2fd86285969a70e4a4da7fb3a64e4d858131a606ba47d1e49e5667218539a027b5e1b89979a8cd735e87b13b6167bbbc38268ab40527f5b46f488cba18d205ddfc781f54865cc943d826858f437608d77acd0cfb19085782bd814183e4afef64343ec58ef6fb398dd5d6fa81f00c6703c805196989fb96bdac7afd26d0c3944229d65681f8f01a4ddace1b384df8f656e2e5a40c860a91a94d79e4d8dc7d46268f597c5018e27510444d4cf95be7b7847adcc0649e860b525ca246503370795401c422afa0866e29bb8474a6fdcb3022944edb1498337aa9a0d", 0xec}], 0x5, &(0x7f0000005780)=ANY=[@ANYBLOB="78000000000000002900000036000000000c0000000000000738000000000cf90100010001000000000008000000000000002000000000000000090000000000000000000000000100000000000000000000c910ff01000000000000000000000000000105020006050208f50502086d0502000005020fff24000000000000002900000032000000fe800000000000000000000000000025", @ANYRES32=r10, @ANYBLOB="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"], 0xa0}}, {{&(0x7f0000005580)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f00000055c0)}}], 0x6, 0x800)

22:19:23 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
shutdown(r0, 0x0)

22:19:23 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)

22:19:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 32)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00', <r4=>0x0}) (async)
r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x6, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x3, 0x1, 0xa, 0x2, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0x6, 0x6, 0xffffffffffffffff, 0x4}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x2e, &(0x7f0000000240)=""/46, 0x41100, 0x18, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r6, r8, r0, r0, r0], &(0x7f0000000500)=[{0x0, 0x3, 0xe, 0x9}, {0x1, 0x2, 0x7, 0x5}, {0x2, 0x1, 0x1, 0x4}, {0x5, 0x5, 0x0, 0x8}, {0x4, 0x1, 0xd, 0x3}], 0x10, 0x1}, 0x90)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r12, 0x801, 0x0, 0x0, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r12, 0x22, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000000) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r13, r10, 0x0, 0x100000002)

[ 2252.733856][  T869] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:24 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x6ca4, 0xfd})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000280)="f943deaffa552555a0a92217497a5581ede43b7185223f9bd768080822024a0f1b8617b2ec507dce759e934e775b044d8ffd3a92323bc00214a8a7bc0b3c4367d7893c2f437bb1f644afcbe7a5475caf39a2f3668c823bde5b2f1602625b8f746d640bfc910cec2cfa8db106599b830b74c7c6e67ad7fb15e06884f60972aab1a185afde862455843f5fa8e6e3710b862f37c9d319ea8983b4161d3f7d403430f84ecd9d3ff6bb656dd8d9f7800348f2bceddccf59e0a552930d57672cc8a4807a0bfb266719444b149aa7fcfab33265effb6c9189ecfc44afe896d179227f5c5e12e49c25135f4d739199fbe157013ffe3f74b265d94e53cc")
