[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.77' (ECDSA) to the list of known hosts. 2021/10/18 14:12:47 fuzzer started 2021/10/18 14:12:48 dialing manager at 10.128.0.169:45165 2021/10/18 14:12:48 syscalls: 1698 2021/10/18 14:12:48 code coverage: enabled 2021/10/18 14:12:48 comparison tracing: enabled 2021/10/18 14:12:48 extra coverage: enabled 2021/10/18 14:12:48 setuid sandbox: enabled 2021/10/18 14:12:48 namespace sandbox: enabled 2021/10/18 14:12:48 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/18 14:12:48 fault injection: enabled 2021/10/18 14:12:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/18 14:12:48 net packet injection: enabled 2021/10/18 14:12:48 net device setup: enabled 2021/10/18 14:12:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/18 14:12:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/18 14:12:48 USB emulation: enabled 2021/10/18 14:12:48 hci packet injection: enabled 2021/10/18 14:12:48 wifi device emulation: enabled 2021/10/18 14:12:48 802.15.4 emulation: enabled 2021/10/18 14:12:48 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 68.331462][ T6524] cgroup: Unknown subsys name 'net' [ 68.347251][ T6524] cgroup: Unknown subsys name 'rlimit' 2021/10/18 14:12:48 fetching corpus: 50, signal 33825/37392 (executing program) 2021/10/18 14:12:49 fetching corpus: 100, signal 52543/57571 (executing program) 2021/10/18 14:12:49 fetching corpus: 150, signal 62214/68702 (executing program) 2021/10/18 14:12:49 fetching corpus: 200, signal 72199/80042 (executing program) 2021/10/18 14:12:49 fetching corpus: 250, signal 79419/88571 (executing program) 2021/10/18 14:12:50 fetching corpus: 300, signal 85274/95730 (executing program) 2021/10/18 14:12:50 fetching corpus: 350, signal 90018/101736 (executing program) 2021/10/18 14:12:50 fetching corpus: 400, signal 93970/106929 (executing program) 2021/10/18 14:12:50 fetching corpus: 450, signal 98489/112623 (executing program) 2021/10/18 14:12:51 fetching corpus: 500, signal 102380/117673 (executing program) [ 71.122134][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.128635][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:12:51 fetching corpus: 550, signal 105939/122406 (executing program) 2021/10/18 14:12:51 fetching corpus: 600, signal 108105/125782 (executing program) 2021/10/18 14:12:51 fetching corpus: 650, signal 111451/130179 (executing program) 2021/10/18 14:12:52 fetching corpus: 700, signal 114121/133957 (executing program) 2021/10/18 14:12:52 fetching corpus: 750, signal 115835/136826 (executing program) 2021/10/18 14:12:52 fetching corpus: 800, signal 118710/140689 (executing program) 2021/10/18 14:12:52 fetching corpus: 850, signal 121293/144273 (executing program) 2021/10/18 14:12:53 fetching corpus: 900, signal 124740/148599 (executing program) 2021/10/18 14:12:53 fetching corpus: 950, signal 127199/152027 (executing program) 2021/10/18 14:12:53 fetching corpus: 1000, signal 128762/154619 (executing program) 2021/10/18 14:12:53 fetching corpus: 1050, signal 130490/157352 (executing program) 2021/10/18 14:12:54 fetching corpus: 1100, signal 133263/160951 (executing program) 2021/10/18 14:12:54 fetching corpus: 1150, signal 136522/164980 (executing program) 2021/10/18 14:12:54 fetching corpus: 1200, signal 138416/167797 (executing program) 2021/10/18 14:12:54 fetching corpus: 1250, signal 140157/170440 (executing program) 2021/10/18 14:12:55 fetching corpus: 1300, signal 141601/172768 (executing program) 2021/10/18 14:12:55 fetching corpus: 1350, signal 143348/175398 (executing program) 2021/10/18 14:12:55 fetching corpus: 1400, signal 145493/178265 (executing program) 2021/10/18 14:12:55 fetching corpus: 1450, signal 146696/180385 (executing program) 2021/10/18 14:12:56 fetching corpus: 1500, signal 148458/182982 (executing program) 2021/10/18 14:12:56 fetching corpus: 1550, signal 150027/185389 (executing program) 2021/10/18 14:12:56 fetching corpus: 1600, signal 151529/187747 (executing program) 2021/10/18 14:12:56 fetching corpus: 1650, signal 153234/190234 (executing program) 2021/10/18 14:12:57 fetching corpus: 1700, signal 154945/192732 (executing program) 2021/10/18 14:12:57 fetching corpus: 1750, signal 156098/194725 (executing program) 2021/10/18 14:12:57 fetching corpus: 1800, signal 157884/197172 (executing program) 2021/10/18 14:12:57 fetching corpus: 1850, signal 159571/199570 (executing program) 2021/10/18 14:12:58 fetching corpus: 1900, signal 161315/201964 (executing program) 2021/10/18 14:12:58 fetching corpus: 1950, signal 162485/203885 (executing program) 2021/10/18 14:12:58 fetching corpus: 2000, signal 164008/206028 (executing program) 2021/10/18 14:12:58 fetching corpus: 2050, signal 165176/207928 (executing program) 2021/10/18 14:12:59 fetching corpus: 2100, signal 166195/209720 (executing program) 2021/10/18 14:12:59 fetching corpus: 2150, signal 167662/211838 (executing program) 2021/10/18 14:12:59 fetching corpus: 2200, signal 169025/213873 (executing program) 2021/10/18 14:12:59 fetching corpus: 2250, signal 170222/215691 (executing program) 2021/10/18 14:13:00 fetching corpus: 2300, signal 171913/217917 (executing program) 2021/10/18 14:13:00 fetching corpus: 2350, signal 173195/219805 (executing program) 2021/10/18 14:13:00 fetching corpus: 2400, signal 174528/221715 (executing program) 2021/10/18 14:13:00 fetching corpus: 2450, signal 175575/223430 (executing program) 2021/10/18 14:13:01 fetching corpus: 2500, signal 176952/225386 (executing program) 2021/10/18 14:13:01 fetching corpus: 2550, signal 178481/227335 (executing program) 2021/10/18 14:13:01 fetching corpus: 2600, signal 179615/229053 (executing program) 2021/10/18 14:13:01 fetching corpus: 2650, signal 180531/230613 (executing program) 2021/10/18 14:13:01 fetching corpus: 2700, signal 181754/232351 (executing program) 2021/10/18 14:13:02 fetching corpus: 2750, signal 182851/233990 (executing program) 2021/10/18 14:13:02 fetching corpus: 2800, signal 183644/235456 (executing program) 2021/10/18 14:13:02 fetching corpus: 2850, signal 184549/236935 (executing program) 2021/10/18 14:13:02 fetching corpus: 2900, signal 185461/238435 (executing program) 2021/10/18 14:13:02 fetching corpus: 2950, signal 186334/239845 (executing program) 2021/10/18 14:13:03 fetching corpus: 3000, signal 187537/241539 (executing program) 2021/10/18 14:13:03 fetching corpus: 3050, signal 188571/243093 (executing program) 2021/10/18 14:13:03 fetching corpus: 3100, signal 189782/244710 (executing program) 2021/10/18 14:13:03 fetching corpus: 3150, signal 190810/246272 (executing program) 2021/10/18 14:13:04 fetching corpus: 3200, signal 191943/247818 (executing program) 2021/10/18 14:13:04 fetching corpus: 3250, signal 192518/249001 (executing program) 2021/10/18 14:13:04 fetching corpus: 3300, signal 193498/250463 (executing program) 2021/10/18 14:13:04 fetching corpus: 3350, signal 194246/251800 (executing program) 2021/10/18 14:13:05 fetching corpus: 3400, signal 195053/253155 (executing program) 2021/10/18 14:13:05 fetching corpus: 3450, signal 195836/254457 (executing program) 2021/10/18 14:13:05 fetching corpus: 3500, signal 196496/255674 (executing program) 2021/10/18 14:13:05 fetching corpus: 3550, signal 197094/256833 (executing program) 2021/10/18 14:13:05 fetching corpus: 3600, signal 197839/258083 (executing program) 2021/10/18 14:13:06 fetching corpus: 3650, signal 198910/259476 (executing program) 2021/10/18 14:13:06 fetching corpus: 3700, signal 199842/260834 (executing program) 2021/10/18 14:13:06 fetching corpus: 3750, signal 200565/261997 (executing program) 2021/10/18 14:13:06 fetching corpus: 3800, signal 201411/263214 (executing program) 2021/10/18 14:13:07 fetching corpus: 3850, signal 202268/264487 (executing program) 2021/10/18 14:13:07 fetching corpus: 3900, signal 203015/265730 (executing program) 2021/10/18 14:13:07 fetching corpus: 3950, signal 203559/266836 (executing program) 2021/10/18 14:13:07 fetching corpus: 4000, signal 204350/268019 (executing program) 2021/10/18 14:13:07 fetching corpus: 4050, signal 205197/269237 (executing program) 2021/10/18 14:13:08 fetching corpus: 4100, signal 206009/270451 (executing program) 2021/10/18 14:13:08 fetching corpus: 4150, signal 206765/271635 (executing program) 2021/10/18 14:13:08 fetching corpus: 4200, signal 207476/272743 (executing program) 2021/10/18 14:13:08 fetching corpus: 4250, signal 208451/273996 (executing program) 2021/10/18 14:13:09 fetching corpus: 4300, signal 209096/275095 (executing program) 2021/10/18 14:13:09 fetching corpus: 4350, signal 209674/276110 (executing program) 2021/10/18 14:13:09 fetching corpus: 4400, signal 210297/277153 (executing program) 2021/10/18 14:13:09 fetching corpus: 4450, signal 210908/278188 (executing program) 2021/10/18 14:13:10 fetching corpus: 4500, signal 211944/279399 (executing program) 2021/10/18 14:13:10 fetching corpus: 4550, signal 212566/280418 (executing program) 2021/10/18 14:13:10 fetching corpus: 4600, signal 213248/281485 (executing program) 2021/10/18 14:13:11 fetching corpus: 4650, signal 213919/282485 (executing program) 2021/10/18 14:13:11 fetching corpus: 4700, signal 214434/283430 (executing program) 2021/10/18 14:13:11 fetching corpus: 4750, signal 214938/284374 (executing program) 2021/10/18 14:13:11 fetching corpus: 4800, signal 215427/285270 (executing program) 2021/10/18 14:13:11 fetching corpus: 4850, signal 216262/286357 (executing program) 2021/10/18 14:13:12 fetching corpus: 4900, signal 217032/287380 (executing program) 2021/10/18 14:13:12 fetching corpus: 4950, signal 217709/288337 (executing program) 2021/10/18 14:13:12 fetching corpus: 5000, signal 218254/289292 (executing program) 2021/10/18 14:13:12 fetching corpus: 5050, signal 219010/290265 (executing program) 2021/10/18 14:13:12 fetching corpus: 5100, signal 219756/291254 (executing program) 2021/10/18 14:13:13 fetching corpus: 5150, signal 220257/292145 (executing program) 2021/10/18 14:13:13 fetching corpus: 5200, signal 220883/293072 (executing program) 2021/10/18 14:13:13 fetching corpus: 5250, signal 221472/293985 (executing program) 2021/10/18 14:13:13 fetching corpus: 5300, signal 222068/294894 (executing program) 2021/10/18 14:13:14 fetching corpus: 5350, signal 222908/295849 (executing program) 2021/10/18 14:13:14 fetching corpus: 5400, signal 223688/296789 (executing program) 2021/10/18 14:13:14 fetching corpus: 5450, signal 224188/297636 (executing program) 2021/10/18 14:13:15 fetching corpus: 5500, signal 224819/298551 (executing program) 2021/10/18 14:13:15 fetching corpus: 5550, signal 225221/299376 (executing program) 2021/10/18 14:13:15 fetching corpus: 5600, signal 226146/300345 (executing program) 2021/10/18 14:13:15 fetching corpus: 5650, signal 226654/301139 (executing program) 2021/10/18 14:13:16 fetching corpus: 5700, signal 227150/301953 (executing program) 2021/10/18 14:13:16 fetching corpus: 5750, signal 227632/302731 (executing program) 2021/10/18 14:13:16 fetching corpus: 5800, signal 228694/303700 (executing program) 2021/10/18 14:13:16 fetching corpus: 5850, signal 229362/304544 (executing program) 2021/10/18 14:13:17 fetching corpus: 5900, signal 229682/305238 (executing program) 2021/10/18 14:13:17 fetching corpus: 5950, signal 230344/306084 (executing program) 2021/10/18 14:13:17 fetching corpus: 6000, signal 230836/306826 (executing program) 2021/10/18 14:13:17 fetching corpus: 6049, signal 231544/307623 (executing program) 2021/10/18 14:13:18 fetching corpus: 6099, signal 232218/308431 (executing program) 2021/10/18 14:13:18 fetching corpus: 6148, signal 232843/309205 (executing program) 2021/10/18 14:13:18 fetching corpus: 6198, signal 233230/309924 (executing program) 2021/10/18 14:13:18 fetching corpus: 6248, signal 234069/310721 (executing program) 2021/10/18 14:13:19 fetching corpus: 6298, signal 234544/311447 (executing program) 2021/10/18 14:13:19 fetching corpus: 6348, signal 235105/312160 (executing program) 2021/10/18 14:13:19 fetching corpus: 6398, signal 235883/312931 (executing program) 2021/10/18 14:13:19 fetching corpus: 6448, signal 236462/313652 (executing program) 2021/10/18 14:13:19 fetching corpus: 6498, signal 236953/314365 (executing program) 2021/10/18 14:13:20 fetching corpus: 6548, signal 237463/315098 (executing program) 2021/10/18 14:13:20 fetching corpus: 6598, signal 238023/315844 (executing program) 2021/10/18 14:13:20 fetching corpus: 6648, signal 238523/316555 (executing program) 2021/10/18 14:13:20 fetching corpus: 6698, signal 238903/317222 (executing program) 2021/10/18 14:13:21 fetching corpus: 6748, signal 239541/317935 (executing program) 2021/10/18 14:13:21 fetching corpus: 6798, signal 239990/318599 (executing program) 2021/10/18 14:13:21 fetching corpus: 6848, signal 240481/319272 (executing program) 2021/10/18 14:13:22 fetching corpus: 6898, signal 240981/319943 (executing program) 2021/10/18 14:13:22 fetching corpus: 6948, signal 241587/320622 (executing program) 2021/10/18 14:13:22 fetching corpus: 6998, signal 242145/321257 (executing program) 2021/10/18 14:13:22 fetching corpus: 7048, signal 242818/321944 (executing program) 2021/10/18 14:13:23 fetching corpus: 7098, signal 243159/322536 (executing program) 2021/10/18 14:13:23 fetching corpus: 7148, signal 243730/323154 (executing program) 2021/10/18 14:13:23 fetching corpus: 7198, signal 244181/323766 (executing program) 2021/10/18 14:13:23 fetching corpus: 7248, signal 244645/324395 (executing program) 2021/10/18 14:13:24 fetching corpus: 7298, signal 245105/324998 (executing program) 2021/10/18 14:13:24 fetching corpus: 7348, signal 245688/325597 (executing program) 2021/10/18 14:13:24 fetching corpus: 7398, signal 246142/326196 (executing program) 2021/10/18 14:13:24 fetching corpus: 7448, signal 246737/326813 (executing program) 2021/10/18 14:13:25 fetching corpus: 7496, signal 247269/327389 (executing program) 2021/10/18 14:13:25 fetching corpus: 7545, signal 247618/327993 (executing program) 2021/10/18 14:13:25 fetching corpus: 7595, signal 248043/328550 (executing program) 2021/10/18 14:13:25 fetching corpus: 7645, signal 248552/329114 (executing program) 2021/10/18 14:13:25 fetching corpus: 7695, signal 249346/329685 (executing program) 2021/10/18 14:13:26 fetching corpus: 7745, signal 249770/330227 (executing program) 2021/10/18 14:13:26 fetching corpus: 7795, signal 250342/330798 (executing program) 2021/10/18 14:13:26 fetching corpus: 7845, signal 250866/331364 (executing program) 2021/10/18 14:13:26 fetching corpus: 7895, signal 251291/331870 (executing program) 2021/10/18 14:13:26 fetching corpus: 7945, signal 251619/332394 (executing program) 2021/10/18 14:13:27 fetching corpus: 7995, signal 252014/332894 (executing program) 2021/10/18 14:13:27 fetching corpus: 8045, signal 252390/333412 (executing program) 2021/10/18 14:13:27 fetching corpus: 8094, signal 252815/333881 (executing program) 2021/10/18 14:13:27 fetching corpus: 8144, signal 253198/334374 (executing program) 2021/10/18 14:13:27 fetching corpus: 8194, signal 253789/334895 (executing program) 2021/10/18 14:13:28 fetching corpus: 8244, signal 254228/335394 (executing program) 2021/10/18 14:13:28 fetching corpus: 8294, signal 254637/335900 (executing program) 2021/10/18 14:13:28 fetching corpus: 8344, signal 255305/336410 (executing program) 2021/10/18 14:13:28 fetching corpus: 8394, signal 255930/336525 (executing program) 2021/10/18 14:13:28 fetching corpus: 8444, signal 256285/336525 (executing program) 2021/10/18 14:13:29 fetching corpus: 8494, signal 256632/336525 (executing program) 2021/10/18 14:13:29 fetching corpus: 8544, signal 257130/336526 (executing program) 2021/10/18 14:13:29 fetching corpus: 8594, signal 257524/336526 (executing program) 2021/10/18 14:13:29 fetching corpus: 8644, signal 257886/336526 (executing program) 2021/10/18 14:13:30 fetching corpus: 8694, signal 258265/336527 (executing program) 2021/10/18 14:13:30 fetching corpus: 8744, signal 258594/336528 (executing program) 2021/10/18 14:13:30 fetching corpus: 8793, signal 258954/336528 (executing program) 2021/10/18 14:13:30 fetching corpus: 8843, signal 259387/336528 (executing program) 2021/10/18 14:13:30 fetching corpus: 8893, signal 259681/336528 (executing program) 2021/10/18 14:13:31 fetching corpus: 8942, signal 260126/336528 (executing program) 2021/10/18 14:13:31 fetching corpus: 8992, signal 260462/336528 (executing program) 2021/10/18 14:13:31 fetching corpus: 9042, signal 260792/336528 (executing program) 2021/10/18 14:13:31 fetching corpus: 9092, signal 261380/336530 (executing program) 2021/10/18 14:13:32 fetching corpus: 9142, signal 261878/336530 (executing program) 2021/10/18 14:13:32 fetching corpus: 9192, signal 262230/336530 (executing program) 2021/10/18 14:13:32 fetching corpus: 9242, signal 262585/336530 (executing program) 2021/10/18 14:13:32 fetching corpus: 9292, signal 262925/336532 (executing program) 2021/10/18 14:13:33 fetching corpus: 9342, signal 263222/336534 (executing program) 2021/10/18 14:13:33 fetching corpus: 9392, signal 263569/336534 (executing program) 2021/10/18 14:13:33 fetching corpus: 9442, signal 263929/336534 (executing program) 2021/10/18 14:13:33 fetching corpus: 9492, signal 264272/336534 (executing program) 2021/10/18 14:13:34 fetching corpus: 9542, signal 264641/336534 (executing program) 2021/10/18 14:13:34 fetching corpus: 9592, signal 265047/336534 (executing program) 2021/10/18 14:13:34 fetching corpus: 9642, signal 265396/336541 (executing program) 2021/10/18 14:13:34 fetching corpus: 9692, signal 265841/336541 (executing program) 2021/10/18 14:13:34 fetching corpus: 9742, signal 266180/336541 (executing program) 2021/10/18 14:13:35 fetching corpus: 9791, signal 266551/336541 (executing program) 2021/10/18 14:13:35 fetching corpus: 9841, signal 267005/336541 (executing program) 2021/10/18 14:13:35 fetching corpus: 9891, signal 267662/336541 (executing program) 2021/10/18 14:13:36 fetching corpus: 9940, signal 268027/336541 (executing program) 2021/10/18 14:13:36 fetching corpus: 9990, signal 268385/336541 (executing program) 2021/10/18 14:13:36 fetching corpus: 10040, signal 268760/336541 (executing program) 2021/10/18 14:13:37 fetching corpus: 10090, signal 269083/336542 (executing program) 2021/10/18 14:13:37 fetching corpus: 10138, signal 269508/336542 (executing program) 2021/10/18 14:13:37 fetching corpus: 10188, signal 269894/336542 (executing program) 2021/10/18 14:13:37 fetching corpus: 10238, signal 270292/336542 (executing program) 2021/10/18 14:13:38 fetching corpus: 10288, signal 271054/336542 (executing program) 2021/10/18 14:13:38 fetching corpus: 10338, signal 271456/336576 (executing program) 2021/10/18 14:13:38 fetching corpus: 10388, signal 271838/336587 (executing program) 2021/10/18 14:13:38 fetching corpus: 10438, signal 272191/336587 (executing program) 2021/10/18 14:13:39 fetching corpus: 10488, signal 272545/336587 (executing program) 2021/10/18 14:13:39 fetching corpus: 10538, signal 273157/336587 (executing program) 2021/10/18 14:13:39 fetching corpus: 10588, signal 273402/336588 (executing program) 2021/10/18 14:13:39 fetching corpus: 10638, signal 273700/336588 (executing program) 2021/10/18 14:13:39 fetching corpus: 10688, signal 273977/336588 (executing program) 2021/10/18 14:13:40 fetching corpus: 10738, signal 274358/336589 (executing program) 2021/10/18 14:13:40 fetching corpus: 10788, signal 274697/336589 (executing program) 2021/10/18 14:13:40 fetching corpus: 10838, signal 275020/336594 (executing program) 2021/10/18 14:13:40 fetching corpus: 10887, signal 275294/336599 (executing program) 2021/10/18 14:13:40 fetching corpus: 10937, signal 275601/336599 (executing program) 2021/10/18 14:13:41 fetching corpus: 10986, signal 275978/336599 (executing program) 2021/10/18 14:13:41 fetching corpus: 11036, signal 