0) 12:57:04 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1300}, 0x0) 12:57:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x40) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4170b2951bef6fdbd3f69d969e1c9db2144ecdf25f4455b25add45c4492740492624094874948af11f7535a51affb65b02d3504c149228cce2da143e0ac329fce49488956279a5624e0edd36fb98a08b5ccfefd0237c5557febd71d6f0b57e21f3d6d15c180fad0921445727d4e8ac08281c901b2ad8815ad41a59f9840f8b224314", 0x82) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r2, r1, 0x0, 0x100000002) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r3, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000280)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendfile(r5, r4, 0x0, 0x100000002) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4170b2951bef6fdbd3f69d969e1c9db2144ecdf25f4455b25add45c4492740492624094874948af11f7535a51affb65b02d3504c149228cce2da143e0ac329fce49488956279a5624e0edd36fb98a08b5ccfefd0237c5557febd71d6f0b57e21f3d6d15c180fad0921445727d4e8ac08281c901b2ad8815ad41a59f9840f8b224314", 0x82) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x20000001) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) 12:57:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 4) 12:57:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc800}, 0x0) [ 1214.189913][ T8011] FAULT_INJECTION: forcing a failure. [ 1214.189913][ T8011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.206538][ T8011] CPU: 0 PID: 8011 Comm: syz-executor.5 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1214.216936][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1214.227033][ T8011] Call Trace: [ 1214.230351][ T8011] [ 1214.233322][ T8011] dump_stack_lvl+0x125/0x1b0 [ 1214.238060][ T8011] should_fail_ex+0x496/0x5b0 [ 1214.242795][ T8011] copyin+0x1b/0xa0 [ 1214.246675][ T8011] _copy_from_iter+0x1e5/0x11f0 [ 1214.251627][ T8011] ? skb_set_owner_w+0x29f/0x460 [ 1214.256630][ T8011] ? sock_alloc_send_pskb+0x72b/0x950 [ 1214.262062][ T8011] ? hash_and_copy_to_iter+0x230/0x230 [ 1214.267597][ T8011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1214.273571][ T8011] ? __virt_addr_valid+0x5e/0x2d0 [ 1214.278660][ T8011] ? __phys_addr_symbol+0x30/0x70 [ 1214.283738][ T8011] ? __check_object_size+0x323/0x740 [ 1214.289082][ T8011] skb_copy_datagram_from_iter+0x121/0x6b0 [ 1214.294978][ T8011] packet_sendmsg+0x2034/0x54c0 [ 1214.299874][ T8011] ? preempt_count_sub+0x150/0x150 [ 1214.305032][ T8011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1214.310976][ T8011] ? aa_sk_perm+0x2c1/0xae0 [ 1214.315529][ T8011] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1214.321462][ T8011] ? aa_af_perm+0x260/0x260 [ 1214.326013][ T8011] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1214.331338][ T8011] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1214.337290][ T8011] sock_sendmsg+0xd9/0x180 [ 1214.341747][ T8011] __sys_sendto+0x255/0x340 [ 1214.346296][ T8011] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1214.351708][ T8011] ? vfs_write+0x14c/0xe40 [ 1214.356179][ T8011] ? __fget_files+0x279/0x410 [ 1214.360912][ T8011] ? ksys_write+0x1a7/0x250 [ 1214.365460][ T8011] ? __ia32_sys_read+0xb0/0xb0 [ 1214.370269][ T8011] __x64_sys_sendto+0xe0/0x1b0 [ 1214.375064][ T8011] ? syscall_enter_from_user_mode+0x26/0x80 [ 1214.380991][ T8011] do_syscall_64+0x38/0xb0 [ 1214.385435][ T8011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1214.391354][ T8011] RIP: 0033:0x7ff9a787cb29 [ 1214.395799][ T8011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1214.415435][ T8011] RSP: 002b:00007ff9a86710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1214.423867][ T8011] RAX: ffffffffffffffda RBX: 00007ff9a799bf80 RCX: 00007ff9a787cb29 [ 1214.431861][ T8011] RDX: 00000000000000ca RSI: 0000000020000180 RDI: 0000000000000004 12:57:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x5865}, 0x0) [ 1214.439861][ T8011] RBP: 00007ff9a8671120 R08: 0000000020000240 R09: 0000000000000014 [ 1214.447904][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.455909][ T8011] R13: 000000000000000b R14: 00007ff9a799bf80 R15: 00007ffee94f2048 [ 1214.463921][ T8011] [ 1214.715990][ T27] audit: type=1804 audit(1690376225.450:2661): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1296/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 [ 1214.754194][ T27] audit: type=1804 audit(1690376225.480:2662): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1296/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a005) 12:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:57:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xc900}, 0x0) 12:57:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6000}, 0x0) 12:57:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 5) 12:57:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r3, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000280)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4170b2951bef6fdbd3f69d969e1c9db2144ecdf25f4455b25add45c4492740492624094874948af11f7535a51affb65b02d3504c149228cce2da143e0ac329fce49488956279a5624e0edd36fb98a08b5ccfefd0237c5557febd71d6f0b57e21f3d6d15c180fad0921445727d4e8ac08281c901b2ad8815ad41a59f9840f8b224314", 0x82) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x48880}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) [ 1215.285335][ T8031] FAULT_INJECTION: forcing a failure. [ 1215.285335][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.298612][ T8031] CPU: 0 PID: 8031 Comm: syz-executor.5 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1215.309082][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1215.319178][ T8031] Call Trace: [ 1215.322490][ T8031] [ 1215.325476][ T8031] dump_stack_lvl+0x125/0x1b0 [ 1215.330217][ T8031] should_fail_ex+0x496/0x5b0 [ 1215.334956][ T8031] ? lock_sync+0x190/0x190 [ 1215.339424][ T8031] should_failslab+0x9/0x20 [ 1215.343977][ T8031] kmem_cache_alloc+0x69/0x3b0 [ 1215.348794][ T8031] skb_clone+0x171/0x3c0 [ 1215.353098][ T8031] dev_queue_xmit_nit+0x38b/0xb80 [ 1215.358170][ T8031] dev_hard_start_xmit+0x59/0x6c0 [ 1215.363260][ T8031] __dev_queue_xmit+0x9be/0x3d60 [ 1215.368244][ T8031] ? _copy_from_iter+0x256/0x11f0 [ 1215.373321][ T8031] ? netdev_core_pick_tx+0x390/0x390 [ 1215.378650][ T8031] ? packet_parse_headers+0x6ad/0x990 [ 1215.384131][ T8031] ? packet_parse_headers+0x6b9/0x990 [ 1215.389541][ T8031] ? packet_parse_headers+0x219/0x990 [ 1215.394957][ T8031] ? __phys_addr_symbol+0x30/0x70 [ 1215.400012][ T8031] ? __check_object_size+0x323/0x740 [ 1215.405350][ T8031] ? packet_seq_show+0x350/0x350 [ 1215.410335][ T8031] ? skb_copy_datagram_from_iter+0x47f/0x6b0 [ 1215.416376][ T8031] packet_xmit+0x257/0x380 [ 1215.420848][ T8031] packet_sendmsg+0x248a/0x54c0 [ 1215.425753][ T8031] ? preempt_count_sub+0x150/0x150 [ 1215.430907][ T8031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1215.436852][ T8031] ? aa_sk_perm+0x2c1/0xae0 [ 1215.441410][ T8031] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1215.447326][ T8031] ? aa_af_perm+0x260/0x260 [ 1215.451871][ T8031] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1215.457194][ T8031] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1215.463120][ T8031] sock_sendmsg+0xd9/0x180 [ 1215.467573][ T8031] __sys_sendto+0x255/0x340 [ 1215.472118][ T8031] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1215.477534][ T8031] ? vfs_write+0x14c/0xe40 [ 1215.482023][ T8031] ? __fget_files+0x279/0x410 [ 1215.486756][ T8031] ? ksys_write+0x1a7/0x250 [ 1215.491301][ T8031] ? __ia32_sys_read+0xb0/0xb0 [ 1215.496115][ T8031] __x64_sys_sendto+0xe0/0x1b0 [ 1215.500923][ T8031] ? syscall_enter_from_user_mode+0x26/0x80 [ 1215.506857][ T8031] do_syscall_64+0x38/0xb0 [ 1215.511307][ T8031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1215.517236][ T8031] RIP: 0033:0x7ff9a787cb29 [ 1215.521679][ T8031] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1215.541318][ T8031] RSP: 002b:00007ff9a86710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1215.549762][ T8031] RAX: ffffffffffffffda RBX: 00007ff9a799bf80 RCX: 00007ff9a787cb29 [ 1215.557755][ T8031] RDX: 00000000000000ca RSI: 0000000020000180 RDI: 0000000000000004 [ 1215.565839][ T8031] RBP: 00007ff9a8671120 R08: 0000000020000240 R09: 0000000000000014 [ 1215.573856][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.581852][ T8031] R13: 000000000000000b R14: 00007ff9a799bf80 R15: 00007ffee94f2048 [ 1215.589870][ T8031] 12:57:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6558}, 0x0) 12:57:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xca00}, 0x0) 12:57:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x38, 0xa, 0x5, 0x3, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0xa}, [@typed={0xd, 0x5a, 0x0, 0x0, @str='fq_codel\x00'}, @nested={0x14, 0x4b, 0x0, 0x1, [@typed={0xd, 0x22, 0x0, 0x0, @str='):$-`^])\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000081000000000400000009000100666c6f77000600001c00020008000100eef90100080002"], 0x4c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@newtclass={0x68, 0x28, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0xfff2}, {0xf, 0xfff3}, {0x0, 0xfff2}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x7f, 0x2}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendfile(r6, r5, 0x0, 0x100000002) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="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"]) 12:57:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x8100}, 0x0) [ 1215.780583][ T27] audit: type=1804 audit(1690376226.510:2663): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1297/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xcb00}, 0x0) [ 1215.898606][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1215.912452][ T27] audit: type=1804 audit(1690376226.550:2664): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1297/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb30d}, 0x0) [ 1216.031363][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x5400}, 0x0) 12:57:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xcc00}, 0x0) 12:57:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x38, 0xa, 0x5, 0x3, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0xa}, [@typed={0xd, 0x5a, 0x0, 0x0, @str='fq_codel\x00'}, @nested={0x14, 0x4b, 0x0, 0x1, [@typed={0xd, 0x22, 0x0, 0x0, @str='):$-`^])\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000081000000000400000009000100666c6f77000600001c00020008000100eef90100080002"], 0x4c}}, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@newtclass={0x68, 0x28, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0xfff2}, {0xf, 0xfff3}, {0x0, 0xfff2}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x7f, 0x2}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) sendfile(r6, r5, 0x0, 0x100000002) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="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"]) 12:57:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe803}, 0x0) 12:57:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 6) 12:57:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a007) [ 1216.401994][ T8068] FAULT_INJECTION: forcing a failure. [ 1216.401994][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.415336][ T8068] CPU: 1 PID: 8068 Comm: syz-executor.5 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1216.425725][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1216.435840][ T8068] Call Trace: [ 1216.439168][ T8068] [ 1216.442145][ T8068] dump_stack_lvl+0x125/0x1b0 [ 1216.446898][ T8068] should_fail_ex+0x496/0x5b0 [ 1216.451660][ T8068] should_failslab+0x9/0x20 [ 1216.456240][ T8068] kmem_cache_alloc+0x69/0x3b0 [ 1216.461080][ T8068] ? lock_sync+0x190/0x190 [ 1216.465583][ T8068] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 1216.471576][ T8068] dst_alloc+0x9d/0x1b0 [ 1216.475829][ T8068] ip6_dst_alloc+0x33/0xa0 [ 1216.480324][ T8068] ip6_pol_route+0x93f/0x1220 [ 1216.485157][ T8068] ? ip6_pol_route_lookup+0x1df0/0x1df0 [ 1216.490800][ T8068] ? ip6_pol_route_input+0x70/0x70 [ 1216.495978][ T8068] fib6_rule_lookup+0x4ae/0x5f0 [ 1216.501002][ T8068] ? lock_acquire+0x1ae/0x510 [ 1216.505746][ T8068] ? fib6_lookup+0x2e0/0x2e0 [ 1216.510404][ T8068] ? lock_sync+0x190/0x190 [ 1216.514883][ T8068] ? lock_acquire+0x1ae/0x510 [ 1216.519632][ T8068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1216.525629][ T8068] ? decode_session6+0x900/0x1950 [ 1216.530821][ T8068] ip6_route_output_flags+0x1d2/0x650 [ 1216.536274][ T8068] vti_tunnel_xmit+0xaa1/0x1a30 [ 1216.541410][ T8068] ? vti_rcv_cb+0x760/0x760 [ 1216.546027][ T8068] dev_hard_start_xmit+0x13d/0x6c0 [ 1216.551827][ T8068] __dev_queue_xmit+0x9be/0x3d60 [ 1216.556845][ T8068] ? _copy_from_iter+0x256/0x11f0 [ 1216.561971][ T8068] ? netdev_core_pick_tx+0x390/0x390 [ 1216.567345][ T8068] ? packet_parse_headers+0x6ad/0x990 [ 1216.572799][ T8068] ? packet_parse_headers+0x6b9/0x990 [ 1216.578248][ T8068] ? packet_parse_headers+0x219/0x990 [ 1216.583693][ T8068] ? __phys_addr_symbol+0x30/0x70 [ 1216.588773][ T8068] ? __check_object_size+0x323/0x740 [ 1216.594126][ T8068] ? packet_seq_show+0x350/0x350 [ 1216.599143][ T8068] ? skb_copy_datagram_from_iter+0x47f/0x6b0 [ 1216.605560][ T8068] packet_xmit+0x257/0x380 [ 1216.610077][ T8068] packet_sendmsg+0x248a/0x54c0 [ 1216.615035][ T8068] ? preempt_count_sub+0x150/0x150 [ 1216.620235][ T8068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1216.626213][ T8068] ? aa_sk_perm+0x2c1/0xae0 [ 1216.630799][ T8068] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1216.636751][ T8068] ? aa_af_perm+0x260/0x260 [ 1216.641342][ T8068] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1216.646697][ T8068] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 1216.652688][ T8068] sock_sendmsg+0xd9/0x180 [ 1216.657218][ T8068] __sys_sendto+0x255/0x340 [ 1216.661817][ T8068] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1216.667301][ T8068] ? vfs_write+0x14c/0xe40 [ 1216.671821][ T8068] ? __fget_files+0x279/0x410 [ 1216.676611][ T8068] ? ksys_write+0x1a7/0x250 [ 1216.681578][ T8068] ? __ia32_sys_read+0xb0/0xb0 [ 1216.686449][ T8068] __x64_sys_sendto+0xe0/0x1b0 [ 1216.691294][ T8068] ? syscall_enter_from_user_mode+0x26/0x80 [ 1216.697284][ T8068] do_syscall_64+0x38/0xb0 [ 1216.702159][ T8068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1216.708169][ T8068] RIP: 0033:0x7ff9a787cb29 [ 1216.712643][ T8068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1216.732310][ T8068] RSP: 002b:00007ff9a86710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1216.740778][ T8068] RAX: ffffffffffffffda RBX: 00007ff9a799bf80 RCX: 00007ff9a787cb29 12:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 12:57:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xcd00}, 0x0) [ 1216.748806][ T8068] RDX: 00000000000000ca RSI: 0000000020000180 RDI: 0000000000000004 [ 1216.756831][ T8068] RBP: 00007ff9a8671120 R08: 0000000020000240 R09: 0000000000000014 [ 1216.764849][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.772865][ T8068] R13: 000000000000000b R14: 00007ff9a799bf80 R15: 00007ffee94f2048 [ 1216.780898][ T8068] 12:57:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x38, 0xa, 0x5, 0x3, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0xa}, [@typed={0xd, 0x5a, 0x0, 0x0, @str='fq_codel\x00'}, @nested={0x14, 0x4b, 0x0, 0x1, [@typed={0xd, 0x22, 0x0, 0x0, @str='):$-`^])\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000081000000000400000009000100666c6f77000600001c00020008000100eef90100080002"], 0x4c}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x100000002) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@newtclass={0x68, 0x28, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0xfff2}, {0xf, 0xfff3}, {0x0, 0xfff2}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x7f, 0x2}}]}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) sendfile(r6, r5, 0x0, 0x100000002) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="04000000090067ad42b4a6e216162dff92e5799975cf3da9ff84f0b71cdb642c044515d60a5b9b361b46a929a4f490c6e20449fd14d4ff868fe16faf5901166cbf2f5e05bc6bd2394d72009d1d241fa79496a461e1f629cb8192b6bc625aa72622c37b8154e9cbdeb7108087337cae9f1707be99af84d53aa08c51875211f02620b17c1480c2223ff8e3d73ad8ab35e45f61d04f2bae669d689763f97e37ad5cbc0e700438086a8cc3277b33d83172799fe2d7072a0b37bac8cf84b11688f166e76491e197536ee8a85023eea8e33f919c2ab64590729776a4f2767d3be19906df37254c89b356f53d6d25c3679233ca0b850f93ef2d76c59c78b7b32ff74e6ab269aea86f88e7972fa6adc1a0838a83000d705d9ec1abcf7b2df7d641d8ba37288acb6bd4e9bd0156819afa87ec3fad8bf72f1d580397"]) 12:57:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf000}, 0x0) 12:57:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xce00}, 0x0) 12:57:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x34000}, 0x0) 12:57:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xcf00}, 0x0) [ 1216.971118][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 12:57:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd000}, 0x0) 12:57:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x400300}, 0x0) [ 1217.130335][ T27] audit: type=1804 audit(1690376227.860:2665): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1298/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 12:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x9f03}, 0x0) 12:57:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 7) [ 1217.419916][ T8113] ref_tracker: memory allocation failure, unreliable refcount tracker. 12:57:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a008) 12:57:08 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006fc000/0xb000)=nil, 0xb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) openat$cgroup_ro(r8, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) sendfile(r10, r9, 0x0, 0x100000002) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRESDEC=r9, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="71860fa046abdfef4db6746b9cc1eb15b697f447ff157fa508e2183686fe5f1d07fd6be921f6700e3fc8d4638644ddda977a1604011c92a72e8e535f8da941359dd1ca30915b80e87a2791d7d382bdf9337963e98e9a42d7b6094f34f040f73a5f73342149aaf3f304813cd89ce1f07a54f32bdee769f54dc06f8403b7b85536ba56b4f452e0f8b55d2def1710d48929a3bca2a56ec19421", @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r5, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529e07671b50928f928cbfe3a97f5844390e54ca76109642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c720d4985e6b1093de3b8cfebb782e8618c126a7d47ee", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x50, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000010000000000000002000000000000008000000000000000000000000000000000000000000000808000000000000000090000000000000007000000000000000700000000000000ad04495f6d2b52e8321ba418efd422e558cc60cd6e11c1b10b3a"]}, @devid}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=@ipv6_delrule={0x44, 0x21, 0x8, 0x70bd2b, 0x25dfdbfd, {0xa, 0x10, 0x120, 0xea, 0x8, 0x0, 0x0, 0x4, 0x1001b}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) r13 = getpid() sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffffc0000000000000081b6aad5cfa738ee2addd384ef0008000000070000c675c26364b9004bbf3f75b2aa87822ff147fe099955d327170f8f124281da54db58d77546118989e0cd923627aab3302e585f0d481e6b9d9ed86e108bca7b06bb5258254dbac7123946c94e820f048555035435a23d7a677a9bcd66a9fc2915c4734cfdefcc", @ANYRES32=r13], 0x28}], 0x1}, 0x0) 12:57:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd100}, 0x0) 12:57:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0ffff}, 0x0) 12:57:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (fail_nth: 8) 12:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 12:57:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd200}, 0x0) 12:57:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1000000}, 0x0) 12:57:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x27, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd300}, 0x0) 12:57:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x2000000}, 0x0) [ 1218.055717][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1218.055738][ T27] audit: type=1804 audit(1690376228.790:2667): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1299/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1218.171070][ T27] audit: type=1804 audit(1690376228.830:2668): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1299/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 12:57:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a00d) [ 1218.794443][ T27] audit: type=1804 audit(1690376229.530:2669): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1300/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 1218.900995][ T27] audit: type=1804 audit(1690376229.550:2670): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1300/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 1219.230135][ T27] audit: type=1804 audit(1690376229.960:2671): pid=8159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1552/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 12:57:10 executing program 3: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00006fc000/0xb000)=nil, 0xb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x7b9c0b) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)=0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(r8, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) (async) sendfile(r10, r9, 0x0, 0x100000002) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRESDEC=r9, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="71860fa046abdfef4db6746b9cc1eb15b697f447ff157fa508e2183686fe5f1d07fd6be921f6700e3fc8d4638644ddda977a1604011c92a72e8e535f8da941359dd1ca30915b80e87a2791d7d382bdf9337963e98e9a42d7b6094f34f040f73a5f73342149aaf3f304813cd89ce1f07a54f32bdee769f54dc06f8403b7b85536ba56b4f452e0f8b55d2def1710d48929a3bca2a56ec19421", @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r5, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (rerun: 32) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529e07671b50928f928cbfe3a97f5844390e54ca76109642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c720d4985e6b1093de3b8cfebb782e8618c126a7d47ee", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x50, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000010000000000000002000000000000008000000000000000000000000000000000000000000000808000000000000000090000000000000007000000000000000700000000000000ad04495f6d2b52e8321ba418efd422e558cc60cd6e11c1b10b3a"]}, @devid}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=@ipv6_delrule={0x44, 0x21, 0x8, 0x70bd2b, 0x25dfdbfd, {0xa, 0x10, 0x120, 0xea, 0x8, 0x0, 0x0, 0x4, 0x1001b}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) (async) r13 = getpid() sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffffc0000000000000081b6aad5cfa738ee2addd384ef0008000000070000c675c26364b9004bbf3f75b2aa87822ff147fe099955d327170f8f124281da54db58d77546118989e0cd923627aab3302e585f0d481e6b9d9ed86e108bca7b06bb5258254dbac7123946c94e820f048555035435a23d7a677a9bcd66a9fc2915c4734cfdefcc", @ANYRES32=r13], 0x28}], 0x1}, 0x0) 12:57:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x28, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd400}, 0x0) 12:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 12:57:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0) 12:57:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x2a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd500}, 0x0) 12:57:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 12:57:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a00f) 12:57:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x32, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x5000000}, 0x0) 12:57:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd600}, 0x0) [ 1219.906849][ T27] audit: type=1804 audit(1690376230.640:2672): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1301/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 [ 1219.994909][ T27] audit: type=1804 audit(1690376230.680:2673): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1301/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:11 executing program 3: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00006fc000/0xb000)=nil, 0xb000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000540)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async, rerun: 32) openat$cgroup_ro(r8, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}}, 0x0) sendfile(r10, r9, 0x0, 0x100000002) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000001540)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRESDEC=r9, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="71860fa046abdfef4db6746b9cc1eb15b697f447ff157fa508e2183686fe5f1d07fd6be921f6700e3fc8d4638644ddda977a1604011c92a72e8e535f8da941359dd1ca30915b80e87a2791d7d382bdf9337963e98e9a42d7b6094f34f040f73a5f73342149aaf3f304813cd89ce1f07a54f32bdee769f54dc06f8403b7b85536ba56b4f452e0f8b55d2def1710d48929a3bca2a56ec19421", @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r5, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYRES64=r2, @ANYRES32=r7, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529e07671b50928f928cbfe3a97f5844390e54ca76109642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c720d4985e6b1093de3b8cfebb782e8618c126a7d47ee", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={{}, r2, 