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x200, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
listen(r0, 0x20)
ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000000)="cd933a5cdc632dca7f9a298bc39fc2592db1647434c6b6e26ef44818026fa9a1279f9504b07743c500233a34603a0b24abee661659e00239802ec14ab84c72def70c6dec0e07ba922b7a929cd843604f9eafb6957692945f16ce46b91aed5ae726eca5b1355139589ccbb81fb45a667d5f680ea7fc5d2a9b31926739695b0c8546e8407d7a330de97e077cd7e0266e7616a6c80706d4568571d2cdac6f9db081395e90fee038dfd75e19976308a7d417d32738")
shutdown(r1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x6ca4, 0xfd}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r1, &(0x7f0000000880), 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000280)="f943deaffa552555a0a92217497a5581ede43b7185223f9bd768080822024a0f1b8617b2ec507dce759e934e775b044d8ffd3a92323bc00214a8a7bc0b3c4367d7893c2f437bb1f644afcbe7a5475caf39a2f3668c823bde5b2f1602625b8f746d640bfc910cec2cfa8db106599b830b74c7c6e67ad7fb15e06884f60972aab1a185afde862455843f5fa8e6e3710b862f37c9d319ea8983b4161d3f7d403430f84ecd9d3ff6bb656dd8d9f7800348f2bceddccf59e0a552930d57672cc8a4807a0bfb266719444b149aa7fcfab33265effb6c9189ecfc44afe896d179227f5c5e12e49c25135f4d739199fbe157013ffe3f74b265d94e53cc") (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x200, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
listen(r0, 0x20) (async)
ioctl$sock_netdev_private(r2, 0x89f4, &(0x7f0000000000)="cd933a5cdc632dca7f9a298bc39fc2592db1647434c6b6e26ef44818026fa9a1279f9504b07743c500233a34603a0b24abee661659e00239802ec14ab84c72def70c6dec0e07ba922b7a929cd843604f9eafb6957692945f16ce46b91aed5ae726eca5b1355139589ccbb81fb45a667d5f680ea7fc5d2a9b31926739695b0c8546e8407d7a330de97e077cd7e0266e7616a6c80706d4568571d2cdac6f9db081395e90fee038dfd75e19976308a7d417d32738") (async)
shutdown(r1, 0x0) (async)

22:19:24 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0) (rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x22, 0x2, 0x4)
getsockopt(r9, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f00000055c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005540)={&(0x7f0000005500)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r10}]}}}]}, 0x3c}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000005600)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xd1, @local, 0x6}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000040)="e3f0a093771520483227075c2a7aef46002e08b32433a8d93e6ea4f16ada786ba36200a7767771d005d106959bad04ba3cab4a680fb5d9bc532eb22422208b15e10041b441edf63e2948e3fd636c17a6c87769", 0x53}, {&(0x7f00000000c0)="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", 0x1000}], 0x2, &(0x7f0000001100)=[@hopopts={{0x128, 0x29, 0x36, {0x33, 0x21, '\x00', [@generic={0x1f}, @generic={0x8b, 