276426/336599 (executing program) 2021/10/18 14:13:41 fetching corpus: 11086, signal 276873/336599 (executing program) 2021/10/18 14:13:41 fetching corpus: 11136, signal 277156/336609 (executing program) 2021/10/18 14:13:42 fetching corpus: 11186, signal 277499/336609 (executing program) 2021/10/18 14:13:42 fetching corpus: 11236, signal 277835/336609 (executing program) 2021/10/18 14:13:42 fetching corpus: 11286, signal 278128/336609 (executing program) 2021/10/18 14:13:42 fetching corpus: 11336, signal 278446/336609 (executing program) 2021/10/18 14:13:42 fetching corpus: 11386, signal 278760/336609 (executing program) 2021/10/18 14:13:43 fetching corpus: 11436, signal 279097/336609 (executing program) 2021/10/18 14:13:43 fetching corpus: 11486, signal 279375/336609 (executing program) 2021/10/18 14:13:43 fetching corpus: 11535, signal 279678/336616 (executing program) 2021/10/18 14:13:43 fetching corpus: 11585, signal 279971/336616 (executing program) 2021/10/18 14:13:44 fetching corpus: 11635, signal 280264/336616 (executing program) 2021/10/18 14:13:44 fetching corpus: 11685, signal 280584/336617 (executing program) 2021/10/18 14:13:44 fetching corpus: 11735, signal 280862/336617 (executing program) 2021/10/18 14:13:44 fetching corpus: 11785, signal 281125/336617 (executing program) 2021/10/18 14:13:44 fetching corpus: 11835, signal 281538/336617 (executing program) 2021/10/18 14:13:45 fetching corpus: 11885, signal 281991/336620 (executing program) 2021/10/18 14:13:45 fetching corpus: 11934, signal 282258/336639 (executing program) 2021/10/18 14:13:45 fetching corpus: 11984, signal 282623/336639 (executing program) 2021/10/18 14:13:45 fetching corpus: 12033, signal 282991/336639 (executing program) 2021/10/18 14:13:46 fetching corpus: 12082, signal 283272/336639 (executing program) 2021/10/18 14:13:46 fetching corpus: 12132, signal 283525/336639 (executing program) 2021/10/18 14:13:46 fetching corpus: 12182, signal 283816/336639 (executing program) 2021/10/18 14:13:46 fetching corpus: 12232, signal 284150/336639 (executing program) 2021/10/18 14:13:46 fetching corpus: 12282, signal 284313/336639 (executing program) 2021/10/18 14:13:47 fetching corpus: 12332, signal 284661/336639 (executing program) 2021/10/18 14:13:47 fetching corpus: 12381, signal 284962/336647 (executing program) 2021/10/18 14:13:47 fetching corpus: 12431, signal 285258/336686 (executing program) 2021/10/18 14:13:47 fetching corpus: 12480, signal 285500/336693 (executing program) 2021/10/18 14:13:48 fetching corpus: 12530, signal 285914/336693 (executing program) 2021/10/18 14:13:48 fetching corpus: 12580, signal 286222/336693 (executing program) 2021/10/18 14:13:48 fetching corpus: 12630, signal 286423/336696 (executing program) 2021/10/18 14:13:48 fetching corpus: 12680, signal 286768/336696 (executing program) 2021/10/18 14:13:48 fetching corpus: 12730, signal 287023/336698 (executing program) 2021/10/18 14:13:48 fetching corpus: 12778, signal 287331/336698 (executing program) 2021/10/18 14:13:49 fetching corpus: 12828, signal 287538/336698 (executing program) 2021/10/18 14:13:49 fetching corpus: 12878, signal 287808/336698 (executing program) 2021/10/18 14:13:49 fetching corpus: 12928, signal 288091/336700 (executing program) 2021/10/18 14:13:49 fetching corpus: 12978, signal 288479/336700 (executing program) 2021/10/18 14:13:50 fetching corpus: 13028, signal 288765/336700 (executing program) 2021/10/18 14:13:50 fetching corpus: 13078, signal 289007/336701 (executing program) 2021/10/18 14:13:50 fetching corpus: 13126, signal 289251/336708 (executing program) 2021/10/18 14:13:50 fetching corpus: 13176, signal 289550/336708 (executing program) 2021/10/18 14:13:51 fetching corpus: 13226, signal 289882/336708 (executing program) 2021/10/18 14:13:51 fetching corpus: 13275, signal 290208/336713 (executing program) 2021/10/18 14:13:51 fetching corpus: 13325, signal 290487/336713 (executing program) 2021/10/18 14:13:51 fetching corpus: 13375, signal 290724/336722 (executing program) 2021/10/18 14:13:52 fetching corpus: 13425, signal 291012/336722 (executing program) 2021/10/18 14:13:52 fetching corpus: 13475, signal 291345/336722 (executing program) 2021/10/18 14:13:52 fetching corpus: 13525, signal 291574/336729 (executing program) 2021/10/18 14:13:52 fetching corpus: 13575, signal 291868/336729 (executing program) [ 132.563603][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.563667][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:13:52 fetching corpus: 13625, signal 292179/336729 (executing program) 2021/10/18 14:13:53 fetching corpus: 13675, signal 292530/336729 (executing program) 2021/10/18 14:13:53 fetching corpus: 13725, signal 292773/336729 (executing program) 2021/10/18 14:13:53 fetching corpus: 13775, signal 293009/336729 (executing program) 2021/10/18 14:13:53 fetching corpus: 13825, signal 293301/336729 (executing program) 2021/10/18 14:13:54 fetching corpus: 13875, signal 293564/336729 (executing program) 2021/10/18 14:13:54 fetching corpus: 13925, signal 293783/336731 (executing program) 2021/10/18 14:13:54 fetching corpus: 13975, signal 294036/336741 (executing program) 2021/10/18 14:13:54 fetching corpus: 14024, signal 294275/336741 (executing program) 2021/10/18 14:13:54 fetching corpus: 14074, signal 294569/336741 (executing program) 2021/10/18 14:13:54 fetching corpus: 14124, signal 294816/336741 (executing program) 2021/10/18 14:13:55 fetching corpus: 14174, signal 295086/336741 (executing program) 2021/10/18 14:13:55 fetching corpus: 14224, signal 295357/336763 (executing program) 2021/10/18 14:13:55 fetching corpus: 14274, signal 295607/336763 (executing program) 2021/10/18 14:13:55 fetching corpus: 14323, signal 295866/336763 (executing program) 2021/10/18 14:13:56 fetching corpus: 14372, signal 296093/336763 (executing program) 2021/10/18 14:13:56 fetching corpus: 14422, signal 296442/336771 (executing program) 2021/10/18 14:13:56 fetching corpus: 14472, signal 296727/336771 (executing program) 2021/10/18 14:13:56 fetching corpus: 14522, signal 297068/336771 (executing program) 2021/10/18 14:13:56 fetching corpus: 14572, signal 297513/336771 (executing program) 2021/10/18 14:13:57 fetching corpus: 14622, signal 297738/336771 (executing program) 2021/10/18 14:13:57 fetching corpus: 14672, signal 297993/336771 (executing program) 2021/10/18 14:13:57 fetching corpus: 14722, signal 298357/336781 (executing program) 2021/10/18 14:13:57 fetching corpus: 14772, signal 298649/336781 (executing program) 2021/10/18 14:13:57 fetching corpus: 14822, signal 298954/336781 (executing program) 2021/10/18 14:13:58 fetching corpus: 14872, signal 299286/336781 (executing program) 2021/10/18 14:13:58 fetching corpus: 14922, signal 299521/336781 (executing program) 2021/10/18 14:13:58 fetching corpus: 14972, signal 299700/336781 (executing program) 2021/10/18 14:13:58 fetching corpus: 15022, signal 299999/336781 (executing program) 2021/10/18 14:13:59 fetching corpus: 15072, signal 300307/336781 (executing program) 2021/10/18 14:13:59 fetching corpus: 15122, signal 300561/336781 (executing program) 2021/10/18 14:13:59 fetching corpus: 15172, signal 300934/336781 (executing program) 2021/10/18 14:13:59 fetching corpus: 15222, signal 301180/336791 (executing program) 2021/10/18 14:13:59 fetching corpus: 15272, signal 301471/336791 (executing program) 2021/10/18 14:14:00 fetching corpus: 15322, signal 301721/336791 (executing program) 2021/10/18 14:14:00 fetching corpus: 15370, signal 301914/336791 (executing program) 2021/10/18 14:14:00 fetching corpus: 15420, signal 302139/336791 (executing program) 2021/10/18 14:14:00 fetching corpus: 15470, signal 302372/336791 (executing program) 2021/10/18 14:14:00 fetching corpus: 15518, signal 302585/336796 (executing program) 2021/10/18 14:14:01 fetching corpus: 15568, signal 302857/336796 (executing program) 2021/10/18 14:14:01 fetching corpus: 15617, signal 303168/336803 (executing program) 2021/10/18 14:14:01 fetching corpus: 15667, signal 303367/336803 (executing program) 2021/10/18 14:14:01 fetching corpus: 15717, signal 303634/336803 (executing program) 2021/10/18 14:14:02 fetching corpus: 15767, signal 303898/336803 (executing program) 2021/10/18 14:14:02 fetching corpus: 15817, signal 304230/336807 (executing program) 2021/10/18 14:14:02 fetching corpus: 15867, signal 304496/336807 (executing program) 2021/10/18 14:14:03 fetching corpus: 15917, signal 304777/336807 (executing program) 2021/10/18 14:14:03 fetching corpus: 15967, signal 305080/336807 (executing program) 2021/10/18 14:14:03 fetching corpus: 16017, signal 305401/336825 (executing program) 2021/10/18 14:14:03 fetching corpus: 16067, signal 305600/336825 (executing program) 2021/10/18 14:14:04 fetching corpus: 16117, signal 305884/336825 (executing program) 2021/10/18 14:14:04 fetching corpus: 16166, signal 306145/336825 (executing program) 2021/10/18 14:14:04 fetching corpus: 16214, signal 306413/336836 (executing program) 2021/10/18 14:14:04 fetching corpus: 16264, signal 306654/336840 (executing program) 2021/10/18 14:14:05 fetching corpus: 16313, signal 306853/336842 (executing program) 2021/10/18 14:14:05 fetching corpus: 16362, signal 307048/336842 (executing program) 2021/10/18 14:14:05 fetching corpus: 16411, signal 307378/336842 (executing program) 2021/10/18 14:14:05 fetching corpus: 16461, signal 307566/336842 (executing program) 2021/10/18 14:14:06 fetching corpus: 16511, signal 307798/336856 (executing program) 2021/10/18 14:14:06 fetching corpus: 16561, signal 308086/336856 (executing program) 2021/10/18 14:14:06 fetching corpus: 16611, signal 308792/336856 (executing program) 2021/10/18 14:14:07 fetching corpus: 16661, signal 309052/336858 (executing program) 2021/10/18 14:14:07 fetching corpus: 16711, signal 309287/336858 (executing program) 2021/10/18 14:14:07 fetching corpus: 16761, signal 309460/336861 (executing program) 2021/10/18 14:14:07 fetching corpus: 16810, signal 309705/336861 (executing program) 2021/10/18 14:14:07 fetching corpus: 16860, signal 309955/336861 (executing program) 2021/10/18 14:14:08 fetching corpus: 16910, signal 310168/336862 (executing program) 2021/10/18 14:14:08 fetching corpus: 16960, signal 310425/336862 (executing program) 2021/10/18 14:14:08 fetching corpus: 17010, signal 310645/336862 (executing program) 2021/10/18 14:14:08 fetching corpus: 17060, signal 310897/336866 (executing program) 2021/10/18 14:14:08 fetching corpus: 17110, signal 311152/336884 (executing program) 2021/10/18 14:14:09 fetching corpus: 17160, signal 311546/336898 (executing program) 2021/10/18 14:14:09 fetching corpus: 17210, signal 311766/336900 (executing program) 2021/10/18 14:14:09 fetching corpus: 17260, signal 312036/336900 (executing program) 2021/10/18 14:14:09 fetching corpus: 17310, signal 312235/336900 (executing program) 2021/10/18 14:14:10 fetching corpus: 17359, signal 312453/336900 (executing program) 2021/10/18 14:14:10 fetching corpus: 17409, signal 312637/336900 (executing program) 2021/10/18 14:14:10 fetching corpus: 17459, signal 312929/336902 (executing program) 2021/10/18 14:14:10 fetching corpus: 17509, signal 313120/336904 (executing program) 2021/10/18 14:14:11 fetching corpus: 17559, signal 313468/336904 (executing program) 2021/10/18 14:14:11 fetching corpus: 17609, signal 313688/336911 (executing program) 2021/10/18 14:14:11 fetching corpus: 17659, signal 313966/336911 (executing program) 2021/10/18 14:14:12 fetching corpus: 17707, signal 314262/336911 (executing program) 2021/10/18 14:14:12 fetching corpus: 17757, signal 314569/336912 (executing program) 2021/10/18 14:14:12 fetching corpus: 17807, signal 314804/336931 (executing program) 2021/10/18 14:14:12 fetching corpus: 17857, signal 315039/336931 (executing program) 2021/10/18 14:14:13 fetching corpus: 17907, signal 315314/336931 (executing program) 2021/10/18 14:14:13 fetching corpus: 17957, signal 315468/336931 (executing program) 2021/10/18 14:14:13 fetching corpus: 18007, signal 315732/336943 (executing program) 2021/10/18 14:14:13 fetching corpus: 18057, signal 315920/336943 (executing program) 2021/10/18 14:14:14 fetching corpus: 18107, signal 316219/336943 (executing program) 2021/10/18 14:14:14 fetching corpus: 18157, signal 316433/336943 (executing program) 2021/10/18 14:14:14 fetching corpus: 18207, signal 316822/336943 (executing program) 2021/10/18 14:14:14 fetching corpus: 18257, signal 317041/336943 (executing program) 2021/10/18 14:14:15 fetching corpus: 18307, signal 317307/336966 (executing program) 2021/10/18 14:14:15 fetching corpus: 18357, signal 317530/336990 (executing program) 2021/10/18 14:14:15 fetching corpus: 18407, signal 317739/336990 (executing program) 2021/10/18 14:14:16 fetching corpus: 18457, signal 317940/336998 (executing program) 2021/10/18 14:14:16 fetching corpus: 18507, signal 318154/336998 (executing program) 2021/10/18 14:14:16 fetching corpus: 18557, signal 318339/336998 (executing program) 2021/10/18 14:14:17 fetching corpus: 18607, signal 318672/337004 (executing program) 2021/10/18 14:14:17 fetching corpus: 18657, signal 318881/337004 (executing program) 2021/10/18 14:14:17 fetching corpus: 18707, signal 319072/337006 (executing program) 2021/10/18 14:14:17 fetching corpus: 18756, signal 319238/337006 (executing program) 2021/10/18 14:14:18 fetching corpus: 18806, signal 319475/337006 (executing program) 2021/10/18 14:14:18 fetching corpus: 18856, signal 319700/337006 (executing program) 2021/10/18 14:14:18 fetching corpus: 18905, signal 319860/337012 (executing program) 2021/10/18 14:14:18 fetching corpus: 18955, signal 320139/337012 (executing program) 2021/10/18 14:14:18 fetching corpus: 19004, signal 320396/337022 (executing program) 2021/10/18 14:14:19 fetching corpus: 19054, signal 320583/337022 (executing program) 2021/10/18 14:14:19 fetching corpus: 19104, signal 320750/337022 (executing program) 2021/10/18 14:14:19 fetching corpus: 19154, signal 320893/337027 (executing program) 2021/10/18 14:14:19 fetching corpus: 19204, signal 321127/337027 (executing program) 2021/10/18 14:14:20 fetching corpus: 19253, signal 321321/337027 (executing program) 2021/10/18 14:14:20 fetching corpus: 19303, signal 321503/337028 (executing program) 2021/10/18 14:14:20 fetching corpus: 19353, signal 321707/337028 (executing program) 2021/10/18 14:14:20 fetching corpus: 19402, signal 321885/337028 (executing program) 2021/10/18 14:14:21 fetching corpus: 19451, signal 322151/337028 (executing program) 2021/10/18 14:14:21 fetching corpus: 19501, signal 322411/337034 (executing program) 2021/10/18 14:14:21 fetching corpus: 19551, signal 322621/337036 (executing program) 2021/10/18 14:14:22 fetching corpus: 19601, signal 322785/337041 (executing program) 2021/10/18 14:14:22 fetching corpus: 19651, signal 323014/337044 (executing program) 2021/10/18 14:14:22 fetching corpus: 19700, signal 323178/337044 (executing program) 2021/10/18 14:14:22 fetching corpus: 19750, signal 323370/337044 (executing program) 2021/10/18 14:14:23 fetching corpus: 19800, signal 323505/337045 (executing program) 2021/10/18 14:14:23 fetching corpus: 19850, signal 323663/337049 (executing program) 2021/10/18 14:14:23 fetching corpus: 19900, signal 323854/337049 (executing program) 2021/10/18 14:14:24 fetching corpus: 19950, signal 324144/337049 (executing program) 2021/10/18 14:14:24 fetching corpus: 20000, signal 324434/337057 (executing program) 2021/10/18 14:14:24 fetching corpus: 20050, signal 324643/337091 (executing program) 2021/10/18 14:14:24 fetching corpus: 20100, signal 324866/337091 (executing program) 2021/10/18 14:14:25 fetching corpus: 20150, signal 325053/337091 (executing program) 2021/10/18 14:14:25 fetching corpus: 20200, signal 325332/337091 (executing program) 2021/10/18 14:14:25 fetching corpus: 20250, signal 325518/337095 (executing program) 2021/10/18 14:14:25 fetching corpus: 20300, signal 325771/337095 (executing program) 2021/10/18 14:14:25 fetching corpus: 20350, signal 325959/337095 (executing program) 2021/10/18 14:14:25 fetching corpus: 20400, signal 326120/337095 (executing program) 2021/10/18 14:14:26 fetching corpus: 20450, signal 326308/337095 (executing program) 2021/10/18 14:14:26 fetching corpus: 20500, signal 326492/337095 (executing program) 2021/10/18 14:14:26 fetching corpus: 20550, signal 326708/337095 (executing program) 2021/10/18 14:14:26 fetching corpus: 20600, signal 326864/337095 (executing program) 2021/10/18 14:14:26 fetching corpus: 20650, signal 327070/337098 (executing program) 2021/10/18 14:14:27 fetching corpus: 20700, signal 327238/337098 (executing program) 2021/10/18 14:14:27 fetching corpus: 20750, signal 327462/337102 (executing program) 2021/10/18 14:14:27 fetching corpus: 20800, signal 327672/337102 (executing program) 2021/10/18 14:14:27 fetching corpus: 20849, signal 327847/337102 (executing program) 2021/10/18 14:14:27 fetching corpus: 20899, signal 328045/337102 (executing program) 2021/10/18 14:14:28 fetching corpus: 20949, signal 328259/337102 (executing program) 2021/10/18 14:14:28 fetching corpus: 20997, signal 328539/337102 (executing program) 2021/10/18 14:14:28 fetching corpus: 21047, signal 328748/337113 (executing program) 2021/10/18 14:14:28 fetching corpus: 21097, signal 328893/337113 (executing program) 2021/10/18 14:14:29 fetching corpus: 21147, signal 329044/337124 (executing program) 2021/10/18 14:14:29 fetching corpus: 21197, signal 329228/337124 (executing program) 2021/10/18 14:14:29 fetching corpus: 21246, signal 329402/337124 (executing program) 2021/10/18 14:14:29 fetching corpus: 21296, signal 329596/337124 (executing program) 2021/10/18 14:14:30 fetching corpus: 21346, signal 329781/337124 (executing program) 2021/10/18 14:14:30 fetching corpus: 21396, signal 329988/337148 (executing program) 2021/10/18 14:14:30 fetching corpus: 21446, signal 330162/337148 (executing program) 2021/10/18 14:14:30 fetching corpus: 21496, signal 330360/337148 (executing program) 2021/10/18 14:14:31 fetching corpus: 21546, signal 330519/337158 (executing program) 2021/10/18 14:14:31 fetching corpus: 21595, signal 330670/337158 (executing program) 2021/10/18 14:14:31 fetching corpus: 21645, signal 330907/337160 (executing program) 2021/10/18 14:14:31 fetching corpus: 21695, signal 331067/337160 (executing program) 2021/10/18 14:14:31 fetching corpus: 21745, signal 331242/337160 (executing program) 2021/10/18 14:14:32 fetching corpus: 21795, signal 331417/337160 (executing program) 2021/10/18 14:14:32 fetching corpus: 21845, signal 331579/337161 (executing program) 2021/10/18 14:14:32 fetching corpus: 21895, signal 331790/337188 (executing program) 2021/10/18 14:14:32 fetching corpus: 21945, signal 332035/337188 (executing program) 2021/10/18 14:14:33 fetching corpus: 21994, signal 332207/337194 (executing program) 2021/10/18 14:14:33 fetching corpus: 22043, signal 332418/337200 (executing program) 2021/10/18 14:14:33 fetching corpus: 22092, signal 332577/337200 (executing program) 2021/10/18 14:14:33 fetching corpus: 22142, signal 332792/337200 (executing program) 2021/10/18 14:14:34 fetching corpus: 22192, signal 332941/337208 (executing program) 2021/10/18 14:14:34 fetching corpus: 22242, signal 333101/337208 (executing program) 2021/10/18 14:14:34 fetching corpus: 22292, signal 333271/337216 (executing program) 2021/10/18 14:14:34 fetching corpus: 22342, signal 333441/337216 (executing program) 2021/10/18 14:14:35 fetching corpus: 22392, signal 333622/337237 (executing program) 2021/10/18 14:14:35 fetching corpus: 22442, signal 333766/337237 (executing program) 2021/10/18 14:14:35 fetching corpus: 22492, signal 333899/337237 (executing program) 2021/10/18 14:14:35 fetching corpus: 22521, signal 334027/337239 (executing program) 2021/10/18 14:14:35 fetching corpus: 22521, signal 334033/337239 (executing