0x14, @inherit={0x50, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000010000000000000002000000000000008000000000000000000000000000000000000000000000808000000000000000090000000000000007000000000000000700000000000000ad04495f6d2b52e8321ba418efd422e558cc60cd6e11c1b10b3a"]}, @devid}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=@ipv6_delrule={0x44, 0x21, 0x8, 0x70bd2b, 0x25dfdbfd, {0xa, 0x10, 0x120, 0xea, 0x8, 0x0, 0x0, 0x4, 0x1001b}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) (async) r13 = getpid() sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffffc0000000000000081b6aad5cfa738ee2addd384ef0008000000070000c675c26364b9004bbf3f75b2aa87822ff147fe099955d327170f8f124281da54db58d77546118989e0cd923627aab3302e585f0d481e6b9d9ed86e108bca7b06bb5258254dbac7123946c94e820f048555035435a23d7a677a9bcd66a9fc2915c4734cfdefcc", @ANYRES32=r13], 0x28}], 0x1}, 0x0) 12:57:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x3a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 12:57:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd700}, 0x0) 12:57:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x0) 12:57:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a010) 12:57:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x42, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x7000000}, 0x0) 12:57:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd800}, 0x0) [ 1221.054033][ T27] audit: type=1804 audit(1690376231.790:2674): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1302/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x8000000}, 0x0) 12:57:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x4a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xd900}, 0x0) [ 1221.163968][ T27] audit: type=1804 audit(1690376231.820:2675): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1302/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:12 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 12:57:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x52, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x9000000}, 0x0) 12:57:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xda00}, 0x0) 12:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 12:57:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a03b) 12:57:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xa000000}, 0x0) 12:57:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xdb00}, 0x0) 12:57:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x5a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) [ 1222.170768][ T27] audit: type=1804 audit(1690376232.900:2676): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1303/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:12 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 12:57:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb000000}, 0x0) 12:57:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xdc00}, 0x0) 12:57:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x62, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xc000000}, 0x0) 12:57:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xdd00}, 0x0) 12:57:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x6a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 12:57:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a071) 12:57:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe000000}, 0x0) 12:57:13 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) 12:57:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xde00}, 0x0) 12:57:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x72, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf000000}, 0x0) 12:57:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xdf00}, 0x0) 12:57:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x7a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:13 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 12:57:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x10000000}, 0x0) 12:57:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe000}, 0x0) [ 1223.152898][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1223.152918][ T27] audit: type=1804 audit(1690376233.880:2678): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1304/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1223.275134][ T27] audit: type=1804 audit(1690376233.920:2679): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1304/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0 12:57:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a07a) 12:57:14 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x10010000004e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaa2aaaaaaaaaa86dd60fbfa91b2dd44914fcdc9cd55ba9d0dd487004d8880fe80000000000000000000000600ff02000000000000000000"], 0x0) 12:57:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x82, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x11000000}, 0x0) 12:57:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe100}, 0x0) 12:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 12:57:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x13000000}, 0x0) 12:57:14 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x10010000004e20}, 0x1c) (async, rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaa2aaaaaaaaaa86dd60fbfa91b2dd44914fcdc9cd55ba9d0dd487004d8880fe80000000000000000000000600ff02000000000000000000"], 0x0) 12:57:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe200}, 0x0) 12:57:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x8a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x60000000}, 0x0) 12:57:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x92, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) [ 1224.140890][ T27] audit: type=1804 audit(1690376234.870:2680): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1305/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 [ 1224.243024][ T27] audit: type=1804 audit(1690376234.910:2681): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1305/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 12:57:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a07b) 12:57:15 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x10010000004e20}, 0x1c) (async, rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaa2aaaaaaaaaa86dd60fbfa91b2dd44914fcdc9cd55ba9d0dd487004d8880fe80000000000000000000000600ff02000000000000000000"], 0x0) 12:57:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe300}, 0x0) 12:57:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x65580000}, 0x0) 12:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 12:57:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x9a, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x81000000}, 0x0) 12:57:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe400}, 0x0) 12:57:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xa2, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x7) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 12:57:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x81040000}, 0x0) 12:57:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe500}, 0x0) [ 1224.970675][ T27] audit: type=1804 audit(1690376235.700:2682): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1306/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1225.118967][ T27] audit: type=1804 audit(1690376235.760:2683): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1306/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 12:57:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x88a8ffff}, 0x0) 12:57:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xaa, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe600}, 0x0) 12:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:57:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) r1 = socket$netlink(0x10, 0x3, 0x7) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 12:57:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="aa69e41947e85f46fe774e9b59e390e90db05d32b70e318effaf878da62fe6d133a70a77e2e5527649051e6b3f0a4c5d98b0220555c9e195d8d66860d57952c1bf785a0cb815b0fd8c265fd68c9a8d0d55784f7b08d440c78745c93e8a3ffd6e037aaeb4a4191424ecbe28485a8a25a41d60467678ff8e0ddc0971410443a48d81faa28b42fe09600f1b47bec9d197c3c2b2b8566e2c839ee4ccfe4691c3d5c0189b42ccac369fe40ee7795e329c3c9eab72c742edaedfd9736525ac8f20dab3c4b815966d647838208c39b41766d9465ecf1a8a61c43dc51704017bff1a4095415bffcc3a1752108bed435dd1051dd5b24e90922ba9095fa1b233e9db338da88e8f16735be009c8e7012ea2418a25ef53f303d3f86280e8fab1938af238c01e9ab171798415a76c08f2a11446d30914683495c1f7e1e083a5e587db7c953bfea19b0ab0e5deca34fc074401bfeebf1844296df1e5cfb928d7ae6b277b1e207fd754930268be7a03406000766e7c96d234f978a2d04587bfd107af0e728d412b1d5d98d120ab5515ae8c63f35176697e47ca6b9ad0b796cd5323bb897eda4e542f8af7b8dc2006b76b80d4a2f54a5f06a4c20d8c2f41216d140693d87988483e2230e032625ae431e4048036dfad5e4649ed7fa5283befbe073ecb9cc1fe9fccc4051dbc91355537069f92fe2f8b63f52b44c409fc165a45954fff4b3b4a79545d8b8d42a42f8db535f28f2e77097171b16457939601acc1e40333ec91e5a94f7cf2f977895a6c3169a5981247a46e690a6314b6327a1f980a8826942df28bb0c8552c46e55e02e0ce894ba8fe0ee200ced99a384ac42c90666714d3bed42f69812942b5d94516b7a0254ac50b0c072d3034864a109a4d79b3c7eea7a6544eca793e705a8822bbd1c4f073ef18beeadadc3f62ee9a01412dec17ec396ca33729f7a2d723af80b423f3b3f947240ce7a4cd7f05008d1ce78dfc34be5fe1f2b963805277b2a643650d2b3c4eed629e2d669e68a75832f067c03a5546857a833bdf40ec78c1a4319bfeda4ffd946e58c2617e7d5c8ce814d4390405e623c1054c7b906d1170409cfa692d0fae31e877e825c625cd7af08409011a5b9f1f4f52bd362ac6fbc5f80f3acc4d1eb84a536b2c071f967d5b3cc62084366a20972c8739afc50a2f4ece848aaa854ee6f89a4ac83efe59e758f0eebda492027227db8cb67190e54cf518548c1491940a565de4c3835d85fc3a175a2d106833b03cfdcb2aa1dfa1ae0b60b807566c55db347baf69b6ff0eff673c69a661b64cccef8454bc8c76e7f047cc64363e353119ac272cbb7c526593bdf369a98cd15fda7465448cbff860816ebe072028eefcab2ddb77c5ee5cf8f547f72d033714db4bc17ba4ca4ac43739c7048706164d9d4997fbe40282aaac8749793afeef2195d97b6ebcadf1eb763538adefcb3fb9d8a8db6e210bf13e9efa41b261090f6fc0e727ba31b50b56a7582fd4d4b5ed069b917eccad980723a96c2301e7ce410b19ba7a49f237f10d3c520e9191fe2724c86950238f7c65f489132c6429ca20f9859a2142139f26c98c9b8c877da3f3962130ea314dfe68d5e879e3f7c4157018c5819c3c0633407557fd8695848b96b60146f7e06b353504f358e1867f5011de93e90927065f310b2c55e4c53e4974ea02f5cafe67558b65101f3b0bf9f59ca54904d78057963da5951a6d02092049b21c24e6816c71bcf37eab91080b81d4efdda451812a423f2ccc537e6ab3fec82787ca6380657ea78a2625d4c945b5f22d3ad7b63b330dfa2581cf37c92e5ef2a21addfd8856607a70f176c254957dc874783789ce28858c44b650a085176f354cbeae49c6e7975473fdff8a203c95f0434c200c02088cd9f49c6b10549de5a99108ad28d30b53b66e69c93b2365cb022d0aec2b55700b0dd205fa53c85f92f82fa8b782982b39654b96068b10907fbe4e36417f3cee84282fd0ad72f33191638fd010d407680e52d7f3b2394db608c101d798737f1a1bfa3f334126651029d660c48b8354ef445e8af38445d383e3db765d29d157b5d9e571b206388f980e8630b0a062bb44daf3c2a2cf31c72f1a897d625822b2ac0d505da2890b490f62ed29cb111f01eae0414d2c348fe71014b514f3774fb73cf2f48e7a6df239ff83ea2446e7ffe2f6af605fb83ec2a072ba30517d8f4341141558daf15f34ca75bd6cc51fa513019416e18539fd48ce884f8310977f29ee91325b8cadc504122652e28e8ce41cf1058b37857be5e44b538c073e6a841ce580fd3e2ca4a2762aeea484dbd5e65b4c61614aaccc47acb5d26e01b917d072b34d378f0ca4c6db60c57e8559e0b50d2dd5f6a7d19bf4af59c1739d7c494b59c63f5a1c8f290144cb4cdd2c8a6a27bc02fc7f1083535fa64f3031235cfae6cd97f3160dea257f0cc3777779fda7475a1e551dafcdeb95fdfda509264cb24cdc68ef84504bbf2965b552c6d08bc35a398ee7e11243b5830f8b9a21408013d53925601cec6da310face3085ffb80abe75b70cc85704aeb579ec2e9b2934281e6856783455f5792641ccc1bc6c4c766310afb3d009d7868367404b49ad496971273d43d343aed9b768fccd50760bdbfbff8f6c38bc82b1828e49c8197f1c65421f50ffffb0b855b3af12a9452e211c670c7345fa6e30a267f60ba8b719fd135eb583d1eea500fd6dccc42407bbc0686197594ba2aa8d0c2fe718f5b5c1d17aedb715b9afea443dab484c3f6a04a52a721e6519f5c986586525a9964e0b3776957d2c0e0952167da72805e22961cc137c7ef9d15862a4f1b1909d4235c5b03e268349a27d4d807b5d882f8f0998f75c86534577425b44fef9771bbe14c8a72336da54aae1214585dce820b47081050b9729296abfa6e0f1e9e37db10cfb5ce1db152a91f23a0a0ae64512fab5ccd9d58ad9ac316cf6f8c5abed70e64b39cfa59815bcbd042dab6191cd77a23873795b8872121e84216fe2699f7811826569832bb23c8160c636f0a4bb8ecdb33dc604642516ff5f5f69f7185322cdda96abb05fa820899ed5608fd7326cc9147c38a32660499ab374dffe453c5413a818523f924f288ca72e585210410e6ad7434db696debda1f035652921f79bd846a96e2a47579e6258226d28cf90144e1b2ae01ed1e2df8d59b61f5d2a5cfb74e4e2789c8630