0xf8, "363a236c5a59158e459f8e7b0302b01031d9a88ceeb77596477874aa1b8b9087e4f4d25084a8328bc066e22ff0c940c817c95feb541c8b32f24a142045832c23b340c5b60fa7909c88f594e2cf7d7689aba1babfee5cb7c2e3c739c8e45eb84914edf5e894dcfc6fba00683146885b90038299b7de40ec5711c8cccf5cd72777a04440a858745a6277b8cad4d29b1875564e0b712a060a73d89b342f2d686200fee7a52767366439440fa4398870a67082ba0addda32692d89c0b4a832a1dec8301e9d781ed663fdd15ef82a2c085d09d597b628d14719b208105bb1200d539acf766cc8c68e049432b13d6e93eda3be0740f9cb55e92158"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1f}}], 0x140}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001240)="467e6c717fe242ca4368410104ff377a8502027b34a5e072f66e001fb3ce16fff05ec40f33ec1b8bc2001ee7c4767510691e124747ee51b9e55b5302a32773272f2e377930c585fa27188b3224f2c809745bf45b1daef407b4274420d0f43da378293082d0a74900b2c0fd174cfc59bc", 0x70}, {&(0x7f00000012c0)="23a69187682e7588d77a2c8853754e725d0cf072fb37120506415d52e71c160b9cd24830265cea1224c1db21eee64042a76c036270a2f1ba40ba3a1cf70d951287f04bee4d07d38878f3109a71807076419d8fbf858b114f23bddeeb479262ce33bddb8c232b36cdda6303498bd8cff048b7e160fd085bbb678aea5f785737cb603c1bc992dde1df2ea4e2e13ded06713ed382cfb0f727", 0x97}, {&(0x7f0000001380)="d3c076ff1c0ba29642aa394545bfa3a2d490c27e30d161754da79c19c9410f56616a1919d80ccdced563f85b92adaf15b67d499c2aa582b7cfa82a0eee21d88ebc9e84795157320529fcc01e9372e548b2386797f05ff60c2ee0ceb04016fc96663cb6182244bc13588c3dd20345a649d8bcc09f1c1661636ea951c719caa462ad1fd3689694f58930a3b2c0ed22ac97dee6477cfee689135cf3d1e11bd96fdc84bee928ae24a160b61750658b86973c29f51d60", 0xb4}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="eb63fb4a2a607f74f6479b9a548a5f18ce2e5327f60e519cef0b558b0e03ec8e52f600dcef5cb3f765de9a8e2b73f2dcb4281b28bf665c1f75b6977ce8b474cb1797af6f98b6cac9fba3969b96738cdfc47ed97180193512484a9745e7b1b5f5fff5c35ee1483de6862e3c0d315b66d76ab0781b23680a26f3a5277fb9f5bdb53427011732abf3f2c2b962d04b4361878026fa1142979e6faebd01d428ccb0505417b3434ebc21d8ca8ba8f84d3ded6576b1d7a91346a6d518", 0xb9}, {&(0x7f0000002500)="4d6b55efc30f6a0d1e152179a85c60b6dca4cb52e6547af9b5c2b48420bef4ff087bde56f4485af19c35a069d3defbfd90bb1b6e3809b48b9878a79af70414644464457fcf0bbe3313f52227bab1066200a3515037352dffd1d8dd09a839a19624c05fc9e90c4d20619b3b2211f495fd46565bb46a8ca9b0f876ab61bf901f7d0f325f34274200c4af159e755ea25bee9321bbf7be40fc3e8928782867733ea6c12cdae53de882207e9a140ef00c1045eddb56042e286f9dd802b5cf7359d29bad75f51455e12f2d4d37f24b24bf4b13fb61c3bd71e050308e7b74ed269e27ad22afc684684cde294bfa8f28f508323aae933c3f3763de6ed4be9e8b791c8cb50fcb85e2a602535c85a119058531fe670d3385715a9d22460858670c3a3b06d55ca2204ccb7910ccb0f839e6495c8be89eaedd6061ce3f8d43112363e64ce0ac90b94db7dd8fd945d7493a75bc9470d2bc3871adf0db580c29063043156c2339a9689fee498cc8ff6ae0458aba77b2454181c6569f76ff8fa9e0bcdc93206dd3124060