program) 2021/10/18 14:14:35 fetching corpus: 22521, signal 334033/337239 (executing program) 2021/10/18 14:14:37 starting 6 fuzzer processes 14:14:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000400)={0x0, 0x1000000, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 14:14:37 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 14:14:37 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x8, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000240)="043c4f158fa17905ff8c9d12b0cfa2b0b4f11688a39296edb2b7cbfa76b5d510d1cfb2f86fd3143c1331fb860120ba85d8a3ca7982ced548310fae205cd404e4a6c75c0d4ccc0c31a3acb6ab38f1c2f8f7058ff5bd37a8db96a42c9a68e7b01a479fc3f0bb783e3f4eab1e13fc35cc1bf94367a7dfbe314f4e0d05461754defd3139978bc08a938ca26e8e553bd5352b1aa7ef4081f4353ab4db1cf6b7bfde28323d6157452415738d4eeb99bb", &(0x7f0000000300)=""/45, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x8, 0x8004}, 0x40) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xbc8051858e1806e9, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:14:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x221, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:14:38 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 14:14:39 executing program 5: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000003c0)) [ 178.774757][ T6537] chnl_net:caif_netlink_parms(): no params data found [ 179.025394][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.035576][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.050065][ T6537] device bridge_slave_0 entered promiscuous mode [ 179.097789][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.111439][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.119763][ T6537] device bridge_slave_1 entered promiscuous mode [ 179.184666][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 179.205583][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.286117][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.353541][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.361094][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.369339][ T6539] device bridge_slave_0 entered promiscuous mode [ 179.400617][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.407696][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.416222][ T6539] device bridge_slave_1 entered promiscuous mode [ 179.466737][ T6537] team0: Port device team_slave_0 added [ 179.511917][ T6537] team0: Port device team_slave_1 added [ 179.522663][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.563756][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.586123][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.595044][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.622512][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.637009][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.644371][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.671225][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.719036][ T6539] team0: Port device team_slave_0 added [ 179.742182][ T6539] team0: Port device team_slave_1 added [ 179.765396][ T6537] device hsr_slave_0 entered promiscuous mode [ 179.773954][ T6537] device hsr_slave_1 entered promiscuous mode [ 179.821414][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.828482][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.856705][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.872631][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.879593][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.906262][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.027542][ T6539] device hsr_slave_0 entered promiscuous mode [ 180.037748][ T6539] device hsr_slave_1 entered promiscuous mode [ 180.044629][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.052669][ T6539] Cannot create hsr debugfs directory [ 180.068722][ T6543] chnl_net:caif_netlink_parms(): no params data found [ 180.370195][ T6543] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.377605][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.385963][ T6543] device bridge_slave_0 entered promiscuous mode [ 180.393639][ T7361] Bluetooth: hci0: command 0x0409 tx timeout [ 180.407680][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.417304][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.425599][ T6543] device bridge_slave_1 entered promiscuous mode [ 180.486983][ T6537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.499724][ T6543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.526209][ T6537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.536876][ T6537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.549768][ T6543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.592415][ T6537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.622792][ T6543] team0: Port device team_slave_0 added [ 180.636463][ T6543] team0: Port device team_slave_1 added [ 180.640854][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 180.653232][ T6539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.665966][ T6539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.708558][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.716905][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.745930][ T6543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.757864][ T6539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.785275][ T6543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.793195][ T6543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.821495][ T6543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.833668][ T6539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.951973][ T6543] device hsr_slave_0 entered promiscuous mode [ 180.959670][ T6543] device hsr_slave_1 entered promiscuous mode [ 180.967790][ T6543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.977464][ T6543] Cannot create hsr debugfs directory [ 181.069545][ T6814] chnl_net:caif_netlink_parms(): no params data found [ 181.190971][ T20] Bluetooth: hci3: command 0x0409 tx timeout [ 181.242170][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.249341][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.258635][ T6814] device bridge_slave_0 entered promiscuous mode [ 181.283342][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.291174][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.298848][ T6814] device bridge_slave_1 entered promiscuous mode [ 181.333540][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.369438][ T6814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.381476][ T6543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.400211][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.413630][ T6814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.423318][ T6543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.436609][ T6543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.447126][ T6543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.495103][ T6814] team0: Port device team_slave_0 added [ 181.504782][ T6814] team0: Port device team_slave_1 added [ 181.517583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.528043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.541459][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.549613][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.563230][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.599883][ T6537] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.610040][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.618139][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.645874][ T6814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.663782][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.671841][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.698722][ T6814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.737134][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.746607][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.759447][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.766901][ T7361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.778098][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.787280][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.798891][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.806011][ T7361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.813948][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.823462][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.838598][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.845813][ T7361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.853510][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.886469][ T6814] device hsr_slave_0 entered promiscuous mode [ 181.893903][ T6814] device hsr_slave_1 entered promiscuous mode [ 181.901802][ T6814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.909371][ T6814] Cannot create hsr debugfs directory [ 181.922818][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.932923][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.942024][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.952296][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.961490][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.968571][ T7402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.014060][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.023348][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.033316][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.043966][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.053073][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.095564][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.104552][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.114927][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.134786][ T6539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.147421][ T6539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.181509][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.189851][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.200128][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.209549][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.218457][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.227513][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.230935][ T7478] Bluetooth: hci5: command 0x0409 tx timeout [ 182.276822][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.285817][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.295067][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.304613][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.318197][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.329285][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.341579][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.378790][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.387198][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.397079][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.406747][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.427321][ T6537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.450368][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.474801][ T7402] Bluetooth: hci0: command 0x041b tx timeout [ 182.480935][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.489622][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.504160][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.513129][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.541836][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.554015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.562548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.586590][ T6539] device veth0_vlan entered promiscuous mode [ 182.607159][ T6543] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.616931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.625513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.635110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.644312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.673331][ T6539] device veth1_vlan entered promiscuous mode [ 182.680111][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.688819][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.698305][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.707280][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.714424][ T7361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.722232][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.730936][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.739708][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.746804][ T7361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.755280][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.764448][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.780650][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.788624][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.798779][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.812476][ T6814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.819357][ T7361] Bluetooth: hci1: command 0x041b tx timeout [ 182.838132][ T6814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.848343][ T6814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.871321][ T6814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.902470][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.911351][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.922666][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.931441][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.940176][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.949777][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.958643][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.967619][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.976510][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.988997][ T6537] device veth0_vlan entered promiscuous mode [ 183.005885][ T6543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.017320][ T6543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.027249][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.035674][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.043628][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.052232][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.061394][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.077387][ T6539] device veth0_macvtap entered promiscuous mode [ 183.094844][ T6537] device veth1_vlan entered promiscuous mode [ 183.105067][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.114663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.129115][ T6539] device veth1_macvtap entered promiscuous mode [ 183.143177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.151606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.189002][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.197069][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.212794][ T6543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.243855][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.253140][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.264689][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.273938][ T7798] Bluetooth: hci3: command 0x041b tx timeout [ 183.281504][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.289788][ T6537] device veth0_macvtap entered promiscuous mode [ 183.308427][ T6537] device veth1_macvtap entered promiscuous mode [ 183.316528][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.325412][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.334079][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.343824][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.353645][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.362928][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.376523][ T6539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.385966][ T6539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.395011][ T6539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.404363][ T6539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.433828][ T6814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.472632][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.482106][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.505805][ T6814] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.515033][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.527420][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.540030][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.558136][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.573376][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.581923][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.594864][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.633266][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.668698][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.683298][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.691859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.701929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.710249][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.717380][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.725479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.733844][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.742455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.751474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.760790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.768752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.778929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.805950][ T6537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.815243][ T6537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.824575][ T6537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.834328][ T6537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.851987][ T6543] device veth0_vlan entered promiscuous mode [ 183.859699][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.869784][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.880586][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.887701][ T7402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.921162][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.929766][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.948357][ T6543] device veth1_vlan entered promiscuous mode [ 183.960065][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.971620][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.980433][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.984000][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.014061][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.027010][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.035624][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.085525][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.094798][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.103999][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.114260][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.122973][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.132198][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.169039][ T6814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.218951][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.239123][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.244688][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.249491][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.267340][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.279313][ T6543] device veth0_macvtap entered promiscuous mode [ 184.312997][ T6543] device veth1_macvtap entered promiscuous mode [ 184.321499][ T7886] Bluetooth: hci5: command 0x041b tx timeout [ 