cc306065066bcd11551bc88ea6654c53593f4a4fe8742ab74aa22c85e242b54d929f93d2854542c5c3f9ea9e33cfdf39d6d4ba6474a52b2b1952d8cc7cebd92f1d3f77aacc5ffeac5bf42b0aa2a43cf96a4841bf25a008e3ea1b20017e25b2f3c93182b7b6212a614037b7d6fd2ade26fc9ecf47e32e711c6798e3b9874e94add32e0bf1c480dd38d0fd103a6f28f9e3bf05d96575ec6991e92af6e766e46cba9d4a5554d88f39e415de39260d0ec10f5cf193755be3f7177db6765de5a9ca64a31ddd614d97664109a589b3f44d3f21bb604829e0dae1590a28eaf4a990d5e6ddbd51a98a18d934a0e00668c6d636ba9d98d188c5d51fdb38cb67193d3fd355b3ce3359b38d29ee81032fa44ad933e07b6edbed713553e5060bdc9a08931d620d08298e8c94bd76f7b5a7d2af54601a668868192beb6beb5c12042215c84d0c48df26d0e21cce310e43b3a4e0f86ad30076a11c9b7eef9bef90badb49c927869ce895c13a83293772f3b4175d0579f76b0c8dc6b6b098461f55ff5ffa340433d1ddbf15cdbf1792d1d81ae8c41e78bd1792d5ebe3ae645ae9dcf96d1c4a3d2474b23fe4705b317c8b9ff6cfbdf1be19ec0a414d19847da9cb601809cca5247ecd601f3ed7ecb06ebab629efb86d1cdc83283e4c44b636df528c0bf3371f007ba31c277f1985966f27bd66b0f90db5ece63c1cbaa1a26cfb017b77b219267e57443b6e31189c078ba44c47a0bc649f1def67421258f8c97e01291b81e4dc285c6c229d33408277614fde4f29509f71da03fe3d8fb8ae8b594e3d5f15fcf7acfe7dbfaad641fa7b7f3a783ce540e6ab2c99a195462e0c78c9a5f2252b406729360361dba888688f45b6b71f6040961d81c6e6387e36653a73da9f79965a13520c97fede130cf8755b400af4322eda6eda078b4234bbf8eb31e4a9a596d49d4d95fd8f3da14be15bbf4f15e79c115944a86cb6716584783f1c97aca075f56fe4884b6ec2f76f44e5bee182361633aacc201c9da8026d480918079d6fb03e4d1bef0b8e1a02cc21ef06dc63c77b1b3003c0817d829d6b83167f991da5cc9565c853363b91f44ada8681d93ba185c1db35db49d7b1c9150fb484411ba92c4987c8433accc890a9be3ad2248bdd10cf23fee4bdb44c7d0e21dc82893ad3f8ba26854e9755a8c7a891e32c3a55a625eb33b249974e4870ab61d6b34aa1917924143c5ffacdfa49d358faf9ccd59670047447a4a5df4f4ddedb4d9651935228f35ef82b89f075c512f3db3129817129eaba2db895ff1809fe77e4d16e452d09fb7be6b6ba2e5c24508929f974974d868f3e714e0b9facd81f3a7d4a4f0af1316639e0e0900277ace8adb0b1104bc4fd7a6f675094d83478a7078b0513e0e1314a38de9dfedcb375c285dadaf0218634cfb60b3382e07afdb0307cd9e3d6d0e3c658547872c061f2f89dffa21f90ed62bd537eb45d7889ab78c78452e2f2456d2ae559023b681688b6c67d6e3b6b0b629a66634c6c79190d47df9d8d5f307e1430cf9fa201e5346502a491033fefebcc056f126b8bb30f496a158ce5a7b107bf4b6a8af6840680600cb2ec7aff92414dddc4322bc63ddf53429cd7fc22e8567a4d2dd1b3c742138fcf553d9d75a0bda2c76538fc29c6802d739e4c2a6f88976d2096b9ab7840d65a0479f61e49aa2a6df0a7a8805750748b30c953cfec9ac28eedb87575b0e7473441af8034026f6b32c783baa6c7c880ae1223208a5089e21e10cc7cff4f73ec41711d63cc0f0813100bb812e52940116e6daeb6be8495b75bd21d4c08c2bf82c5df0cefcceecb72e13d0b01c02ee426e66a37b9974ebf05e3d2a2dbc923206ff8f05e8665d419087918f705769fe36a83d0bfde840caa1b49b0b5566fdb867be62e36e67af126ab9a44338f202083829fe918242a21e4bc8032cec249a71da85a24f09766214936c89b8145d3cd35cf9570c0372e96a9bf8bd4a6076df78fcd89117c6ffb87fff8259e4c128e6813bf21b1acd7c6d8499977c84db4d051d18e28bf57cb867f15ad82a0d2e051fac1b081bbda2d41c0db244f822c06a24d529947e32bc21fa4820ac702345d1a54ff3525108f46d1c754975e90bfae43963c8e92a2ed54490cc2b2cdd83e8511fe677debb855eed1113c110f8cf16fcc14866462f897a72b56d11b469a436b58a76f98a2005d563fd6e0fcd81a1dec91c2a6900e931ae9c9e313bd7f533af270a2589917007c639a46b64a53b1f794045353582d08ab9acfa693dfeb00bbe8d95055842c16ab0fc950c20a72f399ab01e082757b3ce9bb43ba0e4779d4b08220c131c92122a843795966b761adf483803ce3be855cee2f7399a10c59f238f373e6119c1469ae0ace2c051428f53def13739c79c2c642af17b6c3169fe6dbb93f84611bf83e4c3d723887d5f9ed2bc864577a21bc34a8552dd301290213b557cde02da5dbe4ba27e507fbfd58f5d4e8255d678f057b4d2cbb7284f75fc3c9bcd809166a0131ef17c4d2a32fd36492eafd51d5c28165af73387c3caa02b63471c61c8811952b4b6793c5186008ff0fb81b40eea4da", @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="a041c0107cbc6bc845ff85b1d933cd9c07a3aeb99c30e3aa724a6394eacd30f7ab5e1a56ac0284856e6b1f6c36510a911b11331d3d6c9628c78f91cd8a46cf1d3f620ce738f37ea74ea106d490fa41888dfcb48c48b59502680a30dc43f385c41108dd79743788d83eb11203e4abd651ddfa8e2e3ee408d5c87c23a5cbb71b1c32beeea31f2a8c9e0573b6620ab180aae67ebcb135a8ecc86245b9f609f09d7f34f319acb7a7b4ecf7b1236721ff4ae3662122914dc5d038fe2d"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x810) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000001180)={0xa, 0x4e20, 0x2}, 0x1c) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000380), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000740)={0x7f, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x11}}, {{0xa, 0x4e24, 0x9, @local, 0x14}}, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc2}}, {{0xa, 0x4e20, 0xe3, @mcast2, 0x8}}, {{0xa, 0x4e22, 0xfffffffa, @remote, 0x9}}]}, 0x310) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a006) 12:57:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe700}, 0x0) 12:57:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) 12:57:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xb2, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:16 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x7) (async) r1 = socket$netlink(0x10, 0x3, 0x7) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 12:57:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xba, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe800}, 0x0) [ 1225.850593][ T27] audit: type=1804 audit(1690376236.580:2684): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1307/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 12:57:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xb30d0000}, 0x0) [ 1225.931315][ T27] audit: type=1804 audit(1690376236.640:2685): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1307/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 12:57:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xc2, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:16 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b700000000000000e13422f1000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b00000000000000001e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab99cf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d513402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000010000000000000000000010008bc0d90500000000000000495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100008000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fece0c6ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb35bdce2dd1c70d7b6ce124b77c62c8ed1dbd9d10a64c1083d5e71b5565b1700000000ed2ef571feffc4cf614481351f92abdd1a3694b546fdbd0061e175a0d3b29b40050a43689592d35dddbc69945968eba6693ffcd6e7ef96aeb2dfddbc8a387c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x6, 0xffffffff, 0xc10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x9, 0x0, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18852000d87700000002640800ff03000600200000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3d, &(0x7f0000000240)=""/61, 0x100, 0x1e, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x244}, 0x10, 0x5709, r0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x3, &(0x7f0000000040)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000100)='GPL\x00', 0xdde7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x6, 0xe4}, 0x10, r3, r4}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x4, 0x20, 0x4e8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x7ec, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000700)={0x0, &(0x7f0000000800)=""/74, &(0x7f0000001040), &(0x7f0000001100), 0x102, r5}, 0x38) [ 1226.134742][ T27] audit: type=1804 audit(1690376236.790:2686): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1307/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 12:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 12:57:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xe900}, 0x0) 12:57:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="a041c0107cbc6bc845ff85b1d933cd9c07a3aeb99c30e3aa724a6394eacd30f7ab5e1a56ac0284856e6b1f6c36510a911b11331d3d6c9628c78f91cd8a46cf1d3f620ce738f37ea74ea106d490fa41888dfcb48c48b59502680a30dc43f385c41108dd79743788d83eb11203e4abd651ddfa8e2e3ee408d5c87c23a5cbb71b1c32beeea31f2a8c9e0573b6620ab180aae67ebcb135a8ecc86245b9f609f09d7f34f319acb7a7b4ecf7b1236721ff4ae3662122914dc5d038fe2d"], 0x28}}, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x810) (async, rerun: 64) r5 = socket$inet6(0xa, 0x1, 0x84) (rerun: 64) bind$inet6(r5, &(0x7f0000001180)={0xa, 0x4e20, 0x2}, 0x1c) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r5, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000380), 0x4) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000740)={0x7f, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x11}}, {{0xa, 0x4e24, 0x9, @local, 0x14}}, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc2}}, {{0xa, 0x4e20, 0xe3, @mcast2, 0x8}}, {{0xa, 0x4e22, 0xfffffffa, @remote, 0x9}}]}, 0x310) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async, rerun: 32) sendfile(r6, r4, 0x0, 0x10000a006) (rerun: 32) 12:57:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xe8030000}, 0x0) 12:57:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xea00}, 0x0) 12:57:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x6, 0xffffffff, 0xc10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x9, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x9, 0x0, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18852000d87700000002640800ff03000600200000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3d, &(0x7f0000000240)=""/61, 0x100, 0x1e, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x244}, 0x10, 0x5709, r0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18852000d87700000002640800ff03000600200000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3d, &(0x7f0000000240)=""/61, 0x100, 0x1e, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x244}, 0x10, 0x5709, r0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x3, &(0x7f0000000040)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000100)='GPL\x00', 0xdde7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x6, 0xe4}, 0x10, r3, r4}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x4, 0x20, 0x4e8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x7ec, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000700)={0x0, &(0x7f0000000800)=""/74, &(0x7f0000001040), &(0x7f0000001100), 0x102, r5}, 0x38) 12:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 12:57:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xeb00}, 0x0) 12:57:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) 12:57:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x5c8, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x7, 0x6, 0xffffffff, 0xc10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x9, 0x0, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18852000d87700000002640800ff03000600200000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x3d, &(0x7f0000000240)=""/61, 0x100, 0x1e, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x244}, 0x10, 0x5709, r0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8, 0x0}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x3, &(0x7f0000000040)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x8001}], &(0x7f0000000100)='GPL\x00', 0xdde7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x1e, r2, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x6, 0xe4}, 0x10, r3, r4}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x4, 0x20, 0x4e8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x7ec, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000700)={0x0, &(0x7f0000000800)=""/74, &(0x7f0000001040), &(0x7f0000001100), 0x102, r5}, 0x38) 