169cde83a7f9c4c832c500f7588c48c43d8d8ca1d63b84a7b8e894146d23fadba75ab98a279f089c6f6f030e93302145a913910f782ed037041946981f48da6aa9fa2f045ffa8cf91aae0ee8fe0ea051a93d7109ef94a9566701bc3c34c8702dda542050e8e758456f91bd39be21ae8e8b0241be5f43800dd7738c4e1aeb64893c34fac1c0b711a425b9b529bd1176a3ef931e1e77c58fc80cabacb1b85ccbe9ba995cb455f1fb4a2ac59c0c5118bd29a172c68b53644f68e7a34b30b4b44eff327814128e4a64eaeeee8f442dea7d1fc369b538ed8b7e1f53d0df83bd3d122734bc5be977214b7fd89f762200de74bb8642c4867ec21f656549af77bac01fd8ba9ffa679bc5494a8fbb8e1dfd8e2daf982051691c1fa15fc036da643bbdd2c894494cbfb5cc5dac616aeff71411754a13dd88b95cff7c1245a9119932538fea2eb561b171146af348f8af43de75a38ed435a4dffdd5a5eeb8abce8bf7306dd479eb3d36b804321fb5095daacf568467eb1b515fd9116081ace2cf63fbebfb94cb7384623df9588ffee384d13bf54268b764a4979ac26ce1187e8b50d732078bf9d0c34c6baeb7dbecccf6c0ac1920885a9be98d42d165e970c8ed4a2e01df4191ed50f0d64ef3785df0d585df48f18e36955682e64ce9f0630a7a4554f96f60c5c6bd11bd8ea583a484ce4791f0c38382d1dfa1f1cf8857ba14a54b7fa2fec186ff53913777fb05afc2d49715699e803a89de88abade9ad30db9b3badb6dbe58c27f99741655a161b54a6ac21742e80b870a158e8bcfca1c2ce8d29a17db164949fa588243c4407ccbc5b57dbb419e68aa5b4f15a52d04787686582561ed6ba2bb2b94bd9c19dd7b4b9a2261840f5ab62058c13713dabeb084a1dcbcec9312cc2a5a578fee1adcff1b0f062931c30a5a75c83fd910e315da8457ba31a155fec62e669039126bc86902666895e7784b0c86ad9b2e115051edda9082a891c46fbdd7bebd2749b16d47a2e02ab6bdd8f6a44d3acaf33575bcaebea3fef7143d12dc230561739f8f10ea919343757ca9d5ff3e4e435d64d56b12e513587a45dda7e1dde863593ed19b21d5620f7633ccc9f334c8aa6f586dfe3a8fbf2894c6468d0f84e9b6dd20f97d79bbf20c9252bd59f4f4260e623c084ade6fbd864ea339b623d13591879333bd54038f18e07163837a75825234a43a2aa507c331617fa8dd485850d50b6a49c5f021686631084ce6fda7d1cd56b7a205e0e8e1edee3eb0889f4aec541dfcfea0d55f74232dc441445094a5f01777bf4f378034a23b623075f5a080df511fc017a5557885a19bda4342207c666d8361575325eb25ebacc4cfd9c06a092b71334bb283b53d8800d8432162edac4e3d41dc3b74a91fe9767715bdec836e9a98ce65aae70bc7ae5b3ab899267c8f1d9a6da098d35690b6a5e56962fb73050e48e28437d2512e2a1c4e63419066bc906f8d68a7b0aa14ef8437d5e8d843c61f4e8fe3cd47e80d1d13df29f654fd182babb00fbe2160574c2958b9a660c531d75c8442932b5426a55adb71d341db54be8028bf6e9e584703005d7be36fae95c9b4548526c2513497fb67ac75d640db8fda051cd3b9e513319ec695a97d4145d3bc5913bb2b53b3f52126bc1fa9506adfddc70acdbe321e3af8da8a8e4aed3833ebc82c1afd45a25d8d00a91050ef96847e14389e2bbd9df79ef77cfe7db539f28760ec92ed485cb9eb077ae02281a12cf63ff3c06460622a2b23946d7bca7d9a691a40e74a8ad251ac70c18b761c6c7f7dbe98f9f2a14d690459f0e70fb6a5917962c6a30f3bfc882ee0e1f0009691265eaad06ec854f9bfee7bfc3b004d9e0651dcd51b87eb60d2b87adc232393370b850b2ea27136df114a36bb5d0bc660b7baccaaa14164e5c3f60f47f7f4b422a6acb79737b673de6c72f2bd4fcba52483801b5a84d09dce7acfda50a0bc1a0dee37