184.345072][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.345137][ T7382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.362571][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.372613][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.380115][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.391445][ T7382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.408784][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.453820][ T6814] 8021q: adding VLAN 0 to HW filter on device batadv0 14:14:44 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 184.498555][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.517872][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.530656][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 184.561407][ T1054] Bluetooth: hci0: command 0x040f tx timeout [ 184.570184][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.594306][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.613114][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.625883][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.635841][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.647671][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 14:14:44 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 184.664162][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.678064][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.694236][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.707444][ T6543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 184.724846][ T6543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.740190][ T6543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.760968][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.769747][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.795903][ T6543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 14:14:45 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) [ 184.820004][ T6543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.852154][ T6543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.878291][ T6543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.890792][ T1054] Bluetooth: hci1: command 0x040f tx timeout 14:14:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x7, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 14:14:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b", 0xf, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100007000) [ 185.070736][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.079454][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.137500][ T6814] device veth0_vlan entered promiscuous mode [ 185.148726][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.173048][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.187501][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.196730][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.222175][ T6814] device veth1_vlan entered promiscuous mode [ 185.242124][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.258665][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.268514][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.285763][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.354214][ T25] audit: type=1804 audit(1634566485.582:2): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/4/cgroup.controllers" dev="sda1" ino=13897 res=1 errno=0 [ 185.361185][ T7402] Bluetooth: hci3: command 0x040f tx timeout [ 185.395336][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.411036][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.452484][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.461470][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.470859][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.479578][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.503826][ T6814] device veth0_macvtap entered promiscuous mode [ 185.546971][ T6814] device veth1_macvtap entered promiscuous mode [ 185.620669][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.642074][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.660840][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.685264][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.696181][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 185.707205][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:14:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x221, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 185.720248][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_0 14:14:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b", 0xf, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100007000) [ 185.771474][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.793380][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.830038][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.846417][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.863787][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 14:14:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x221, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 185.894840][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.909157][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.927224][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.965520][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 185.999954][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.020159][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.049934][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.067948][ T1054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.114885][ T6814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.138471][ T6814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.155257][ T6814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.164385][ T25] audit: type=1804 audit(1634566486.392:3): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/5/cgroup.controllers" dev="sda1" ino=13895 res=1 errno=0 [ 186.204287][ T6814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.318665][ T7382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.340760][ T7382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.363926][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.373757][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.380502][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.388950][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.405125][ T1054] Bluetooth: hci5: command 0x040f tx timeout [ 186.631267][ T1054] Bluetooth: hci0: command 0x0419 tx timeout [ 186.961386][ T1054] Bluetooth: hci1: command 0x0419 tx timeout [ 187.512252][ T7975] Bluetooth: hci3: command 0x0419 tx timeout [ 188.470811][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 193.056422][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 193.135815][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.144273][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.155873][ T8007] device bridge_slave_0 entered promiscuous mode [ 193.164829][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.173259][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.181995][ T8007] device bridge_slave_1 entered promiscuous mode [ 193.217603][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.229498][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.268575][ T8007] team0: Port device team_slave_0 added [ 193.278083][ T8007] team0: Port device team_slave_1 added [ 193.306663][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.314633][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.341795][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.358070][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.365651][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.391986][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.435347][ T8007] device hsr_slave_0 entered promiscuous mode [ 193.442389][ T8007] device hsr_slave_1 entered promiscuous mode [ 193.449000][ T8007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.456995][ T8007] Cannot create hsr debugfs directory [ 193.588234][ T8007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.598995][ T8007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.608933][ T8007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.619561][ T8007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.644753][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.651981][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.659863][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.667111][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.721652][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.737447][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.745802][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.755969][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.766517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 193.780186][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.791918][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.801070][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.808112][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.823472][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.832089][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.839147][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.862295][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.871642][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.884846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.904765][ T8007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.916260][ T8007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.929068][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.937967][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.946903][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.968675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.979012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.993040][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.999350][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.000001][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.084941][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.093710][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.106774][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.116329][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.127676][ T8007] device veth0_vlan entered promiscuous mode [ 194.135586][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.144254][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.159674][ T8007] device veth1_vlan entered promiscuous mode [ 194.183969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.196162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.205498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.217928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.230463][ T8007] device veth0_macvtap entered promiscuous mode [ 194.241715][ T8007] device veth1_macvtap entered promiscuous mode [ 194.258933][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.269803][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.281746][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.292463][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.302685][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.314472][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.324978][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.336234][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.348409][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.357237][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.366037][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.375417][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.384896][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.398588][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.409755][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.419875][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.430465][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.440422][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.450942][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.460897][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.471734][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.485237][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.495635][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.504435][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.516006][ T8007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.526774][ T8007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.536803][ T8007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.546003][ T8007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.653880][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.667842][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.682852][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.690784][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.699165][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.714071][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.870711][ T7898] Bluetooth: hci4: command 0x0409 tx timeout [ 196.950629][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 199.030065][ T7975] Bluetooth: hci4: command 0x040f tx timeout [ 201.110108][ T7402] Bluetooth: hci4: command 0x0419 tx timeout [ 218.517120][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 218.604548][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.613136][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.622006][ T8389] device bridge_slave_0 entered promiscuous mode [ 218.631635][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.639088][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.647178][ T8389] device bridge_slave_1 entered promiscuous mode [ 218.676270][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.691563][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.721310][ T8389] team0: Port device team_slave_0 added [ 218.732050][ T8389] team0: Port device team_slave_1 added [ 218.758007][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.765826][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.792649][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.808400][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.815651][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.842309][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.883432][ T8389] device hsr_slave_0 entered promiscuous mode [ 218.890571][ T8389] device hsr_slave_1 entered promiscuous mode [ 218.897251][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.910020][ T8389] Cannot create hsr debugfs directory [ 219.044347][ T8389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.057057][ T8389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.067020][ T8389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.077374][ T8389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.101787][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.108883][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.116246][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.123380][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.177856][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.193242][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.202125][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.211557][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.222040][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 219.237674][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.254546][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.265465][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.272607][ T7402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.285432][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.296624][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.303728][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.326635][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.338024][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.353073][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.370724][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.383199][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.396245][ T8389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.415069][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.422781][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.437317][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.458904][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.485710][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.494330][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.506377][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.522585][ T8389] device veth0_vlan entered promiscuous mode [ 219.536677][ T8389] device veth1_vlan entered promiscuous mode [ 219.563911][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.573945][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.585813][ T8389] device veth0_macvtap entered promiscuous mode [ 219.598787][ T8389] device veth1_macvtap entered promiscuous mode [ 219.616689][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.627544][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.637541][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.648858][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.659352][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.670546][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.687326][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.698810][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.708941][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 219.719766][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.731445][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.741411][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.750059][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.757904][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.768214][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.781773][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.792512][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.802615][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.813293][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.823426][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.836586][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.846885][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.857567][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.867516][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 219.880225][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.893061][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.902510][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.912684][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.925592][ T8389] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.935518][ T8389] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.946255][ T8389] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.955270][ T8389] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.063607][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.074462][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.097401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.111793][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.120872][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.132185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.192007][ T8736] netlink: 41611 bytes leftover after parsing attributes in process `syz-executor.2'. 