12:57:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="aa69e41947e85f46fe774e9b59e390e90db05d32b70e318effaf878da62fe6d133a70a77e2e5527649051e6b3f0a4c5d98b0220555c9e195d8d66860d57952c1bf785a0cb815b0fd8c265fd68c9a8d0d55784f7b08d440c78745c93e8a3ffd6e037aaeb4a4191424ecbe28485a8a25a41d60467678ff8e0ddc0971410443a48d81faa28b42fe09600f1b47bec9d197c3c2b2b8566e2c839ee4ccfe4691c3d5c0189b42ccac369fe40ee7795e329c3c9eab72c742edaedfd9736525ac8f20dab3c4b815966d647838208c39b41766d9465ecf1a8a61c43dc51704017bff1a4095415bffcc3a1752108bed435dd1051dd5b24e90922ba9095fa1b233e9db338da88e8f16735be009c8e7012ea2418a25ef53f303d3f86280e8fab1938af238c01e9ab171798415a76c08f2a11446d30914683495c1f7e1e083a5e587db7c953bfea19b0ab0e5deca34fc074401bfeebf1844296df1e5cfb928d7ae6b277b1e207fd754930268be7a03406000766e7c96d234f978a2d04587bfd107af0e728d412b1d5d98d120ab5515ae8c63f35176697e47ca6b9ad0b796cd5323bb897eda4e542f8af7b8dc2006b76b80d4a2f54a5f06a4c20d8c2f41216d140693d87988483e2230e032625ae431e4048036dfad5e4649ed7fa5283befbe073ecb9cc1fe9fccc4051dbc91355537069f92fe2f8b63f52b44c409fc165a45954fff4b3b4a79545d8b8d42a42f8db535f28f2e77097171b16457939601acc1e40333ec91e5a94f7cf2f977895a6c3169a5981247a46e690a6314b6327a1f980a8826942df28bb0c8552c46e55e02e0ce894ba8fe0ee200ced99a384ac42c90666714d3bed42f69812942b5d94516b7a0254ac50b0c072d3034864a109a4d79b3c7eea7a6544eca793e705a8822bbd1c4f073ef18beeadadc3f62ee9a01412dec17ec396ca33729f7a2d723af80b423f3b3f947240ce7a4cd7f05008d1ce78dfc34be5fe1f2b963805277b2a643650d2b3c4eed629e2d669e68a75832f067c03a5546857a833bdf40ec78c1a4319bfeda4ffd946e58c2617e7d5c8ce814d4390405e623c1054c7b906d1170409cfa692d0fae31e877e825c625cd7af08409011a5b9f1f4f52bd362ac6fbc5f80f3acc4d1eb84a536b2c071f967d5b3cc62084366a20972c8739afc50a2f4ece848aaa854ee6f89a4ac83efe59e758f0eebda492027227db8cb67190e54cf518548c1491940a565de4c3835d85fc3a175a2d106833b03cfdcb2aa1dfa1ae0b60b807566c55db347baf69b6ff0eff673c69a661b64cccef8454bc8c76e7f047cc64363e353119ac272cbb7c526593bdf369a98cd15fda7465448cbff860816ebe072028eefcab2ddb77c5ee5cf8f547f72d033714db4bc17ba4ca4ac43739c7048706164d9d4997fbe40282aaac8749793afeef2195d97b6ebcadf1eb763538adefcb3fb9d8a8db6e210bf13e9efa41b261090f6fc0e727ba31b50b56a7582fd4d4b5ed069b917eccad980723a96c2301e7ce410b19ba7a49f237f10d3c520e9191fe2724c86950238f7c65f489132c6429ca20f9859a2142139f26c98c9b8c877da3f3962130ea314dfe68d5e879e3f7c4157018c5819c3c0633407557fd8695848b96b60146f7e06b353504f358e1867f5011de93e90927065f310b2c55e4c53e4974ea02f5cafe67558b65101f3b0bf9f59ca54904d78057963da5951a6d02092049b21c24e6816c71bcf37eab91080b81d4efdda451812a423f2ccc537e6ab3fec82787ca6380657ea78a2625d4c945b5f22d3ad7b63b330dfa2581cf37c92e5ef2a21addfd8856607a70f176c254957dc874783789ce28858c44b650a085176f354cbeae49c6e7975473fdff8a203c95f0434c200c02088cd9f49c6b10549de5a99108ad28d30b53b66e69c93b2365cb022d0aec2b55700b0dd205fa53c85f92f82fa8b782982b39654b96068b10907fbe4e36417f3cee84282fd0ad72f33191638fd010d407680e52d7f3b2394db608c101d798737f1a1bfa3f334126651029d660c48b8354ef445e8af38445d383e3db765d29d157b5d9e571b206388f980e8630b0a062bb44daf3c2a2cf31c72f1a897d625822b2ac0d505da2890b490f62ed29cb111f01eae0414d2c348fe71014b514f3774fb73cf2f48e7a6df239ff83ea2446e7ffe2f6af605fb83ec2a072ba30517d8f4341141558daf15f34ca75bd6cc51fa513019416e18539fd48ce884f8310977f29ee91325b8cadc504122652e28e8ce41cf1058b37857be5e44b538c073e6a841ce580fd3e2ca4a2762aeea484dbd5e65b4c61614aaccc47acb5d26e01b917d072b34d378f0ca4c6db60c57e8559e0b50d2dd5f6a7d19bf4af59c1739d7c494b59c63f5a1c8f290144cb4cdd2c8a6a27bc02fc7f1083535fa64f3031235cfae6cd97f3160dea257f0cc3777779fda7475a1e551dafcdeb95fdfda509264cb24cdc68ef84504bbf2965b552c6d08bc35a398ee7e11243b5830f8b9a21408013d53925601cec6da310face3085ffb80abe75b70cc85704aeb579ec2e9b2934281e6856783455f5792641ccc1bc6c4c766310afb3d009d7868367404b49ad496971273d43d343aed9b768fccd50760bdbfbff8f6c38bc82b1828e49c8197f1c65421f50ffffb0b855b3af12a9452e211c670c7345fa6e30a267f60ba8b719fd135eb583d1eea500fd6dccc42407bbc0686197594ba2aa8d0c2fe718f5b5c1d17aedb715b9afea443dab484c3f6a04a52a721e6519f5c986586525a9964e0b3776957d2c0e0952167da72805e22961cc137c7ef9d15862a4f1b1909d4235c5b03e268349a27d4d807b5d882f8f0998f75c86534577425b44fef9771bbe14c8a72336da54aae1214585dce820b47081050b9729296abfa6e0f1e9e37db10cfb5ce1db152a91f23a0a0ae64512fab5ccd9d58ad9ac316cf6f8c5abed70e64b39cfa59815bcbd042dab6191cd77a23873795b8872121e84216fe2699f7811826569832bb23c8160c636f0a4bb8ecdb33dc604642516ff5f5f69f7185322cdda96abb05fa820899ed5608fd7326cc9147c38a32660499ab374dffe453c5413a818523f924f288ca72e585210410e6ad7434db696debda1f035652921f79bd846a96e2a47579e6258226d28cf90144e1b2ae01ed1e2df8d59b61f5d2a5cfb74e4e2789c8630cc306065066bcd11551bc88ea6654c53593f4a4fe8742ab74aa22c85e242b54d929f93d2854542c5c3f9ea9e33cfdf39d6d4ba6474a52b2b1952d8cc7cebd92f1d3f77aacc5ffeac5bf42b0aa2a43cf96a4841bf25a008e3ea1b20017e25b2f3c93182b7b6212a614037b7d6fd2ade26fc9ecf47e32e711c6798e3b9874e94add32e0bf1c480dd38d0fd103a6f28f9e3bf05d96575ec6991e92af6e766e46cba9d4a5554d88f39e415de39260d0ec10f5cf193755be3f7177db6765de5a9ca64a31ddd614d97664109a589b3f44d3f21bb604829e0dae1590a28eaf4a990d5e6ddbd51a98a18d934a0e00668c6d636ba9d98d188c5d51fdb38cb67193d3fd355b3ce3359b38d29ee81032fa44ad933e07b6edbed713553e5060bdc9a08931d620d08298e8c94bd76f7b5a7d2af54601a668868192beb6beb5c12042215c84d0c48df26d0e21cce310e43b3a4e0f86ad30076a11c9b7eef9bef90badb49c927869ce895c13a83293772f3b4175d0579f76b0c8dc6b6b098461f55ff5ffa340433d1ddbf15cdbf1792d1d81ae8c41e78bd1792d5ebe3ae645ae9dcf96d1c4a3d2474b23fe4705b317c8b9ff6cfbdf1be19ec0a414d19847da9cb601809cca5247ecd601f3ed7ecb06ebab629efb86d1cdc83283e4c44b636df528c0bf3371f007ba31c277f1985966f27bd66b0f90db5ece63c1cbaa1a26cfb017b77b219267e57443b6e31189c078ba44c47a0bc649f1def67421258f8c97e01291b81e4dc285c6c229d33408277614fde4f29509f71da03fe3d8fb8ae8b594e3d5f15fcf7acfe7dbfaad641fa7b7f3a783ce540e6ab2c99a195462e0c78c9a5f2252b406729360361dba888688f45b6b71f6040961d81c6e6387e36653a73da9f79965a13520c97fede130cf8755b400af4322eda6eda078b4234bbf8eb31e4a9a596d49d4d95fd8f3da14be15bbf4f15e79c115944a86cb6716584783f1c97aca075f56fe4884b6ec2f76f44e5bee182361633aacc201c9da8026d480918079d6fb03e4d1bef0b8e1a02cc21ef06dc63c77b1b3003c0817d829d6b83167f991da5cc9565c853363b91f44ada8681d93ba185c1db35db49d7b1c9150fb484411ba92c4987c8433accc890a9be3ad2248bdd10cf23fee4bdb44c7d0e21dc82893ad3f8ba26854e9755a8c7a891e32c3a55a625eb33b249974e4870ab61d6b34aa1917924143c5ffacdfa49d358faf9ccd59670047447a4a5df4f4ddedb4d9651935228f35ef82b89f075c512f3db3129817129eaba2db895ff1809fe77e4d16e452d09fb7be6b6ba2e5c24508929f974974d868f3e714e0b9facd81f3a7d4a4f0af1316639e0e0900277ace8adb0b1104bc4fd7a6f675094d83478a7078b0513e0e1314a38de9dfedcb375c285dadaf0218634cfb60b3382e07afdb0307cd9e3d6d0e3c658547872c061f2f89dffa21f90ed62bd537eb45d7889ab78c78452e2f2456d2ae559023b681688b6c67d6e3b6b0b629a66634c6c79190d47df9d8d5f307e1430cf9fa201e5346502a491033fefebcc056f126b8bb30f496a158ce5a7b107bf4b6a8af6840680600cb2ec7aff92414dddc4322bc63ddf53429cd7fc22e8567a4d2dd1b3c742138fcf553d9d75a0bda2c76538fc29c6802d739e4c2a6f88976d2096b9ab7840d65a0479f61e49aa2a6df0a7a8805750748b30c953cfec9ac28eedb87575b0e7473441af8034026f6b32c783baa6c7c880ae1223208a5089e21e10cc7cff4f73ec41711d63cc0f0813100bb812e52940116e6daeb6be8495b75bd21d4c08c2bf82c5df0cefcceecb72e13d0b01c02ee426e66a37b9974ebf05e3d2a2dbc923206ff8f05e8665d419087918f705769fe36a83d0bfde840caa1b49b0b5566fdb867be62e36e67af126ab9a44338f202083829fe918242a21e4bc8032cec249a71da85a24f09766214936c89b8145d3cd35cf9570c0372e96a9bf8bd4a6076df78fcd89117c6ffb87fff8259e4c128e6813bf21b1acd7c6d8499977c84db4d051d18e28bf57cb867f15ad82a0d2e051fac1b081bbda2d41c0db244f822c06a24d529947e32bc21fa4820ac702345d1a54ff3525108f46d1c754975e90bfae43963c8e92a2ed54490cc2b2cdd83e8511fe677debb855eed1113c110f8cf16fcc14866462f897a72b56d11b469a436b58a76f98a2005d563fd6e0fcd81a1dec91c2a6900e931ae9c9e313bd7f533af270a2589917007c639a46b64a53b1f794045353582d08ab9acfa693dfeb00bbe8d95055842c16ab0fc950c20a72f399ab01e082757b3ce9bb43ba0e4779d4b08220c131c92122a843795966b761adf483803ce3be855cee2f7399a10c59f238f373e6119c1469ae0ace2c051428f53def13739c79c2c642af17b6c3169fe6dbb93f84611bf83e4c3d723887d5f9ed2bc864577a21bc34a8552dd301290213b557cde02da5dbe4ba27e507fbfd58f5d4e8255d678f057b4d2cbb7284f75fc3c9bcd809166a0131ef17c4d2a32fd36492eafd51d5c28165af73387c3caa02b63471c61c8811952b4b6793c5186008ff0fb81b40eea4da", @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="a041c0107cbc6bc845ff85b1d933cd9c07a3aeb99c30e3aa724a6394eacd30f7ab5e1a56ac0284856e6b1f6c36510a911b11331d3d6c9628c78f91cd8a46cf1d3f620ce738f37ea74ea106d490fa41888dfcb48c48b59502680a30dc43f385c41108dd79743788d83eb11203e4abd651ddfa8e2e3ee408d5c87c23a5cbb71b1c32beeea31f2a8c9e0573b6620ab180aae67ebcb135a8ecc86245b9f609f09d7f34f319acb7a7b4ecf7b1236721ff4ae3662122914dc5d038fe2d"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x810) (async) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000001180)={0xa, 0x4e20, 0x2}, 0x1c) connect$inet6(r5, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r5, 0x84, 0x83, &(0x7f0000001280)=""/4074, &(0x7f0000000000)=0xfea) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000380), 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000740)={0x7f, {{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}}, 0x0, 0x5, [{{0xa, 0x4e24, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x11}}, {{0xa, 0x4e24, 0x9, @local, 0x14}}, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc2}}, {{0xa, 0x4e20, 0xe3, @mcast2, 0x8}}, {{0xa, 0x4e22, 0xfffffffa, @remote, 0x9}}]}, 0x310) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r6, r4, 0x0, 0x10000a006) 12:57:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf1ffffff}, 0x0) 12:57:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xec00}, 0x0) 12:57:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x5cc, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xed00}, 0x0) 12:57:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfcffffff}, 0x0) 12:57:17 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="af45f73b17cf86941f49f9ceb376fdc9cbe1fda37c3f0356dd5530d23a9e13f5ac1a719db62e2f82163b7ef831ef0fb0b2838ba4a278760a4522d13748de90b489835141daf0dfcf8a11b767403df988b9b45606485029ec9c312baee70b502cd42f797d7ea96fc5df787670029044", @ANYRES64=r1, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4], &(0x7f0000000140)='GPL\x00', 0x7, 0x8a, &(0x7f0000000640)=""/146, 0x0, 0xd, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f0000, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x330, 0x370, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x40004, 0x0, 0x0, 0x2, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 12:57:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xfffffdef, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 12:57:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x1c}}, 0x24000010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0xffffffff96782e97, 0xb4, 0xfff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) sendfile(r8, r5, &(0x7f00000003c0)=0x7, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r7, 0x0, 0x10000a006) 12:57:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffffa888}, 0x0) 12:57:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xee00}, 0x0) 12:57:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x2, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xef00}, 0x0) 12:57:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) 12:57:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf000}, 0x0) 12:57:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf100}, 0x0) 12:57:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x1c}}, 0x24000010) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0xffffffff96782e97, 0xb4, 0xfff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) sendfile(r8, r5, &(0x7f00000003c0)=0x7, 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r7, 0x0, 0x10000a006) [ 1228.128076][ T27] audit: type=1804 audit(1690376238.860:2687): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1568/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1228.199351][ T27] audit: type=1804 audit(1690376238.860:2688): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1568/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 12:57:19 executing program 3: socket$inet6(0xa, 0x1, 0x0) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4) (async) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="af45f73b17cf86941f49f9ceb376fdc9cbe1fda37c3f0356dd5530d23a9e13f5ac1a719db62e2f82163b7ef831ef0fb0b2838ba4a278760a4522d13748de90b489835141daf0dfcf8a11b767403df988b9b45606485029ec9c312baee70b502cd42f797d7ea96fc5df787670029044", @ANYRES64=r1, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4], &(0x7f0000000140)='GPL\x00', 0x7, 0x8a, &(0x7f0000000640)=""/146, 0x0, 0xd, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f0000, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x330, 0x370, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x40004, 0x0, 0x0, 0x2, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 12:57:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x3, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) 12:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 12:57:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf200}, 0x0) 12:57:19 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r5, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x1c}}, 0x24000010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0xffffffff96782e97, 0xb4, 0xfff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) sendfile(r8, r5, &(0x7f00000003c0)=0x7, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r7, 0x0, 0x10000a006) (async) sendfile(r9, r7, 0x0, 0x10000a006) 12:57:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf300}, 