14:15:20 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 14:15:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x7, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 14:15:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}}, 0x0) 14:15:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x221, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:15:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b", 0xf, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100007000) 14:15:20 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 14:15:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0xc, 0x41, 'siw\x00'}, {0x14}}]}, 0x38}}, 0x0) [ 220.388593][ T7898] Bluetooth: hci2: command 0x0409 tx timeout 14:15:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}}, 0x0) 14:15:20 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 220.530640][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.543926][ T25] audit: type=1804 audit(1634566520.774:4): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/6/cgroup.controllers" dev="sda1" ino=13939 res=1 errno=0 14:15:20 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0xc, 0x41, 'siw\x00'}, {0x14}}]}, 0x38}}, 0x0) 14:15:20 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 14:15:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}}, 0x0) [ 220.737494][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:15:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0xc, 0x41, 'siw\x00'}, {0x14}}]}, 0x38}}, 0x0) [ 220.898665][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:15:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x7, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 14:15:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}}, 0x0) 14:15:21 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 14:15:21 executing program 2: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x4}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x10001) accept$inet(r1, &(0x7f00000013c0)={0x2, 0x0, @loopback}, &(0x7f0000001400)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x17) shutdown(r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 14:15:21 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0xc, 0x41, 'siw\x00'}, {0x14}}]}, 0x38}}, 0x0) 14:15:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="897b428e75eb"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="03042a015c0060004003002cfff57b", 0xf, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100007000) [ 221.297875][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 14:15:21 executing program 5: unshare(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 14:15:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x38}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 221.420944][ T25] audit: type=1804 audit(1634566521.654:5): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/7/cgroup.controllers" dev="sda1" ino=13938 res=1 errno=0 14:15:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000009c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}]}]}]}]}, 0x94}}, 0x0) 14:15:21 executing program 5: unshare(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 14:15:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x38}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:15:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x7, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) 14:15:22 executing program 4: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d464419e5b2fc70b72c0bb8e90f61cc4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6b652b1673773ae3cab8d7674c6c4dca2f1b4d745fd95c41f9d441d42f49db6d4a4762e5cc23dfc1adafd1e5a3e7f2e888961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba3973aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd9b5a759a703e71f358e11ac8e13df15d792e604a4f279b3bd6621bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a755761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66809af93a09fab1daae4b518d7a5d95a017864487366d6d7ee7bb00200000000000000c60fca2e2981b22d08f874e0a9cb6fca78d6f1b18fe380df4bf024f120bd505d82033f2fb7d8fc9e0d773294e097e293db58993c0024ab2fd8e5e7003af92d11de48e8b4d32972cba6f49051cec1bf6f16231bbb90a2d201e5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde24f18e4bf7156edc4ef81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f83074192c48c63384f52b8eeb70571e5bbb3e6d2b5eba52bee6f81968981811f832d064048c0e0bbe46984b2f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f088925e872ef8b4f31e6f57ba631baa729031aae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc349ab96e73d2060acfd8145e4a5851bc4a51ab87068468d3ba396d6fd6741fce0834c65c5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953de70e7ce0311c8b018956f8a42ca26ab295f1ecf617a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e57a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf083de3b4ab6368e95dd4fdf6710cd4a79651dc3e1e056c3ecd6b51f30663cc256094c840662e09ab831b7bae9aec6d7259250016795cf91f12dbb72fc321c3dfb5f9181529906b43f9d6b8ce9fad13e1085cafd41183908173e16e40037681835aa080f34b87bba0be276340295062f671e933292e32036cbd03f9a4cd660a94374b013e9f32a6bfb65417b537cd8f67f975358140384a1ca0537fd3a2a2c37006e4b30ffe469bba4251aa3ba4626acd810000000000000000ee37c63f7f295579f542b12f248f4b6ba14448abab540fb7d98a081f3d3c946455d61734855005bcc876bd15a76dd552f9bfeb091a4e82a5d11033e528b133103f5592d5684a57dd70556818ea30e03dc2a6eb69423e4f27034351809da4e5002aa346d4d3e0e2a5a9ba1130b4fe983fc344c1de9f536cff06187599523cbddcd8ffc2d11d5db7712be71c0d74a5ae4e8ff6e65238bb23ea2a979d3e8ab83857a1607dc612f0d84492"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:22 executing program 5: unshare(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 14:15:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x38}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:15:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:22 executing program 5: unshare(0x400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 14:15:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x38}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 222.468085][ T7478] Bluetooth: hci2: command 0x041b tx timeout 14:15:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x3e1a485fa68f9349}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 14:15:22 executing program 4: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:23 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:23 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) 14:15:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:23 executing program 4: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:23 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) [ 223.443228][ T25] audit: type=1804 audit(1634566523.675:6): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/5/cgroup.controllers" dev="sda1" ino=13960 res=1 errno=0 14:15:23 executing program 4: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4a06b29e220dc28dac72599456d464419e5b2fc70b72c0bb8e90f61cc4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6b652b1673773ae3cab8d7674c6c4dca2f1b4d745fd95c41f9d441d42f49db6d4a4762e5cc23dfc1adafd1e5a3e7f2e888961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba3973aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd9b5a759a703e71f358e11ac8e13df15d792e604a4f279b3bd6621bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a755761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66809af93a09fab1daae4b518d7a5d95a017864487366d6d7ee7bb00200000000000000c60fca2e2981b22d08f874e0a9cb6fca78d6f1b18fe380df4bf024f120bd505d82033f2fb7d8fc9e0d773294e097e293db58993c0024ab2fd8e5e7003af92d11de48e8b4d32972cba6f49051cec1bf6f16231bbb90a2d201e5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde24f18e4bf7156edc4ef81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f83074192c48c63384f52b8eeb70571e5bbb3e6d2b5eba52bee6f81968981811f832d064048c0e0bbe46984b2f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f088925e872ef8b4f31e6f57ba631baa729031aae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc349ab96e73d2060acfd8145e4a5851bc4a51ab87068468d3ba396d6fd6741fce0834c65c5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953de70e7ce0311c8b018956f8a42ca26ab295f1ecf617a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e57a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf083de3b4ab6368e95dd4fdf6710cd4a79651dc3e1e056c3ecd6b51f30663cc256094c840662e09ab831b7bae9aec6d7259250016795cf91f12dbb72fc321c3dfb5f9181529906b43f9d6b8ce9fad13e1085cafd41183908173e16e40037681835aa080f34b87bba0be276340295062f671e933292e32036cbd03f9a4cd660a94374b013e9f32a6bfb65417b537cd8f67f975358140384a1ca0537fd3a2a2c37006e4b30ffe469bba4251aa3ba4626acd810000000000000000ee37c63f7f295579f542b12f248f4b6ba14448abab540fb7d98a081f3d3c946455d61734855005bcc876bd15a76dd552f9bfeb091a4e82a5d11033e528b133103f5592d5684a57dd70556818ea30e03dc2a6eb69423e4f27034351809da4e5002aa346d4d3e0e2a5a9ba1130b4fe983fc344c1de9f536cff06187599523cbddcd8ffc2d11d5db7712be71c0d74a5ae4e8ff6e65238bb23ea2a979d3e8ab83857a1607dc612f0d84492"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:23 executing program 5: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000007fd16c5404e70c43b20743c8d06d3cf9ffffffffff18174d55b97b"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141417ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 14:15:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) 14:15:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) 14:15:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000032bfc61c0000000000000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='fscache_enable\x00'}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x81, 0x0, 0x0, @loopback, @empty, 0x10, 0x700, 0x2400000, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=@newtclass={0x64, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {0x7, 0x8}, {0x0, 0x2}}, [@tclass_kind_options=@c_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8f}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x57, 0x92}}, @TCA_RATE={0x6, 0x5, {0x40, 0xfe}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) 14:15:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) [ 224.205500][ T25] audit: type=1804 audit(1634566524.435:7): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/6/cgroup.controllers" dev="sda1" ino=13960 res=1 errno=0 14:15:24 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) [ 224.417883][ T25] audit: type=1804 audit(1634566524.655:8): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/9/cgroup.controllers" dev="sda1" ino=13943 res=1 errno=0 [ 224.548474][ T7478] Bluetooth: hci2: command 0x040f tx timeout 14:15:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) 14:15:25 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) 14:15:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) 14:15:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 225.111356][ T25] audit: type=1804 audit(1634566525.345:9): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/7/cgroup.controllers" dev="sda1" ino=13951 res=1 errno=0 14:15:25 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) [ 225.372922][ T25] audit: type=1804 audit(1634566525.605:10): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/10/cgroup.controllers" dev="sda1" ino=13955 res=1 errno=0 14:15:25 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001780)={0x9, 0x5, 0x1f, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) [ 225.555319][ T25] audit: type=1804 audit(1634566525.785:11): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/11/memory.events" dev="sda1" ino=13964 res=1 errno=0 14:15:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) [ 225.721914][ T25] audit: type=1804 audit(1634566525.955:12): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/11/memory.events" dev="sda1" ino=13964 res=1 errno=0 14:15:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@acquire={0x20c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sa={0xe4, 0x10, {{@in=@local, @in=@empty}, {@in6=@loopback}, @in6=@private0}}]}, 0x20c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x100000002) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) 14:15:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001780)={0x9, 0x5, 0x1f, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 14:15:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) [ 226.029516][ T25] audit: type=1804 audit(1634566526.265:13): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/11/memory.events" dev="sda1" ino=13964 res=1 errno=0 14:15:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001780)={0x9, 0x5, 0x1f, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) [ 226.128510][ T8908] syz-executor.1 (8908) used greatest stack depth: 22472 bytes left [ 226.183656][ T25] audit: type=1804 audit(1634566526.275:14): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/11/memory.events" dev="sda1" ino=13964 res=1 errno=0 14:15:26 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:15:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001780)={0x9, 0x5, 0x1f, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) [ 226.368575][ T25] audit: type=1800 audit(1634566526.285:15): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=13964 res=0 errno=0 14:15:26 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40500000000000061103c0000000000c60000000000000095000000000000001de44413a9421ceac01c60c2d55113760075d193dd510962dd45a72ef01cc625f0b9ebe35d6cb16cc8fe26c5da3f5d2b6228385e0dfff371ed9d41af3cde69c40a4a9762804bffb10714a068153c25efbd9a2730f3f4514f3a5003c252ef15dc512c64b5cab73b007fa3be4ad4cd686dd802e62d73d3041d86b3d7e32fd30e77378083bc1bf2d28fcadf8d74659827e4a189b7617a9c6bbfbf4746d379d68f4257de944296c1bbbcbb0e3601c60d3f5ff49ad322c927854667686a3a6f69eb3adc9e7397c6e2854e12b883f09f744b76d7ec29f08fb420a8b96de89990300c0f671445bd8dfca5d69c84bcbf20539ad41c42d294ce178e5603a4f235323942cb0ff8e88994a2022fcedb12e7bebf766da3455f552920c8933d21d0f5cb48"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x6}, 0x14) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0x21, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) [ 226.533113][ T25] audit: type=1804 audit(1634566526.285:16): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/8/cgroup.controllers" dev="sda1" ino=13933 res=1 errno=0 14:15:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x11, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3e0, 0x210, 0x0, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1\x00', 'macvlan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="31b1d77d4070", @rand_addr, @remote}}}, {{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syzkaller0\x00', 'ip6tnl0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@dev, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve1\x00', 'batadv_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) [ 226.669130][ T254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:15:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 226.730109][ T25] audit: type=1804 audit(1634566526.325:17): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/11/cgroup.controllers" dev="sda1" ino=13925 res=1 errno=0 14:15:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 14:15:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 226.933772][ T25] audit: type=1804 audit(1634566526.675:18): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/12/memory.events" dev="sda1" ino=13888 res=1 errno=0 [ 226.936506][ T254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.104060][ T25] audit: type=1800 audit(1634566526.675:19): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=13888 res=0 errno=0 [ 227.266764][ T254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.280341][ T25] audit: type=1804 audit(1634566526.675:20): pid=8934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/12/memory.events" dev="sda1" ino=13888 res=1 errno=0 14:15:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 227.425468][ T254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:15:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 14:15:27 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 228.084975][ T8934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.382112][ T8934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.514481][ T8934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.643163][ T8934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.779279][ T8934] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.844704][ T8934] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.899632][ T8934] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.933093][ T8934] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.991349][ T8939] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.240842][ T8939] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.369825][ T8939] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.464135][ T8939] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.797854][ T254] device hsr_slave_0 left promiscuous mode [ 229.809014][ T254] device hsr_slave_1 left promiscuous mode [ 229.835104][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.844591][ T254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.855868][ T254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.863927][ T254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.874264][ T254] device bridge_slave_1 left promiscuous mode [ 229.882315][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.895806][ T254] device bridge_slave_0 left promiscuous mode [ 229.903656][ T254] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.931117][ T254] device veth1_macvtap left promiscuous mode [ 229.938364][ T254] device veth0_macvtap left promiscuous mode [ 229.944430][ T254] device veth1_vlan left promiscuous mode [ 229.951760][ T254] device veth0_vlan left promiscuous mode [ 230.139425][ T254] team0 (unregistering): Port device team_slave_1 removed [ 230.157568][ T254] team0 (unregistering): Port device team_slave_0 removed [ 230.175546][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.194376][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.263038][ T254] bond0 (unregistering): Released all slaves [ 234.963603][ T8939] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.977431][ T8939] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.991704][ T8939] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.003756][ T8939] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.424128][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.430450][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.069153][ T9073] chnl_net:caif_netlink_parms(): no params data found [ 257.155831][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.163130][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.170916][ T9073] device bridge_slave_0 entered promiscuous mode [ 257.180891][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.188613][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.201333][ T9073] device bridge_slave_1 entered promiscuous mode [ 257.233206][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.248320][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.282692][ T9073] team0: Port device team_slave_0 added [ 257.296358][ T9073] team0: Port device team_slave_1 added [ 257.328330][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.335687][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.365526][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.379235][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.387148][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.414013][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.461522][ T9073] device hsr_slave_0 entered promiscuous mode [ 257.470717][ T9073] device hsr_slave_1 entered promiscuous mode [ 257.478024][ T9073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.486107][ T9073] Cannot create hsr debugfs directory [ 257.601654][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.608860][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.616274][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.623475][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.685377][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.704337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.713557][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.721466][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.730986][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 257.746959][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.765431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.773931][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.780975][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.789860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.799148][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.806416][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.829227][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.838249][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.854737][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.873678][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.882033][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.896886][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.920037][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.927644][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.944928][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.033964][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.058844][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.067988][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.076430][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.088502][ T9073] device veth0_vlan entered promiscuous mode [ 258.106633][ T9073] device veth1_vlan entered promiscuous mode [ 258.137415][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.146316][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.160644][ T9073] device veth0_macvtap entered promiscuous mode [ 258.174074][ T9073] device veth1_macvtap entered promiscuous mode [ 258.195190][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.205992][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.216714][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.229245][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.239565][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.250341][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.260280][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.271184][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.281144][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 258.291659][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.303112][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.314210][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.322352][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.330873][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.339881][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.352326][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.363567][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.375252][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.387979][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.399194][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.410548][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.421000][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.431618][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.441785][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 258.452308][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.463717][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.473061][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.483191][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.569829][ T7382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.604388][ T7382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.622035][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.623097][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.648409][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.661906][ T2955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.944069][ T2955] Bluetooth: hci2: command 0x0409 tx timeout 14:15:59 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:15:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 14:15:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 14:15:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 14:15:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 14:15:59 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) [ 259.650956][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 259.650971][ T25] audit: type=1804 audit(1634566559.890:35): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/12/memory.events" dev="sda1" ino=13998 res=1 errno=0 [ 259.794558][ T25] audit: type=1804 audit(1634566559.900:36): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/13/memory.events" dev="sda1" ino=14000 res=1 errno=0 [ 259.865987][ T9430] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.029873][ T9430] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:16:00 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:16:00 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 260.068811][ T25] audit: type=1804 audit(1634566559.930:37): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir711191339/syzkaller.BM3aIQ/18/memory.events" dev="sda1" ino=14001 res=1 errno=0 14:16:00 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001080)=""/4105, &(0x7f0000000000)=0x100) 14:16:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) [ 260.180018][ T9430] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:16:00 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dbfffc}) close(0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) accept4(0xffffffffffffffff, &(0x7f0000003c80)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 260.271981][ T25] audit: type=1804 audit(1634566559.950:38): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir767006626/syzkaller.rJBdhM/17/memory.events" dev="sda1" ino=13999 res=1 errno=0 [ 260.328061][ T9430] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:16:00 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001080)=""/4105, &(0x7f0000000000)=0x100) [ 260.435497][ T25] audit: type=1804 audit(1634566559.960:39): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/13/memory.events" dev="sda1" ino=14007 res=1 errno=0 [ 260.667866][ T25] audit: type=1800 audit(1634566559.960:40): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=14007 res=0 errno=0 [ 260.768276][ T9430] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.790340][ T25] audit: type=1804 audit(1634566559.970:41): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/13/memory.events" dev="sda1" ino=14007 res=1 errno=0 [ 260.846131][ T9430] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.888773][ T9430] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.922063][ T25] audit: type=1804 audit(1634566560.120:42): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/1/memory.events" dev="sda1" ino=14010 res=1 errno=0 [ 260.931084][ T9430] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.016195][ T25] audit: type=1800 audit(1634566560.120:43): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=14010 res=0 errno=0 [ 261.051833][ T7898] Bluetooth: hci2: command 0x041b tx timeout 14:16:01 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:16:01 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001080)=""/4105, &(0x7f0000000000)=0x100) 14:16:01 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) close(r0) 14:16:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 14:16:01 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:16:01 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) [ 261.152745][ T25] audit: type=1804 audit(1634566560.130:44): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/1/memory.events" dev="sda1" ino=14010 res=1 errno=0 14:16:01 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 14:16:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 14:16:01 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001080)=""/4105, &(0x7f0000000000)=0x100) [ 261.609359][ T9494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:16:01 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) 14:16:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000001a80)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1e94, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1e90, 0x4, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xad, 0x2, "7619feb0fd3db8d1ee338cd8b2847396df0c0aac44b8c98c555940d977d130f81d390a9ce11afefa7e15a7372b04b07e378ea65129e74311b15732c1bfc96e0a73456b97c98ac8fd6369a1fdf613a5e2ae77b5e8e44ee0279e4bee099c367d01c3d838207dda59ecc7cf0d2caa2ca19cc1f6dee9a2ca3b5bb1b2ad8a851358660638bdc133fe2cea11c68f153615aa24d1a83f8cde6a56ff8307ee0b7e232e2df230d417c1c92c8e82"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x2d, 0x1, "0062a6ed8d0c4ddb0ec86a99e54ac962746f531d45ffc09ab60d62bf116a6b719fe5ae0581895d2528"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x11b0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x1001, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0x1d, 0x2, "6bf0199821329d1293b928d864c9ab06ad0412839fe0465113"}, @NL80211_PKTPAT_MASK={0xd9, 0x1, "d86b0a7b4b600a1908c45348375a729ab6fca039d9cd49489cdff57c5bb9f20111844463f0386c49d947894212343d69de929265593c999c89e059d375457febce6de9bf3032ec6f26bfd8721c985614fbb1a50becbf849ff3f61a150397283ca6cc87cb2538fc9b55e957f15b0181720cd5af02f3d7e991db0691535e1100f7d24a6a3134f9072a8f394194a4d5ed56f8f6d5595cc1a06f8f8005197ed828462aff071ff638e9005114b456cc9ffd6d4db36e8948a19e22fa364ad3aa12736fd1af2d675394daa57f2f0b8530676e7437dd1c98e0"}, @NL80211_PKTPAT_MASK={0xa9, 0x1, "141a42fd5c5544613a4d6f18620295ddc858502e68cf7fcaddc2acc38ae15914ef595ab03e9982fe514e6bd311d8f9f30110ce9625acd04532ddfa03ed5c01930166dcb104a030e99bb6e99fcbed58c8e8ec7e73da10dba49b00d237361b9a376e049423946ad1d2c6e480956806b62cdf8acdb0ae9ad1dd3783e9f0ad4c174273cd67120c902eb966aa1c686b57703bf7f1818618f25a3e8949ada86729dbdf766293e1fa"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x45, 0x1, "3c32b5cba04ae743631d6bfa8a691e3df1d4f0f718924790fbb5779a341d949375447c9e3a579b53a91d8cc3fbd02703aa60dcf6e990d0b4d07116aedeaed3969b"}]}, {0xb8c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xc1, 0x2, "d478e85620af128c3eadd4a9b12e535a7db936693e873d1fa05bd63bfdbede2b8a962b3b5f291f45ace8357beb9730100d72e2c62e79103c3c0d868b54925f5746eb35240189808c4b2eb09ba062887d6272480f1b3166d80ac4b80285a0a577226e5ec4d83600e121483c80883403dbbce4df5a989648f943e505b7f6d72bfafadcf640473d38e4a68add29c9084be65e7801028a12e5c610623d0875c6ea092bc688639137eb7a5d184854f4264653987e56de71a23119487348628e"}, @NL80211_PKTPAT_MASK={0xf1, 0x1, "0115a5d263f75ee2f5092858b90e0912340ce9f48e41cfed5c82819dd230b9e97dcd35d8a0bbcaa729581f809be461020a3cb33b08e988a3fe3aa24aa8e5d962cfddd4fbde1c3a05926e892e8075e877d626c8906567f4fea8b84d499367b9887ef2de0abf9dc923ee6c4727cd28b92572a9fcc9572057062a18fe83a4e71761f639fe41a4ab81bd69702a408cf7cea2ed158474336049f298fdb8cddf9cbfb7277d34fbb6d21c0830ed6f2541ff300a87631859f610a29630c7cd85d90d334a2eaa6f42ed44f6d34e1b84fc3f2cb9f04334993a78a8f0b9dbcea87cd0f92eeba155ff3d8ff84fbc7c50d6c6ae"}, @NL80211_PKTPAT_MASK={0x9cd, 0x1, "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"}]}]}]}]}, 0x1ec4}}, 0x0) [ 261.808934][ T9494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:16:02 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0xc, 0x66) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0xe0, 0x4) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) [ 262.106537][ T9494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.410830][ T9494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.603948][ T9494] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.644813][ T9494] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.700370][ T9494] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.739713][ T9494] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 14:16:03 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) 14:16:03 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0xc, 0x66) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0xe0, 0x4) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 14:16:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) 14:16:03 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) 14:16:03 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:16:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x275d0000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) sendfile(r2, r1, &(0x7f0000000040), 0x100001500) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002580)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x1, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0x4, 0x75bb}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r7 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000600)={0x0, 0xffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000002680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)=ANY=[@ANYBLOB="480000005e0000012dbd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="20b0040000000000050011000100000018002400c034346477456b03e9c33f56132fdbb46ce02c8908001300", @ANYRES32=r7, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0xc040) sendfile(r2, r1, &(0x7f0000000080)=0x93, 0x200) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) 14:16:03 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0xc, 0x66) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0xe0, 0x4) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 14:16:03 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) 14:16:03 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) 14:16:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x38}}, 0x0) [ 263.112264][ T1051] Bluetooth: hci2: command 0x040f tx timeout [ 263.166306][ T9555] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 14:16:03 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0xc, 0x66) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0xe0, 0x4) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x3}, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) 14:16:03 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) [ 263.311757][ T9555] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.520929][ T9555] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.618931][ T9555] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.182138][ T7898] Bluetooth: hci2: command 0x0419 tx timeout [ 268.318686][ T9555] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.330903][ T9555] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.345522][ T9555] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.359823][ T9555] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 14:16:08 executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14:16:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c02270304000e0580a7b6072e63e286a5cefe", 0x5ac) 14:16:08 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00", 0x1}, 0x60) close(r0) 14:16:08 executing program 1: syz_emit_ethernet(0x5e, 0x0, 0x0) unshare(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0xeb5cbe54cc5cfcc4) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 14:16:08 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0xbf01503d5dbaa775, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) 14:16:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:16:08 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c02270304000e0580a7b6072e63e286a5cefe", 0x5ac) 14:16:08 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 14:16:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "f9"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) [ 268.675564][ T25] kauditd_printk_skb: 29 callbacks suppressed [ 268.675580][ T25] audit: type=1804 audit(1634566568.911:74): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/16/cgroup.controllers" dev="sda1" ino=14027 res=1 errno=0 [ 268.710062][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.745500][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:09 executing program 1: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:16:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c02270304000e0580a7b6072e63e286a5cefe", 0x5ac) 14:16:09 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 14:16:09 executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14:16:09 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c02270304000e0580a7b6072e63e286a5cefe", 0x5ac) 14:16:09 executing program 1: unshare(0x20000400) pipe(&(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 14:16:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "f9"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) 14:16:09 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 14:16:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:16:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "f9"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) 14:16:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0xfffffffffffffffd) 14:16:09 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 14:16:09 executing program 1: unshare(0x20000400) pipe(&(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 269.707554][ T25] audit: type=1804 audit(1634566569.941:75): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/17/cgroup.controllers" dev="sda1" ino=13879 res=1 errno=0 14:16:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "f9"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) [ 269.752413][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:10 executing program 1: unshare(0x20000400) pipe(&(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 269.792561][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0xfffffffffffffffd) 14:16:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xe, 0x4, 0x8, 0xf}, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/51}, 0x20) 14:16:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:10 executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14:16:10 executing program 1: unshare(0x20000400) pipe(&(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 14:16:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:16:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0xfffffffffffffffd) 14:16:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xe, 0x4, 0x8, 0xf}, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/51}, 0x20) 14:16:10 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x2c8, 0x3, 0x3b0, 0xaa000000, 0x203, 0x240, 0x0, 0x0, 0x318, 0x328, 0x328, 0x318, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) [ 270.505881][ T25] audit: type=1804 audit(1634566570.741:76): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/18/cgroup.controllers" dev="sda1" ino=14033 res=1 errno=0 [ 270.556046][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.583630][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xe, 0x4, 0x8, 0xf}, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/51}, 0x20) 14:16:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0xfffffffffffffffd) 14:16:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:11 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x2c8, 0x3, 0x3b0, 0xaa000000, 0x203, 0x240, 0x0, 0x0, 0x318, 0x328, 0x328, 0x318, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 14:16:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:11 executing program 3: write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 14:16:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xe, 0x4, 0x8, 0xf}, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'virt_wifi0\x00'}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/51}, 