0x0) 12:57:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x4, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) 12:57:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf400}, 0x0) [ 1228.766304][ T27] audit: type=1804 audit(1690376239.500:2689): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1569/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0 12:57:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x6, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 12:57:20 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4) (async) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000001180)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f00000010c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendfile(r4, r3, 0x0, 0x100000002) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="af45f73b17cf86941f49f9ceb376fdc9cbe1fda37c3f0356dd5530d23a9e13f5ac1a719db62e2f82163b7ef831ef0fb0b2838ba4a278760a4522d13748de90b489835141daf0dfcf8a11b767403df988b9b45606485029ec9c312baee70b502cd42f797d7ea96fc5df787670029044", @ANYRES64=r1, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4], &(0x7f0000000140)='GPL\x00', 0x7, 0x8a, &(0x7f0000000640)=""/146, 0x0, 0xd, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) (rerun: 64) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f0000, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x330, 0x370, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x40004, 0x0, 0x0, 0x2, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 12:57:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x7, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf500}, 0x0) 12:57:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffffff1}, 0x0) 12:57:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, r9, 0x0, 0x100000002) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8410058}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendfile(r7, r6, 0x0, 0x10000a006) 12:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 12:57:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xfffffffc}, 0x0) 12:57:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf600}, 0x0) 12:57:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x8, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) [ 1229.583655][ T27] audit: type=1804 audit(1690376240.310:2690): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1570/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 12:57:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf700}, 0x0) 12:57:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1000117e5}, 0x0) [ 1229.668701][ T27] audit: type=1804 audit(1690376240.310:2691): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1570/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 12:57:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0xe, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) [ 1229.830992][ T27] audit: type=1804 audit(1690376240.350:2692): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1313/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 [ 1229.995866][ T27] audit: type=1804 audit(1690376240.350:2693): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1313/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 [ 1230.040070][ T27] audit: type=1804 audit(1690376240.390:2694): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1666361082/syzkaller.Fnn2x2/1570/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1230.075086][ T27] audit: type=1804 audit(1690376240.400:2695): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1313/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 12:57:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x48100000000}, 0x0) 12:57:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002000000009001f00", @ANYRESDEC], 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4}, 0x200048c1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x6, 0x0, 0x0, 0x8000000}, 0x0) 12:57:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf800}, 0x0) 12:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 12:57:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x11, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:21 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @dev}}) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, r9, 0x0, 0x100000002) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8410058}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8410058}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendfile(r7, r6, 0x0, 0x10000a006) (async) sendfile(r7, r6, 0x0, 0x10000a006) 12:57:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x7ff34ba7cb29}, 0x0) 12:57:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xf900}, 0x0) 12:57:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x21, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @dev}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r10, r9, 0x0, 0x100000002) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8410058}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendfile(r7, r6, 0x0, 0x10000a006) 12:57:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002000000009001f00", @ANYRESDEC], 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4}, 0x200048c1) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x6, 0x0, 0x0, 0x8000000}, 0x0) (rerun: 32) 12:57:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x1000000000000}, 0x0) 12:57:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xfa00}, 0x0) 12:57:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x29, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r6, 0x0) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f163913621422cc6e3d68cec24"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3f27e523c959d340dc42f2cc74"}, @NL80211_KEY_SEQ={0xd, 0x4, "cfa19bb27e50cbc2e7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "415008e932"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8c0ceb4801"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 12:57:21 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002000000009001f00", @ANYRESDEC], 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4}, 0x200048c1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x6, 0x0, 0x0, 0x8000000}, 0x0) 12:57:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x40030000000000}, 0x0) 12:57:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xfb00}, 0x0) 12:57:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x2b, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:21 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@private2}, &(0x7f00000000c0)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:57:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 12:57:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xfc00}, 0x0) 12:57:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x2c, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) [ 1231.348928][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 12:57:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xfd00}, 0x0) [ 1231.401984][ T27] audit: type=1804 audit(1690376242.130:2696): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1316/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 12:57:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1231.541694][ T27] audit: type=1804 audit(1690376242.140:2697): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1316/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1231.569933][ T8661] bridge44: entered promiscuous mode 12:57:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r6, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f163913621422cc6e3d68cec24"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3f27e523c959d340dc42f2cc74"}, @NL80211_KEY_SEQ={0xd, 0x4, "cfa19bb27e50cbc2e7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "415008e932"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8c0ceb4801"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1231.637818][ T8661] bond0: (slave macvlan8): Enslaving as an active interface with an up link 12:57:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x2f, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xfe00}, 0x0) 12:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 12:57:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x200000000000000}, 0x0) 12:57:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@private2}, &(0x7f00000000c0)=0x14) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:57:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x33, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xff00}, 0x0) 12:57:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r6, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f163913621422cc6e3d68cec24"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3f27e523c959d340dc42f2cc74"}, @NL80211_KEY_SEQ={0xd, 0x4, "cfa19bb27e50cbc2e7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "415008e932"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8c0ceb4801"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:57:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x300000000000000}, 0x0) 12:57:22 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@private2}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@private2}, &(0x7f00000000c0)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 12:57:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x3a, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0xffffff1f}, 0x0) 12:57:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x400000000000000}, 0x0) 12:57:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x1d4, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @crypto_settings, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xb7, 0x2a, [@random_vendor={0xdd, 0xb1, "7cc824879b137886ae93d9dbb4c7ab03c4cdd43143dafcb436c8af985d08a96d6c95f8dd0f1ddde4fb9ca3165572e659e463dcde8895d831fdd6132ffa80e4fa382f5af579b0b13b93151c3419ed0ea821ce24a05cdc872f559bca7b52f0375acf487c49ed31936cc30e4af10569de66fe34e07945c042782dabecd760ca26621610b5559562d9b82d041530e9b2151cffe7075da14d9cc4c1a7c290b4e728fff7ae7b8bbfd52bfec1356987fd5d3e2f99"}]}, @NL80211_ATTR_IE={0xd7, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x39}, 0x40, 0x1, @device_a, 0x20, 0x2, 0xf91}}, @random_vendor={0xdd, 0xa8, "c3a5bbbd19a8284bc08016b48ee08822811ce75da939fa94de386ee669a33683416511a061b72ee1e022bb64dd9acaed7460a5c21ac051e23503804c980ea14fb5dd43b80dd9439b204e6c3aa48ed725a4f2f36ad120dd38272649ae77935eb3b0a81523f354f7b138a639cd395f147ebfd384f217d608e8a97fc7a2815b013770fe773aada5668d62996ad3caf2e7ea8b3e3a7c9eda21d3173bb600e6ef87d31d1f2602add14796"}, @mic={0x8c, 0x10, {0xd3b, "6d77ca8f2b2f", @short="d6ff741448e94fbf"}}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1232.140945][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1232.261129][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 12:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 12:57:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x3b, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x2}, 0x0) 12:57:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 1232.333333][ T8708] bridge45: entered promiscuous mode [ 1232.381993][ T8708] bond0: (slave macvlan9): Enslaving as an active interface with an up link 12:57:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x600000000000000}, 0x0) 12:57:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000002c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket(0x2, 0x3, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="dbd18853954609733e4d4d6bd3dc434209d9b93e304f698ee303a2444ea62f9717ce9a857a646fa31792ed7a04b58e9d91b514727d3b75223929fbf1635b7a2b91f3e319f7649d47b18e2b5b3466d2b6d37da2350ebb680c072668514c92e59f553035365c524e27a3becf80eadb1889b7fb06713c38fd425d71a77827babb75b4a6661a8ced47a0", 0x88}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="d2255420dfa50f2a6b108bbecb956fc4", 0x10}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x4008840) splice(r3, 0x0, r5, 0x0, 0x8004, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket(0x2, 0x3, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="dbd18853954609733e4d4d6bd3dc434209d9b93e304f698ee303a2444ea62f9717ce9a857a646fa31792ed7a04b58e9d91b514727d3b75223929fbf1635b7a2b91f3e319f7649d47b18e2b5b3466d2b6d37da2350ebb680c072668514c92e59f553035365c524e27a3becf80eadb1889b7fb06713c38fd425d71a77827babb75b4a6661a8ced47a0", 0x88}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="d2255420dfa50f2a6b108bbecb956fc4", 0x10}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x4008840) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x7, 