0x20) 14:16:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:16:11 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x2c8, 0x3, 0x3b0, 0xaa000000, 0x203, 0x240, 0x0, 0x0, 0x318, 0x328, 0x328, 0x318, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 14:16:11 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002000)=@req={0x28, &(0x7f0000001fc0)={'vlan1\x00', @ifru_addrs=@can={0x1d, 0x0}}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r1}, 0x10) [ 271.588040][ T25] audit: type=1804 audit(1634566571.821:77): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/19/cgroup.controllers" dev="sda1" ino=14036 res=1 errno=0 14:16:11 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x2c8, 0x3, 0x3b0, 0xaa000000, 0x203, 0x240, 0x0, 0x0, 0x318, 0x328, 0x328, 0x318, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) [ 271.674663][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.724775][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 14:16:12 executing program 1: socket(0x18, 0x0, 0x0) 14:16:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002000)=@req={0x28, &(0x7f0000001fc0)={'vlan1\x00', @ifru_addrs=@can={0x1d, 0x0}}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r1}, 0x10) 14:16:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @local, 0x5}, @in={0x2, 0x4e20, @dev}]}, &(0x7f0000000180)=0x10) socket(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) 14:16:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002000)=@req={0x28, &(0x7f0000001fc0)={'vlan1\x00', @ifru_addrs=@can={0x1d, 0x0}}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r1}, 0x10) 14:16:12 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) 14:16:12 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000004240)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}, 0x0) 14:16:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x249, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c83760ecb44e35f9268801371a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x54}}, 0x0) 14:16:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 14:16:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:16:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002000)=@req={0x28, &(0x7f0000001fc0)={'vlan1\x00', @ifru_addrs=@can={0x1d, 0x0}}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000100)={0x1d, r1}, 0x10) 14:16:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) 14:16:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x249, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c83760ecb44e35f9268801371a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x54}}, 0x0) 14:16:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 14:16:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:16:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) 14:16:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) 14:16:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x249, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c83760ecb44e35f9268801371a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x54}}, 0x0) 14:16:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) 14:16:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 14:16:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:16:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000564000), &(0x7f0000000000)=0xffe4) 14:16:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r1, 0x249, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c83760ecb44e35f9268801371a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x54}}, 0x0) 14:16:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) 14:16:13 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) 14:16:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:16:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe3e) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 14:16:13 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) 14:16:13 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x80000, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x80}) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000b00), 0x400000000000258, 0x0) recvmmsg(r2, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/200, 0xc8}], 0x1}}], 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000005f00)) recvmmsg(0xffffffffffffffff, &(0x7f000000d9c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000009d40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000009e40)=@qipcrtr, 0x80, &(0x7f000000a140)=[{&(0x7f0000009ec0)=""/39, 0x27}, {&(0x7f0000009f00)=""/103, 0x67}, {&(0x7f0000009f80)=""/170, 0xaa}], 0x3, &(0x7f000000a180)=""/223, 0xdf}}, {{&(0x7f000000a280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000000b880)=[{&(0x7f000000a300)=""/135, 0x87}, {0x0}, {0x0}, {&(0x7f000000b500)=""/1, 0x1}, {&(0x7f000000b540)=""/147, 0x93}, {&(0x7f000000b680)=""/147, 0x93}, {&(0x7f000000b740)=""/86, 0x56}, {&(0x7f000000b7c0)=""/138, 0x8a}], 0x8}, 0x401}, {{&(0x7f000000b9c0)=@alg, 0x80, &(0x7f000000ccc0)=[{&(0x7f000000ba40)=""/3, 0x3}, {&(0x7f000000bc40)=""/79, 0x4f}], 0x2, &(0x7f000000cd40)=""/174, 0xae}, 0x40}, {{&(0x7f000000ce00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000000cec0)=[{&(0x7f000000ce80)=""/29, 0x1d}], 0x1, &(0x7f000000cf00)=""/129, 0x81}, 0x64c7}, {{&(0x7f000000cfc0), 0x80, &(0x7f000000d140)=[{&(0x7f000000d040)=""/181, 0xb5}, {0x0}], 0x2, &(0x7f000000d180)=""/222, 0xde}, 0x8}, {{&(0x7f000000d280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f000000d880)=[{0x0}, {&(0x7f000000d400)=""/234, 0xea}, {&(0x7f000000d500)=""/190, 0xbe}, {&(0x7f000000d5c0)=""/92, 0x5c}, {0x0}, {0x0}], 0x6, &(0x7f000000d900)=""/154, 0x9a}}], 0x8, 0x0, &(0x7f000000dc00)={0x0, 0x989680}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:16:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) 14:16:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) 14:16:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffb}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 14:16:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 273.793996][ T9806] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.5'. 14:16:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) 14:16:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffb}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 14:16:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) 14:16:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 14:16:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffb}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 14:16:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={{0x14}, [], {0x14, 0x11, 0x2}}, 0x28}}, 0x0) 14:16:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) 14:16:14 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x80000, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x80}) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000b00), 0x400000000000258, 0x0) recvmmsg(r2, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/200, 0xc8}], 0x1}}], 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000005f00)) recvmmsg(0xffffffffffffffff, &(0x7f000000d9c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000009d40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000009e40)=@qipcrtr, 0x80, &(0x7f000000a140)=[{&(0x7f0000009ec0)=""/39, 0x27}, {&(0x7f0000009f00)=""/103, 0x67}, {&(0x7f0000009f80)=""/170, 0xaa}], 0x3, &(0x7f000000a180)=""/223, 0xdf}}, {{&(0x7f000000a280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000000b880)=[{&(0x7f000000a300)=""/135, 0x87}, {0x0}, {0x0}, {&(0x7f000000b500)=""/1, 0x1}, {&(0x7f000000b540)=""/147, 0x93}, {&(0x7f000000b680)=""/147, 0x93}, {&(0x7f000000b740)=""/86, 0x56}, {&(0x7f000000b7c0)=""/138, 0x8a}], 0x8}, 0x401}, {{&(0x7f000000b9c0)=@alg, 0x80, &(0x7f000000ccc0)=[{&(0x7f000000ba40)=""/3, 0x3}, {&(0x7f000000bc40)=""/79, 0x4f}], 0x2, &(0x7f000000cd40)=""/174, 0xae}, 0x40}, {{&(0x7f000000ce00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000000cec0)=[{&(0x7f000000ce80)=""/29, 0x1d}], 0x1, &(0x7f000000cf00)=""/129, 0x81}, 0x64c7}, {{&(0x7f000000cfc0), 0x80, &(0x7f000000d140)=[{&(0x7f000000d040)=""/181, 0xb5}, {0x0}], 0x2, &(0x7f000000d180)=""/222, 0xde}, 0x8}, {{&(0x7f000000d280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f000000d880)=[{0x0}, {&(0x7f000000d400)=""/234, 0xea}, {&(0x7f000000d500)=""/190, 0xbe}, {&(0x7f000000d5c0)=""/92, 0x5c}, {0x0}, {0x0}], 0x6, &(0x7f000000d900)=""/154, 0x9a}}], 0x8, 0x0, &(0x7f000000dc00)={0x0, 0x989680}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:16:14 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) 14:16:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 14:16:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffb}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 14:16:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004c40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) [ 274.770401][ T9850] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.5'. [ 274.790043][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.856880][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:16:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 14:16:15 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 14:16:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004c40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 14:16:15 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 14:16:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="d40000002d00010027bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="ffff07000c00f2ff0e0003000b00010066"], 0xd4}}, 0x0) [ 275.141319][ T9873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.277417][ T9876] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. 14:16:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) [ 275.641299][ T9885] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.5'. 14:16:16 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x80000, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x80}) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000b00), 0x400000000000258, 0x0) recvmmsg(r2, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/200, 0xc8}], 0x1}}], 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000005f00)) recvmmsg(0xffffffffffffffff, &(0x7f000000d9c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000009d40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000009e40)=@qipcrtr, 0x80, &(0x7f000000a140)=[{&(0x7f0000009ec0)=""/39, 0x27}, {&(0x7f0000009f00)=""/103, 0x67}, {&(0x7f0000009f80)=""/170, 0xaa}], 0x3, &(0x7f000000a180)=""/223, 0xdf}}, {{&(0x7f000000a280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000000b880)=[{&(0x7f000000a300)=""/135, 0x87}, {0x0}, {0x0}, {&(0x7f000000b500)=""/1, 0x1}, {&(0x7f000000b540)=""/147, 0x93}, {&(0x7f000000b680)=""/147, 0x93}, {&(0x7f000000b740)=""/86, 0x56}, {&(0x7f000000b7c0)=""/138, 0x8a}], 0x8}, 0x401}, {{&(0x7f000000b9c0)=@alg, 0x80, &(0x7f000000ccc0)=[{&(0x7f000000ba40)=""/3, 0x3}, {&(0x7f000000bc40)=""/79, 0x4f}], 0x2, &(0x7f000000cd40)=""/174, 0xae}, 0x40}, {{&(0x7f000000ce00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000000cec0)=[{&(0x7f000000ce80)=""/29, 0x1d}], 0x1, &(0x7f000000cf00)=""/129, 0x81}, 0x64c7}, {{&(0x7f000000cfc0), 0x80, &(0x7f000000d140)=[{&(0x7f000000d040)=""/181, 0xb5}, {0x0}], 0x2, &(0x7f000000d180)=""/222, 0xde}, 0x8}, {{&(0x7f000000d280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f000000d880)=[{0x0}, {&(0x7f000000d400)=""/234, 0xea}, {&(0x7f000000d500)=""/190, 0xbe}, {&(0x7f000000d5c0)=""/92, 0x5c}, {0x0}, {0x0}], 0x6, &(0x7f000000d900)=""/154, 0x9a}}], 0x8, 0x0, &(0x7f000000dc00)={0x0, 0x989680}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:16:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:16:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004c40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 14:16:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:16:16 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) 14:16:16 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) [ 275.902060][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004c40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 14:16:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:16:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) 14:16:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) [ 276.205900][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:16 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) [ 276.297312][ T9914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:16 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5500000018007f1dfd0000b2a4a280930a80000000284308910000000e0008", 0x1f}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4bfdc, 0x0) 14:16:17 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x80000, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x80}) socketpair(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000b00), 0x400000000000258, 0x0) recvmmsg(r2, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/200, 0xc8}], 0x1}}], 0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000005f00)) recvmmsg(0xffffffffffffffff, &(0x7f000000d9c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000009d40)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}, {{&(0x7f0000009e40)=@qipcrtr, 0x80, &(0x7f000000a140)=[{&(0x7f0000009ec0)=""/39, 0x27}, {&(0x7f0000009f00)=""/103, 0x67}, {&(0x7f0000009f80)=""/170, 0xaa}], 0x3, &(0x7f000000a180)=""/223, 0xdf}}, {{&(0x7f000000a280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f000000b880)=[{&(0x7f000000a300)=""/135, 0x87}, {0x0}, {0x0}, {&(0x7f000000b500)=""/1, 0x1}, {&(0x7f000000b540)=""/147, 0x93}, {&(0x7f000000b680)=""/147, 0x93}, {&(0x7f000000b740)=""/86, 0x56}, {&(0x7f000000b7c0)=""/138, 0x8a}], 0x8}, 0x401}, {{&(0x7f000000b9c0)=@alg, 0x80, &(0x7f000000ccc0)=[{&(0x7f000000ba40)=""/3, 0x3}, {&(0x7f000000bc40)=""/79, 0x4f}], 0x2, &(0x7f000000cd40)=""/174, 0xae}, 0x40}, {{&(0x7f000000ce00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f000000cec0)=[{&(0x7f000000ce80)=""/29, 0x1d}], 0x1, &(0x7f000000cf00)=""/129, 0x81}, 0x64c7}, {{&(0x7f000000cfc0), 0x80, &(0x7f000000d140)=[{&(0x7f000000d040)=""/181, 0xb5}, {0x0}], 0x2, &(0x7f000000d180)=""/222, 0xde}, 0x8}, {{&(0x7f000000d280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f000000d880)=[{0x0}, {&(0x7f000000d400)=""/234, 0xea}, {&(0x7f000000d500)=""/190, 0xbe}, {&(0x7f000000d5c0)=""/92, 0x5c}, {0x0}, {0x0}], 0x6, &(0x7f000000d900)=""/154, 0x9a}}], 0x8, 0x0, &(0x7f000000dc00)={0x0, 0x989680}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:16:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) 14:16:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:16:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000780)=@raw=[@ldst, @jmp, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @generic={0x0, 0xb, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:16:17 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:16:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) 14:16:17 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:16:17 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 14:16:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000ec0)={0x0, 0x9}, 0x8) 14:16:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492778, 0x0) 14:16:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x101}, 0x14}}, 0x0) 14:16:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000600)="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", 0x200, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x100000000004}) 14:16:17 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:16:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000ec0)={0x0, 0x9}, 0x8) 14:16:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x101}, 0x14}}, 0x0) 14:16:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000600)="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", 0x200, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x100000000004}) 14:16:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000ec0)={0x0, 0x9}, 0x8) 14:16:18 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:16:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x101}, 0x14}}, 0x0) 14:16:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000ec0)={0x0, 0x9}, 0x8) 14:16:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000600)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x100000000004}) 14:16:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0x101}, 0x14}}, 0x0) 14:16:18 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:16:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:18 executing program 5: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0xb, 0x0, 0x0, &(0x7f0000000d40)) 14:16:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r2, &(0x7f0000000600)="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", 0x200, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x100000000004}) 14:16:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'vlan0\x00', {'dummy0\x00'}}) 14:16:19 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 14:16:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001280), 0x8) [ 279.069019][T10127] __nla_validate_parse: 10 callbacks suppressed [ 279.069037][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'vlan0\x00', {'dummy0\x00'}}) 14:16:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x64, 0x0, 0x0, 0xfffff004}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 14:16:19 executing program 0: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) [ 279.271562][T10128] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'vlan0\x00', {'dummy0\x00'}}) [ 279.441578][ T25] audit: type=1804 audit(1634566579.682:78): pid=10168 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/46/cgroup.controllers" dev="sda1" ino=14090 res=1 errno=0 14:16:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000f04df7a0e67479", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636273001c000200180001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}}, 0x24}}, 0x0) 14:16:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x64, 0x0, 0x0, 0xfffff004}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 14:16:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) [ 279.716415][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 14:16:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000100)={0x8, 'vlan0\x00', {'dummy0\x00'}}) 14:16:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x64, 0x0, 0x0, 0xfffff004}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 14:16:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:20 executing program 0: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 14:16:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) 14:16:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x64, 0x0, 0x0, 0xfffff004}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 14:16:20 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) 14:16:20 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 14:16:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) 14:16:20 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) [ 280.222906][ T25] audit: type=1804 audit(1634566580.462:79): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/47/cgroup.controllers" dev="sda1" ino=14040 res=1 errno=0 14:16:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) [ 280.434138][ T25] audit: type=1804 audit(1634566580.672:80): pid=10213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/48/cgroup.controllers" dev="sda1" ino=14022 res=1 errno=0 14:16:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:20 executing program 0: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 14:16:20 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) 14:16:20 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe(0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001a80)=0x1, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 14:16:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000005ff9ff00040000000d"], &(0x7f0000000100)=""/4096, 0x7c, 0x1000, 0x1}, 0x20) 14:16:21 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 14:16:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x0, @private1}}}, 0x90) 14:16:21 executing program 3: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) 14:16:21 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe(0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001a80)=0x1, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 281.055295][ T25] audit: type=1804 audit(1634566581.292:81): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/48/cgroup.controllers" dev="sda1" ino=14105 res=1 errno=0 14:16:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x3, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 14:16:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) [ 281.413359][ T25] audit: type=1804 audit(1634566581.652:82): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/49/cgroup.controllers" dev="sda1" ino=14040 res=1 errno=0 14:16:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x3, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 14:16:21 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe(0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001a80)=0x1, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 281.581877][ T25] audit: type=1804 audit(1634566581.782:83): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/41/cgroup.controllers" dev="sda1" ino=14110 res=1 errno=0 [ 281.776710][ T25] audit: type=1804 audit(1634566581.892:84): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/41/memory.events" dev="sda1" ino=14109 res=1 errno=0 14:16:22 executing program 0: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 14:16:22 executing program 3: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) 14:16:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x3, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 14:16:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) 14:16:22 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61740000ff070000000000000000000000000000f5ffffff0000000000000029"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100007800) 14:16:22 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) pipe(0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001a80)=0x1, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 282.000468][ T25] audit: type=1804 audit(1634566581.892:85): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/41/cgroup.controllers" dev="sda1" ino=14110 res=1 errno=0 14:16:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x3, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) [ 282.260078][ T25] audit: type=1804 audit(1634566582.492:86): pid=10330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir536941389/syzkaller.dh0HaA/50/cgroup.controllers" dev="sda1" ino=14086 res=1 errno=0 14:16:22 executing program 3: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) [ 282.401947][ T25] audit: type=1804 audit(1634566582.572:87): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir840376788/syzkaller.HaCMBq/49/cgroup.controllers" dev="sda1" ino=14110 res=1 errno=0 14:16:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) 14:16:22 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) 14:16:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) 14:16:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000001b00)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x33fe0}], 0x1}, 0x0) [ 283.144331][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:23 executing program 3: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) 14:16:23 executing program 1: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) [ 283.332409][T10409] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:16:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) 14:16:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) 14:16:23 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0xe}]}}}]}, 0x60}}, 0x0) [ 283.716355][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:24 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) [ 283.828767][T10451] netem: change failed [ 283.837680][T10456] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 283.900986][T10467] netem: change failed 14:16:24 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0xe}]}}}]}, 0x60}}, 0x0) 14:16:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) 14:16:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) [ 284.170533][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000150700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000bbc3112c970f05e3ab19f7636bb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x74}, 0x1, 0x88a8ffff}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 284.305500][T10477] netem: change failed [ 284.311108][T10487] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 284.349834][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:24 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0xe}]}}}]}, 0x60}}, 0x0) 14:16:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x68, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) [ 284.502505][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 284.502522][ T25] audit: type=1804 audit(1634566584.742:101): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir767006626/syzkaller.rJBdhM/58/memory.events" dev="sda1" ino=14086 res=1 errno=0 [ 284.579640][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.621312][T10516] netem: change failed [ 284.652947][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000150700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000bbc3112c970f05e3ab19f7636bb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x74}, 0x1, 0x88a8ffff}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 284.752370][ T25] audit: type=1804 audit(1634566584.792:102): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir767006626/syzkaller.rJBdhM/58/cgroup.controllers" dev="sda1" ino=14103 res=1 errno=0 14:16:25 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0xe}]}}}]}, 0x60}}, 0x0) 14:16:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) [ 284.832471][T10521] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 284.897074][ T25] audit: type=1804 audit(1634566584.842:103): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/45/cgroup.controllers" dev="sda1" ino=14121 res=1 errno=0 [ 284.968085][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:16:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000150700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000bbc3112c970f05e3ab19f7636bb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x74}, 0x1, 0x88a8ffff}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 285.117844][ T25] audit: type=1804 audit(1634566584.962:104): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/45/memory.events" dev="sda1" ino=14119 res=1 errno=0 [ 285.152453][T10540] netem: change failed 14:16:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) [ 285.215215][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:16:25 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010) 14:16:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000150700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000bbc3112c970f05e3ab19f7636bb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x74}, 0x1, 0x88a8ffff}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 285.296183][ T25] audit: type=1804 audit(1634566584.962:105): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir588508313/syzkaller.IyCVmt/45/cgroup.controllers" dev="sda1" ino=14121 res=1 errno=0 14:16:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r3, 0x0, 0xf03b2a00) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)=@newchain={0x50, 0x64, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0x0, 0x2}, {0x6, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xa3, 0xca}}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x40014) sendfile(r2, r1, 0x0, 0x100000001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000001) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r8, 0x800448d7, 0x0) 14:16:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000150700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000bbc3112c970f05e3ab19f7636bb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x74}, 0x1, 0x88a8ffff}, 0x0) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 285.467939][ T25] audit: type=1804 audit(1634566585.642:106): pid=10549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/44/cgroup.controllers" dev="sda1" ino=14116 res=1 errno=0 [ 285.524358][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.580709][ C1] ------------[ cut here ]------------ [ 285.586598][ C1] WARNING: CPU: 1 PID: 9771 at net/core/gen_stats.c:157 gnet_stats_add_basic+0x4d/0x2a0 [ 285.596502][ C1] Modules linked in: [ 285.600492][ C1] CPU: 1 PID: 9771 Comm: kworker/u4:6 Not tainted 5.15.0-rc5-syzkaller #0 [ 285.609036][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.619204][ C1] Workqueue: events_unbound call_usermodehelper_exec_work [ 285.622223][ T25] audit: type=1804 audit(1634566585.802:107): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/44/memory.events" dev="sda1" ino=14115 res=1 errno=0 [ 285.626508][ C1] RIP: 0010:gnet_stats_add_basic+0x4d/0x2a0 [ 285.658488][ C1] Code: 0f 84 69 01 00 00 e8 52 a1 59 fa 31 ff 65 8b 2d b9 ab e4 78 81 e5 00 01 ff 00 89 ee e8 7c a8 59 fa 85 ed 74 10 e8 33 a1 59 fa <0f> 0b 4d 85 f6 0f 84 70 01 00 00 49 c7 c7 e4 ae 6e 8d bd ff ff ff [ 285.678338][ C1] RSP: 0018:ffffc90000dc0b98 EFLAGS: 00010246 [ 285.684516][ C1] RAX: 0000000000000000 RBX: ffff88801fc0c130 RCX: 0000000000000100 [ 285.692612][ C1] RDX: ffff88801e0b9c80 RSI: ffffffff871d445d RDI: 0000000000000003 [ 285.700753][ C1] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000001 [ 285.708755][ C1] R10: ffffffff871d45d0 R11: 0000000000000000 R12: ffff88807cbe8e08 [ 285.716858][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.724924][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 285.733959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.741068][ C1] CR2: 0000001b32c3e000 CR3: 0000000051f55000 CR4: 00000000003506e0 [ 285.749079][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.757150][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.765219][ C1] Call Trace: [ 285.768522][ C1] [ 285.771452][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 285.777570][ C1] ? gen_kill_estimator+0x50/0x50 [ 285.782706][ C1] est_fetch_counters+0xc3/0x160 [ 285.787669][ C1] est_timer+0x92/0x730 [ 285.791925][ C1] ? lock_release+0x720/0x720 [ 285.796626][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 285.801597][ C1] ? gen_kill_estimator+0x50/0x50 [ 285.806665][ C1] ? gen_kill_estimator+0x50/0x50 [ 285.811804][ C1] ? call_timer_fn+0x1a5/0x6b0 [ 285.816667][ C1] call_timer_fn+0x1a5/0x6b0 [ 285.821364][ C1] ? add_timer_on+0x4a0/0x4a0 [ 285.826067][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 285.828489][ T25] audit: type=1804 audit(1634566585.802:108): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir045270807/syzkaller.Xs8zD9/44/cgroup.controllers" dev="sda1" ino=14116 res=1 errno=0 [ 285.831516][ C1] ? gen_kill_estimator+0x50/0x50 [ 285.831555][ C1] __run_timers.part.0+0x675/0xa20 [ 285.831597][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 285.831637][ C1] run_timer_softirq+0xb3/0x1d0 [ 285.831661][ C1] __do_softirq+0x29b/0x9c2 [ 285.831699][ C1] __irq_exit_rcu+0x123/0x180 [ 285.887075][ C1] irq_exit_rcu+0x5/0x20 [ 285.891430][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 285.897129][ C1] [ 285.900122][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 285.906127][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 285.912637][ C1] Code: 74 24 10 e8 0a 16 21 f8 48 89 ef e8 52 8c 21 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 93 77 14 f8 65 8b 05 8c ce c6 76 85 c0 74 0a 5b 5d c3 e8 a0 ed [ 285.932329][ C1] RSP: 0018:ffffc900073777f0 EFLAGS: 00000206 [ 285.938437][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1fa286a [ 285.946491][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 285.954545][ C1] RBP: ffff88807e004240 R08: 0000000000000001 R09: ffffffff8fd0c9f7 [ 285.962610][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000e6ef01 [ 285.970661][ C1] R13: dffffc0000000000 R14: 0000000000000043 R15: ffffffff8b857080 [ 285.978689][ C1] cpu_cgroup_fork+0xca/0x140 [ 285.983546][ C1] ? hrtick+0x250/0x250 [ 285.987753][ C1] cgroup_post_fork+0x2e6/0x8f0 [ 285.992786][ C1] ? cgroup_cancel_fork+0x110/0x110 [ 285.998013][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.003043][ C1] ? _raw_write_unlock_irq+0x1f/0x40 [ 286.007205][ T25] audit: type=1804 audit(1634566586.233:109): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir767006626/syzkaller.rJBdhM/59/cgroup.controllers" dev="sda1" ino=14118 res=1 errno=0 [ 286.008344][ C1] copy_process+0x460b/0x7590 [ 286.039566][ C1] ? __cleanup_sighand+0xb0/0xb0 [ 286.044598][ C1] ? is_dynamic_key+0x1a0/0x1a0 [ 286.049475][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.055544][ C1] ? kernel_clone+0xc4/0xac0 [ 286.060222][ C1] kernel_clone+0xe7/0xac0 [ 286.064674][ C1] ? __lock_acquire+0x162f/0x54a0 [ 286.069728][ C1] ? create_io_thread+0xf0/0xf0 [ 286.074677][ C1] ? debug_object_deactivate+0x264/0x300 [ 286.080466][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.086482][ C1] ? umh_complete+0x90/0x90 [ 286.091079][ C1] kernel_thread+0xb5/0xf0 [ 286.095527][ C1] ? __do_sys_clone3+0x2e0/0x2e0 [ 286.100577][ C1] ? umh_complete+0x90/0x90 [ 286.105131][ C1] call_usermodehelper_exec_work+0xcc/0x180 [ 286.111213][ C1] process_one_work+0x9bf/0x16b0 [ 286.116182][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.121656][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.126612][ C1] ? _raw_spin_lock_irq+0x41/0x50 14:16:26 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010) [ 286.131846][ C1] worker_thread+0x658/0x11f0 [ 286.136563][ C1] ? process_one_work+0x16b0/0x16b0 [ 286.141855][ C1] kthread+0x3e5/0x4d0 [ 286.146117][ C1] ? set_kthread_struct+0x130/0x130 [ 286.151419][ C1] ret_from_fork+0x1f/0x30 [ 286.155913][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 286.162507][ C1] CPU: 1 PID: 9771 Comm: kworker/u4:6 Not tainted 5.15.0-rc5-syzkaller #0 [ 286.171027][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.177026][ T25] audit: type=1804 audit(1634566586.373:110): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir767006626/syzkaller.rJBdhM/59/memory.events" dev="sda1" ino=14097 res=1 errno=0 [ 286.181116][ C1] Workqueue: events_unbound call_usermodehelper_exec_work [ 286.181160][ C1] Call Trace: [ 286.181169][ C1] [ 286.181179][ C1] dump_stack_lvl+0xcd/0x134 [ 286.181278][ C1] panic+0x2b0/0x6dd [ 286.181315][ C1] ? __warn_printk+0xf3/0xf3 [ 286.181350][ C1] ? __warn.cold+0x1a/0x44 [ 286.237880][ C1] ? gnet_stats_add_basic+0x4d/0x2a0 [ 286.243187][ C1] __warn.cold+0x35/0x44 [ 286.247463][ C1] ? gnet_stats_add_basic+0x4d/0x2a0 [ 286.252788][ C1] report_bug+0x1bd/0x210 [ 286.257222][ C1] handle_bug+0x3c/0x60 [ 286.261393][ C1] exc_invalid_op+0x14/0x40 [ 286.265904][ C1] asm_exc_invalid_op+0x12/0x20 [ 286.270756][ C1] RIP: 0010:gnet_stats_add_basic+0x4d/0x2a0 [ 286.276667][ C1] Code: 0f 84 69 01 00 00 e8 52 a1 59 fa 31 ff 65 8b 2d b9 ab e4 78 81 e5 00 01 ff 00 89 ee e8 7c a8 59 fa 85 ed 74 10 e8 33 a1 59 fa <0f> 0b 4d 85 f6 0f 84 70 01 00 00 49 c7 c7 e4 ae 6e 8d bd ff ff ff [ 286.296271][ C1] RSP: 0018:ffffc90000dc0b98 EFLAGS: 00010246 [ 286.302337][ C1] RAX: 0000000000000000 RBX: ffff88801fc0c130 RCX: 0000000000000100 [ 286.310304][ C1] RDX: ffff88801e0b9c80 RSI: ffffffff871d445d RDI: 0000000000000003 [ 286.318266][ C1] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000001 [ 286.326232][ C1] R10: ffffffff871d45d0 R11: 0000000000000000 R12: ffff88807cbe8e08 [ 286.334200][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.342182][ C1] ? gnet_stats_add_basic+0x1c0/0x2a0 [ 286.347558][ C1] ? gnet_stats_add_basic+0x4d/0x2a0 [ 286.352842][ C1] ? gnet_stats_add_basic+0x4d/0x2a0 [ 286.358123][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.364107][ C1] ? gen_kill_estimator+0x50/0x50 [ 286.369128][ C1] est_fetch_counters+0xc3/0x160 [ 286.374073][ C1] est_timer+0x92/0x730 [ 286.378244][ C1] ? lock_release+0x720/0x720 [ 286.382917][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 286.387781][ C1] ? gen_kill_estimator+0x50/0x50 [ 286.392811][ C1] ? gen_kill_estimator+0x50/0x50 [ 286.397833][ C1] ? call_timer_fn+0x1a5/0x6b0 [ 286.402592][ C1] call_timer_fn+0x1a5/0x6b0 [ 286.407279][ C1] ? add_timer_on+0x4a0/0x4a0 [ 286.411973][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.417180][ C1] ? gen_kill_estimator+0x50/0x50 [ 286.422206][ C1] __run_timers.part.0+0x675/0xa20 [ 286.427322][ C1] ? call_timer_fn+0x6b0/0x6b0 [ 286.432110][ C1] run_timer_softirq+0xb3/0x1d0 [ 286.436955][ C1] __do_softirq+0x29b/0x9c2 [ 286.441466][ C1] __irq_exit_rcu+0x123/0x180 [ 286.446142][ C1] irq_exit_rcu+0x5/0x20 [ 286.450383][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 286.456019][ C1] [ 286.458942][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 286.464923][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 286.471343][ C1] Code: 74 24 10 e8 0a 16 21 f8 48 89 ef e8 52 8c 21 f8 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 93 77 14 f8 65 8b 05 8c ce c6 76 85 c0 74 0a 5b 5d c3 e8 a0 ed [ 286.490947][ C1] RSP: 0018:ffffc900073777f0 EFLAGS: 00000206 [ 286.497010][ C1] RAX: 0000000000000002 RBX: 0000000000000200 RCX: 1ffffffff1fa286a [ 286.505062][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 286.513023][ C1] RBP: ffff88807e004240 R08: 0000000000000001 R09: ffffffff8fd0c9f7 [ 286.520994][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000e6ef01 [ 286.528956][ C1] R13: dffffc0000000000 R14: 0000000000000043 R15: ffffffff8b857080 [ 286.536939][ C1] cpu_cgroup_fork+0xca/0x140 [ 286.541630][ C1] ? hrtick+0x250/0x250 [ 286.545793][ C1] cgroup_post_fork+0x2e6/0x8f0 [ 286.550654][ C1] ? cgroup_cancel_fork+0x110/0x110 [ 286.555856][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.560796][ C1] ? _raw_write_unlock_irq+0x1f/0x40 [ 286.566082][ C1] copy_process+0x460b/0x7590 [ 286.570791][ C1] ? __cleanup_sighand+0xb0/0xb0 [ 286.575734][ C1] ? is_dynamic_key+0x1a0/0x1a0 [ 286.580582][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.586567][ C1] ? kernel_clone+0xc4/0xac0 [ 286.591160][ C1] kernel_clone+0xe7/0xac0 [ 286.595576][ C1] ? __lock_acquire+0x162f/0x54a0 [ 286.600603][ C1] ? create_io_thread+0xf0/0xf0 [ 286.605472][ C1] ? debug_object_deactivate+0x264/0x300 [ 286.611101][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.617083][ C1] ? umh_complete+0x90/0x90 [ 286.621584][ C1] kernel_thread+0xb5/0xf0 [ 286.625998][ C1] ? __do_sys_clone3+0x2e0/0x2e0 [ 286.630947][ C1] ? umh_complete+0x90/0x90 [ 286.635487][ C1] call_usermodehelper_exec_work+0xcc/0x180 [ 286.641388][ C1] process_one_work+0x9bf/0x16b0 [ 286.646333][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.651715][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 286.656661][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 286.661697][ C1] worker_thread+0x658/0x11f0 [ 286.666382][ C1] ? process_one_work+0x16b0/0x16b0 [ 286.671579][ C1] kthread+0x3e5/0x4d0 [ 286.675647][ C1] ? set_kthread_struct+0x130/0x130 [ 286.680849][ C1] ret_from_fork+0x1f/0x30 [ 286.685703][ C1] Kernel Offset: disabled [ 286.692459][ C1] Rebooting in 86400 seconds..