'geneve0\x00', {0x8}, 0x43}) splice(r7, 0x0, r9, 0x0, 0x8004, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r11, 0xfffffffffffffe7a, &(0x7f0000000540)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e80)={&(0x7f0000001e00)='rxrpc_disconnect_call\x00'}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x7, 0x20040006}) r14 = socket(0x23, 0x3, 0xe45) ioctl$sock_SIOCETHTOOL(r14, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) 12:57:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x3c, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x3}, 0x0) 12:57:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x60, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x700000000000000}, 0x0) 12:57:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x4}, 0x0) 12:57:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x5}, 0x0) 12:57:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x73, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x800000000000000}, 0x0) 12:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x54000000}, 0x0) 12:57:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x1d4, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @crypto_settings, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xb7, 0x2a, [@random_vendor={0xdd, 0xb1, "7cc824879b137886ae93d9dbb4c7ab03c4cdd43143dafcb436c8af985d08a96d6c95f8dd0f1ddde4fb9ca3165572e659e463dcde8895d831fdd6132ffa80e4fa382f5af579b0b13b93151c3419ed0ea821ce24a05cdc872f559bca7b52f0375acf487c49ed31936cc30e4af10569de66fe34e07945c042782dabecd760ca26621610b5559562d9b82d041530e9b2151cffe7075da14d9cc4c1a7c290b4e728fff7ae7b8bbfd52bfec1356987fd5d3e2f99"}]}, @NL80211_ATTR_IE={0xd7, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x39}, 0x40, 0x1, @device_a, 0x20, 0x2, 0xf91}}, @random_vendor={0xdd, 0xa8, "c3a5bbbd19a8284bc08016b48ee08822811ce75da939fa94de386ee669a33683416511a061b72ee1e022bb64dd9acaed7460a5c21ac051e23503804c980ea14fb5dd43b80dd9439b204e6c3aa48ed725a4f2f36ad120dd38272649ae77935eb3b0a81523f354f7b138a639cd395f147ebfd384f217d608e8a97fc7a2815b013770fe773aada5668d62996ad3caf2e7ea8b3e3a7c9eda21d3173bb600e6ef87d31d1f2602add14796"}, @mic={0x8c, 0x10, {0xd3b, "6d77ca8f2b2f", @short="d6ff741448e94fbf"}}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) (async) sendfile(r5, r4, 0x0, 0x10000a006) 12:57:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 1233.349097][ T5058] bridge21: port 1(syz_tun) entered disabled state [ 1233.559036][ T10] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:57:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) pipe(&(0x7f00000002c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) (async) r6 = socket(0x2, 0x3, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="dbd18853954609733e4d4d6bd3dc434209d9b93e304f698ee303a2444ea62f9717ce9a857a646fa31792ed7a04b58e9d91b514727d3b75223929fbf1635b7a2b91f3e319f7649d47b18e2b5b3466d2b6d37da2350ebb680c072668514c92e59f553035365c524e27a3becf80eadb1889b7fb06713c38fd425d71a77827babb75b4a6661a8ced47a0", 0x88}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="d2255420dfa50f2a6b108bbecb956fc4", 0x10}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x4008840) (async) splice(r3, 0x0, r5, 0x0, 0x8004, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) (async) r10 = socket(0x2, 0x3, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="dbd18853954609733e4d4d6bd3dc434209d9b93e304f698ee303a2444ea62f9717ce9a857a646fa31792ed7a04b58e9d91b514727d3b75223929fbf1635b7a2b91f3e319f7649d47b18e2b5b3466d2b6d37da2350ebb680c072668514c92e59f553035365c524e27a3becf80eadb1889b7fb06713c38fd425d71a77827babb75b4a6661a8ced47a0", 0x88}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="d2255420dfa50f2a6b108bbecb956fc4", 0x10}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x4008840) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x7, 'geneve0\x00', {0x8}, 0x43}) (async) splice(r7, 0x0, r9, 0x0, 0x8004, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r11, 0xfffffffffffffe7a, &(0x7f0000000540)}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e80)={&(0x7f0000001e00)='rxrpc_disconnect_call\x00'}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x7, 0x20040006}) r14 = socket(0x23, 0x3, 0xe45) ioctl$sock_SIOCETHTOOL(r14, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) 12:57:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0xca, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 12:57:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x6}, 0x0) 12:57:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x1d4, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1e}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @crypto_settings, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xb7, 0x2a, [@random_vendor={0xdd, 0xb1, "7cc824879b137886ae93d9dbb4c7ab03c4cdd43143dafcb436c8af985d08a96d6c95f8dd0f1ddde4fb9ca3165572e659e463dcde8895d831fdd6132ffa80e4fa382f5af579b0b13b93151c3419ed0ea821ce24a05cdc872f559bca7b52f0375acf487c49ed31936cc30e4af10569de66fe34e07945c042782dabecd760ca26621610b5559562d9b82d041530e9b2151cffe7075da14d9cc4c1a7c290b4e728fff7ae7b8bbfd52bfec1356987fd5d3e2f99"}]}, @NL80211_ATTR_IE={0xd7, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x39}, 0x40, 0x1, @device_a, 0x20, 0x2, 0xf91}}, @random_vendor={0xdd, 0xa8, "c3a5bbbd19a8284bc08016b48ee08822811ce75da939fa94de386ee669a33683416511a061b72ee1e022bb64dd9acaed7460a5c21ac051e23503804c980ea14fb5dd43b80dd9439b204e6c3aa48ed725a4f2f36ad120dd38272649ae77935eb3b0a81523f354f7b138a639cd395f147ebfd384f217d608e8a97fc7a2815b013770fe773aada5668d62996ad3caf2e7ea8b3e3a7c9eda21d3173bb600e6ef87d31d1f2602add14796"}, @mic={0x8c, 0x10, {0xd3b, "6d77ca8f2b2f", @short="d6ff741448e94fbf"}}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 64) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 12:57:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 12:57:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x7}, 0x0) [ 1233.844493][ T10] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:57:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000028bd7000000000001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) sendmsg$netlink(r5, &(0x7f0000000480)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2009000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000340)={0x70, 0x29, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x60, 0x19, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="828c70558d44116db3ae025c3ec4960c07d768c3d0f6076922361942f07746fe959a63c3cd0f68f65023d8c0014117ca84920a6a259db815b4018de6c4451c86566547fb9fd0f0d019a45a1a362f7b65232fde4b"]}]}, 0x70}], 0x1, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [r4, r6, r3, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}], 0x48}, 0x20000010) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb1a3eb5b407fb47}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r9, r4, 0x0, 0x10000a006) [ 1234.030707][ T10] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:57:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x8}, 0x0) 12:57:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) pipe(&(0x7f00000002c0)) (async, rerun: 64) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) (async) r6 = socket(0x2, 0x3, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="dbd18853954609733e4d4d6bd3dc434209d9b93e304f698ee303a2444ea62f9717ce9a857a646fa31792ed7a04b58e9d91b514727d3b75223929fbf1635b7a2b91f3e319f7649d47b18e2b5b3466d2b6d37da2350ebb680c072668514c92e59f553035365c524e27a3becf80eadb1889b7fb06713c38fd425d71a77827babb75b4a6661a8ced47a0", 0x88}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="d2255420dfa50f2a6b108bbecb956fc4", 0x10}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x4008840) (async, rerun: 32) splice(r3, 0x0, r5, 0x0, 0x8004, 0x0) (rerun: 32) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket(0x2, 0x3, 0x21) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="dbd18853954609733e4d4d6bd3dc434209d9b93e304f698ee303a2444ea62f9717ce9a857a646fa31792ed7a04b58e9d91b514727d3b75223929fbf1635b7a2b91f3e319f7649d47b18e2b5b3466d2b6d37da2350ebb680c072668514c92e59f553035365c524e27a3becf80eadb1889b7fb06713c38fd425d71a77827babb75b4a6661a8ced47a0", 0x88}, {&(0x7f0000000a00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="d2255420dfa50f2a6b108bbecb956fc4", 0x10}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r9, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}], 0x2, 0x4008840) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x7, 'geneve0\x00', {0x8}, 0x43}) splice(r7, 0x0, r9, 0x0, 0x8004, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r11, 0xfffffffffffffe7a, &(0x7f0000000540)}, 0x10) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e80)={&(0x7f0000001e00)='rxrpc_disconnect_call\x00'}, 0x10) (rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x7, 0x20040006}) (async) r14 = socket(0x23, 0x3, 0xe45) ioctl$sock_SIOCETHTOOL(r14, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) [ 1234.227705][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1234.227728][ T27] audit: type=1804 audit(1690376244.960:2700): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1322/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 1234.314983][ T10] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:57:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x9}, 0x0) 12:57:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d08000000802111f0000080211000001505050505050000040"], 0x40}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1234.434353][ T27] audit: type=1804 audit(1690376244.970:2701): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir703454209/syzkaller.oyPUfD/1322/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 1236.021293][ T10] batadv3: left allmulticast mode [ 1236.026776][ T10] batadv3: left promiscuous mode [ 1236.032896][ T10] bridge9: port 1(batadv3) entered disabled state [ 1236.045092][ T10] batadv2: left allmulticast mode [ 1236.050896][ T10] batadv2: left promiscuous mode [ 1236.058009][ T10] bridge8: port 1(batadv2) entered disabled state [ 1236.069599][ T10] batadv1: left allmulticast mode [ 1236.075236][ T10] batadv1: left promiscuous mode [ 1236.080509][ T10] bridge7: port 1(batadv1) entered disabled state [ 1236.113307][ T10] hsr_slave_0: left promiscuous mode [ 1236.120051][ T10] hsr_slave_1: left promiscuous mode [ 1236.127487][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.137142][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.149884][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.173684][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.193805][ T10] bridge_slave_1: left allmulticast mode [ 1236.209822][ T10] bridge_slave_1: left promiscuous mode [ 1236.220216][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.241176][ T10] 0ªX: left promiscuous mode [ 1236.250735][ T10] bridge0: port 1(00ªX) entered disabled state [ 1236.314659][ T10] veth1_macvtap: left promiscuous mode [ 1236.320333][ T10] veth0_macvtap: left promiscuous mode [ 1236.344536][ T10] veth1_vlan: left promiscuous mode [ 1236.350399][ T12] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1236.416375][ T12] batman_adv: batadv3: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1236.443808][ T12] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1236.897294][ T5544] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1236.962501][T17361] batman_adv: batadv3: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1236.984208][T17361] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1236.995413][ T10] bond5 (unregistering): Released all slaves [ 1237.262010][ T10] ================================================================== [ 1237.270135][ T10] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x19d/0x1f0 [ 1237.278385][ T10] Read of size 8 at addr ffff8880778c9000 by task kworker/u4:0/10 [ 1237.286209][ T10] [ 1237.288542][ T10] CPU: 0 PID: 10 Comm: kworker/u4:0 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1237.298537][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1237.308630][ T10] Workqueue: netns cleanup_net [ 1237.313423][ T10] Call Trace: [ 1237.316715][ T10] [ 1237.319657][ T10] dump_stack_lvl+0xd9/0x1b0 [ 1237.324293][ T10] print_report+0xc4/0x620 [ 1237.328735][ T10] ? __virt_addr_valid+0x5e/0x2d0 [ 1237.333782][ T10] ? __phys_addr+0xc6/0x140 [ 1237.338310][ T10] kasan_report+0xda/0x110 [ 1237.342751][ T10] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 1237.348143][ T10] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 1237.353539][ T10] mini_qdisc_pair_swap+0x19d/0x1f0 [ 1237.358764][ T10] ? clsact_egress_block_get+0x40/0x40 [ 1237.364325][ T10] ? clsact_egress_block_get+0x40/0x40 [ 1237.369812][ T10] tcf_chain0_head_change_cb_del+0x19c/0x3d0 [ 1237.375816][ T10] tcf_block_put_ext.part.0+0x30/0x2e0 [ 1237.381304][ T10] tcf_block_put_ext+0x2e/0x40 [ 1237.386094][ T10] clsact_destroy+0x283/0x990 [ 1237.390806][ T10] ? ingress_destroy+0x520/0x520 [ 1237.395778][ T10] __qdisc_destroy+0xc4/0x450 [ 1237.400483][ T10] qdisc_put+0xd1/0xf0 [ 1237.404577][ T10] shutdown_scheduler_queue+0xa5/0x160 [ 1237.410064][ T10] dev_shutdown+0x17e/0x430 [ 1237.414597][ T10] unregister_netdevice_many_notify+0x5bd/0x1a20 [ 1237.420957][ T10] ? mutex_is_locked+0x12/0x40 [ 1237.425739][ T10] ? netdev_freemem+0x60/0x60 [ 1237.430441][ T10] ? unregister_netdevice_many+0x20/0x20 [ 1237.436097][ T10] ? sysfs_remove_group+0xc6/0x170 [ 1237.441230][ T10] ? br_dev_delete+0x116/0x1a0 [ 1237.446087][ T10] default_device_exit_batch+0x584/0x740 [ 1237.451754][ T10] ? unregister_netdev+0x30/0x30 [ 1237.456722][ T10] ? ib_device_get_by_netdev+0x520/0x520 [ 1237.462416][ T10] ? preempt_count_sub+0x150/0x150 [ 1237.467563][ T10] ? unregister_netdev+0x30/0x30 [ 1237.472530][ T10] ops_exit_list+0x125/0x170 [ 1237.477143][ T10] cleanup_net+0x505/0xb20 [ 1237.481577][ T10] ? unregister_pernet_device+0x80/0x80 [ 1237.487143][ T10] ? spin_bug+0x1d0/0x1d0 [ 1237.491537][ T10] process_one_work+0xaa2/0x16f0 [ 1237.496505][ T10] ? lock_sync+0x190/0x190 [ 1237.500951][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1237.506347][ T10] ? spin_bug+0x1d0/0x1d0 [ 1237.510733][ T10] worker_thread+0x687/0x1110 [ 1237.515441][ T10] ? process_one_work+0x16f0/0x16f0 [ 1237.520657][ T10] kthread+0x33a/0x430 [ 1237.524741][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 1237.530391][ T10] ret_from_fork+0x2c/0x70 [ 1237.534827][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 1237.540480][ T10] ret_from_fork_asm+0x11/0x20 [ 1237.545296][ T10] RIP: 0000:0x0 [ 1237.548770][ T10] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1237.556138][ T10] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 1237.564566][ T10] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1237.572541][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1237.580518][ T10] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1237.588498][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1237.596478][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.604471][ T10] [ 1237.607494][ T10] [ 1237.609834][ T10] Allocated by task 8244: [ 1237.614165][ T10] kasan_save_stack+0x33/0x50 [ 1237.618874][ T10] kasan_set_track+0x25/0x30 [ 1237.623491][ T10] __kasan_kmalloc+0xa2/0xb0 [ 1237.628103][ T10] __kmalloc_node_track_caller+0x5e/0x100 [ 1237.633847][ T10] kmalloc_reserve+0xef/0x270 [ 1237.638544][ T10] __alloc_skb+0x12b/0x330 [ 1237.643016][ T10] netlink_ack+0x305/0x1370 [ 1237.647538][ T10] netlink_rcv_skb+0x345/0x440 [ 1237.652319][ T10] genl_rcv+0x28/0x40 [ 1237.656327][ T10] netlink_unicast+0x539/0x800 [ 1237.661122][ T10] netlink_sendmsg+0x93c/0xe40 [ 1237.665928][ T10] sock_sendmsg+0xd9/0x180 [ 1237.670361][ T10] splice_to_socket+0xa4b/0xf60 [ 1237.675238][ T10] direct_splice_actor+0x118/0x180 [ 1237.680375][ T10] splice_direct_to_actor+0x347/0xa30 [ 1237.685776][ T10] do_splice_direct+0x1af/0x280 [ 1237.690655][ T10] do_sendfile+0xb88/0x1390 [ 1237.695189][ T10] __x64_sys_sendfile64+0x1d6/0x220 [ 1237.700397][ T10] do_syscall_64+0x38/0xb0 [ 1237.704828][ T10] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1237.710742][ T10] [ 1237.713067][ T10] Last potentially related work creation: [ 1237.718781][ T10] kasan_save_stack+0x33/0x50 [ 1237.723487][ T10] __kasan_record_aux_stack+0xbc/0xd0 [ 1237.728884][ T10] __call_rcu_common.constprop.0+0x9a/0x790 [ 1237.734793][ T10] netlink_release+0xf0d/0x2000 [ 1237.739675][ T10] __sock_release+0xcd/0x290 [ 1237.744285][ T10] sock_close+0x1c/0x20 [ 1237.748454][ T10] __fput+0x3fd/0xac0 [ 1237.752450][ T10] task_work_run+0x14d/0x240 [ 1237.757065][ T10] exit_to_user_mode_prepare+0x210/0x240 [ 1237.762728][ T10] syscall_exit_to_user_mode+0x1d/0x50 [ 1237.768223][ T10] do_syscall_64+0x44/0xb0 [ 1237.772655][ T10] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1237.778606][ T10] [ 1237.780933][ T10] Second to last potentially related work creation: [ 1237.787524][ T10] kasan_save_stack+0x33/0x50 [ 1237.792226][ T10] __kasan_record_aux_stack+0xbc/0xd0 [ 1237.797633][ T10] __call_rcu_common.constprop.0+0x9a/0x790 [ 1237.803554][ T10] netlink_release+0xf0d/0x2000 [ 1237.808446][ T10] __sock_release+0xcd/0x290 [ 1237.813056][ T10] sock_close+0x1c/0x20 [ 1237.817225][ T10] __fput+0x3fd/0xac0 [ 1237.821216][ T10] task_work_run+0x14d/0x240 [ 1237.825830][ T10] exit_to_user_mode_prepare+0x210/0x240 [ 1237.831491][ T10] syscall_exit_to_user_mode+0x1d/0x50 [ 1237.836971][ T10] do_syscall_64+0x44/0xb0 [ 1237.841403][ T10] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1237.847312][ T10] [ 1237.849652][ T10] The buggy address belongs to the object at ffff8880778c9000 [ 1237.849652][ T10] which belongs to the cache kmalloc-2k of size 2048 [ 1237.863717][ T10] The buggy address is located 0 bytes inside of [ 1237.863717][ T10] freed 2048-byte region [ffff8880778c9000, ffff8880778c9800) [ 1237.877439][ T10] [ 1237.879777][ T10] The buggy address belongs to the physical page: [ 1237.886192][ T10] page:ffffea0001de3200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880778c8000 pfn:0x778c8 [ 1237.897665][ T10] head:ffffea0001de3200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1237.906621][ T10] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1237.914616][ T10] page_type: 0xffffffff() [ 1237.918961][ T10] raw: 00fff00000010200 ffff888012842000 ffffea000052aa10 ffffea00010c9a10 [ 1237.927560][ T10] raw: ffff8880778c8000 0000000000080001 00000001ffffffff 0000000000000000 [ 1237.936150][ T10] page dumped because: kasan: bad access detected [ 1237.942587][ T10] page_owner tracks the page as allocated [ 1237.948304][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5065, tgid 5065 (syz-executor.4), ts 150695034125, free_ts 114033290874 [ 1237.970047][ T10] post_alloc_hook+0x2d2/0x350 [ 1237.974861][ T10] get_page_from_freelist+0x10a9/0x31e0 [ 1237.980433][ T10] __alloc_pages+0x1d0/0x4a0 [ 1237.985046][ T10] alloc_pages+0x1a9/0x270 [ 1237.989490][ T10] allocate_slab+0x24e/0x380 [ 1237.994124][ T10] ___slab_alloc+0x8bc/0x1570 [ 1237.998822][ T10] __slab_alloc.constprop.0+0x56/0xa0 [ 1238.004236][ T10] __kmem_cache_alloc_node+0x137/0x350 [ 1238.009714][ T10] __kmalloc+0x4c/0x100 [ 1238.013889][ T10] sk_prot_alloc+0x1a4/0x2a0 [ 1238.018507][ T10] sk_alloc+0x3a/0x7f0 [ 1238.022604][ T10] __netlink_create+0x63/0x380 [ 1238.027389][ T10] __netlink_kernel_create+0x11d/0x7f0 [ 1238.032870][ T10] rdma_nl_net_init+0xb1/0x180 [ 1238.037661][ T10] rdma_dev_init_net+0x18c/0x530 [ 1238.042629][ T10] ops_init+0xb9/0x650 [ 1238.046719][ T10] page last free stack trace: [ 1238.051390][ T10] free_unref_page_prepare+0x508/0xb90 [ 1238.056876][ T10] free_unref_page+0x33/0x3b0 [ 1238.061656][ T10] __folio_put+0x10a/0x140 [ 1238.066096][ T10] skb_release_data+0x559/0x870 [ 1238.070986][ T10] napi_consume_skb+0x15c/0x2b0 [ 1238.075867][ T10] net_rx_action+0x39e/0xe90 [ 1238.080483][ T10] __do_softirq+0x218/0x965 [ 1238.085004][ T10] [ 1238.087331][ T10] Memory state around the buggy address: [ 1238.092963][ T10] ffff8880778c8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1238.101033][ T10] ffff8880778c8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1238.109111][ T10] >ffff8880778c9000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.117177][ T10] ^ [ 1238.121246][ T10] ffff8880778c9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.129329][ T10] ffff8880778c9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1238.137487][ T10] ================================================================== [ 1238.205329][ T5142] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1238.215893][ T5142] batman_adv: batadv3: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1238.228870][ T5142] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1238.311942][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1238.319191][ T10] CPU: 0 PID: 10 Comm: kworker/u4:0 Not tainted 6.5.0-rc2-syzkaller-00586-g09bd2d7ddaed #0 [ 1238.329212][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1238.339300][ T10] Workqueue: netns cleanup_net [ 1238.344117][ T10] Call Trace: [ 1238.347421][ T10] [ 1238.350376][ T10] dump_stack_lvl+0xd9/0x1b0 [ 1238.355017][ T10] panic+0x6a4/0x750 [ 1238.358961][ T10] ? panic_smp_self_stop+0xa0/0xa0 [ 1238.364128][ T10] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1238.370341][ T10] ? preempt_schedule_thunk+0x1a/0x30 [ 1238.375774][ T10] ? preempt_schedule_common+0x45/0xc0 [ 1238.381286][ T10] check_panic_on_warn+0xab/0xb0 [ 1238.386270][ T10] end_report+0x108/0x150 [ 1238.390652][ T10] kasan_report+0xea/0x110 [ 1238.395122][ T10] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 1238.400574][ T10] ? mini_qdisc_pair_swap+0x19d/0x1f0 [ 1238.406004][ T10] mini_qdisc_pair_swap+0x19d/0x1f0 [ 1238.411256][ T10] ? clsact_egress_block_get+0x40/0x40 [ 1238.416769][ T10] ? clsact_egress_block_get+0x40/0x40 [ 1238.422287][ T10] tcf_chain0_head_change_cb_del+0x19c/0x3d0 [ 1238.428313][ T10] tcf_block_put_ext.part.0+0x30/0x2e0 [ 1238.433824][ T10] tcf_block_put_ext+0x2e/0x40 [ 1238.438629][ T10] clsact_destroy+0x283/0x990 [ 1238.443368][ T10] ? ingress_destroy+0x520/0x520 [ 1238.448370][ T10] __qdisc_destroy+0xc4/0x450 [ 1238.453103][ T10] qdisc_put+0xd1/0xf0 [ 1238.457318][ T10] shutdown_scheduler_queue+0xa5/0x160 [ 1238.464489][ T10] dev_shutdown+0x17e/0x430 [ 1238.469056][ T10] unregister_netdevice_many_notify+0x5bd/0x1a20 [ 1238.475445][ T10] ? mutex_is_locked+0x12/0x40 [ 1238.480259][ T10] ? netdev_freemem+0x60/0x60 [ 1238.484982][ T10] ? unregister_netdevice_many+0x20/0x20 [ 1238.490751][ T10] ? sysfs_remove_group+0xc6/0x170 [ 1238.495905][ T10] ? br_dev_delete+0x116/0x1a0 [ 1238.500722][ T10] default_device_exit_batch+0x584/0x740 [ 1238.506412][ T10] ? unregister_netdev+0x30/0x30 [ 1238.511406][ T10] ? ib_device_get_by_netdev+0x520/0x520 [ 1238.517087][ T10] ? preempt_count_sub+0x150/0x150 [ 1238.522258][ T10] ? unregister_netdev+0x30/0x30 [ 1238.527337][ T10] ops_exit_list+0x125/0x170 [ 1238.531965][ T10] cleanup_net+0x505/0xb20 [ 1238.536427][ T10] ? unregister_pernet_device+0x80/0x80 [ 1238.542023][ T10] ? spin_bug+0x1d0/0x1d0 [ 1238.546410][ T10] process_one_work+0xaa2/0x16f0 [ 1238.551397][ T10] ? lock_sync+0x190/0x190 [ 1238.555853][ T10] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1238.561281][ T10] ? spin_bug+0x1d0/0x1d0 [ 1238.565720][ T10] worker_thread+0x687/0x1110 [ 1238.570456][ T10] ? process_one_work+0x16f0/0x16f0 [ 1238.575710][ T10] kthread+0x33a/0x430 [ 1238.579819][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 1238.585488][ T10] ret_from_fork+0x2c/0x70 [ 1238.589966][ T10] ? kthread_complete_and_exit+0x40/0x40 [ 1238.595637][ T10] ret_from_fork_asm+0x11/0x20 [ 1238.600467][ T10] RIP: 0000:0x0 [ 1238.603985][ T10] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1238.611375][ T10] RSP: 0000:0000000000000000 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 1238.619831][ T10] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1238.627839][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.629991][ T8834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.632419][ T8834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1238.644649][ T8834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.645375][ T8834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1238.646354][ T8834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1238.646722][ T8834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1238.648485][ T8834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.648660][ T8834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1238.650231][ T8834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1238.650431][ T8834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1238.650867][ T8834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.651071][ T8834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1238.719073][ T10] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.727049][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1238.735036][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.743017][ T10] [ 1238.746362][ T10] Kernel Offset: disabled [ 1238.750696][ T10] Rebooting in 86400 seconds..