a28f04d5fae5fade8877316f9d2dfc89478ec8d5b67775fef8cb89cf7bb381ec07377368b192573ee75a8d553ae80e139b1b0e5cc7228f9e8c54f010ad21dc6e166d33de3ea722065a48f17125eb00ce441469f691eea63475e524d03b0be1a49d41c584db369b6a6396c5dc76af9e1b97055344878e366b6f7429136bd1f559a841d12becc644921276721c556d7c4f9553fe628842d943479c215376243902d0b5ec8e2517a95cfebaa25a19c212699a5d541405ed0a9831ad5f28ac9bdb482e0859c4a7c4d749de28b8b6823ddfc9eab605ae38e53a5c02cfd1c99ad40b155b557df7d22b8ba96f62437b09b26b8930ff6988d49deabad6345db688359410e8b30b2ee58d52b2a5b328e482295c6e1b7fc6fcd31809da088edc2e77b8c9bc88f5a0392d02a0ceb8af2c5f014300062e9a52d79f66ed32b0baac58a9e96826d309b96693ca22ed1a7fb49eb676d620f33d2f8502c6a289b2d02f424ca5c505db27ce4f09d38d7cca2f6266261eb84ab8487d1938d067b22673401647568d652654b39552b28710f5fdcf164bafcdbd85b34f16ce4a43453b32d761b2e9eb8078237fbc007fd1d0c04619d68d68bb99ef63a334dadf02a0c7eeed33fb46b8425d6ab1b47620082e3c9f1929963704e5891542d496f971581b59aed51301ab8e62e4b8b6eb91e9945ce9df986f2c5d6debfe54a9f46a4a7c8b5f72ea1c201116699fb7ce82948c56b71134ab448e8760f6044af68fb835cd9ec8d6bc2b8dbe579ccde10dcbf4623085558a928f3f6386572a37151ee108a006a093d071a7ffc79d5640d6a60bd9dffff086418d3d79837157da57351e99fd3dcb2bdeaca4ae88b008132a6b0da52b00e43fbc60493f0c84a3fd84b67fc2763853eede19a7fabf723bb12eab900f4f1ca3d87b0e457a287034a18ab7e2510365f61e6c48180de42ab9917dcde040ad9e2ca3fd5cc3a83fa4d22a11aab6a457c5e51644e27f1d48dbb4e87e6b663966478dbb63e399624f47b0af4942bc9b77a255b284fb8b90bd375a313f9aeb8b83ce9d7604428f4140d2614730f9c4e531307e4d45cc983f2e13d88c89c19db749373da99cac2e89bb73bda3cdbb8d2cbe041639e1472fc6b5694fc8e2cb570203f6577f58ea0b57a90da26c19e306506500671f15769a54beebc52219309a9a68024a2b9d92ed3120b706df256490b6b0145db70e87114e52468c86bfd487c13fb056bfbdf7f912ca0886f4e63264d7adb9dd02a7752a05b80234dd2a97574e7b1564b2f02129ae2959d513508588d2c009b90c7264767c5d32399b4554eacf6b732a94c4e31e4901214a3e94446069f37dcd7ef0a311d98357632123e528237e77285b3c63aab9d59148ce115ec3285fe987a402ca70fe88a40b4601fbc9cd8165617bfe24c93916708670ff79ee20b6c6a5ff28ee3e1fc974521d57b0db95a5874a54cabe78222e91c71d6758c44e8f28247194d35460e716257229fdb3bb595d1d3fc0284c155fcabc146fec3caf2d6da52c826a9589ca8db65957bbdc9aad4edfff8e41d3f830bd407f16838b1725b7852437bda3f39ab07ed551b9f0f76dd158f90b8d1e723466918316781a555ff88712db4bb650af87e984c0ea94a55cf3347f91e6d8b05ce24959ec1ba007552bb94534a810e14b7faaabc95c6f68d2b08ffa89bfde09edb50c80c053eee80d26aef9316991a709093474a991e99b7ae7ad89df39d22e6e2754f7d7a3a79e6bd265f664e45e5a3c01427779b16e123503b202b24844a97ebd5585fde45ccd338773ddb41632ad53c001f44edfca8bcee37a934bfc966db4ab9e63b80e65235b9a9d8f3749cbb10dd37a3588cd923a961cd388553e35a3a897c57eb4d6892b5dbf0fa22b4bb8f95cba0bebbf4b67c07dbae3b96f11abe66c2bc4f7531c911dcb2b8c15bc2681021c1939ca40b43ac44e536111d056475f6758643c80eee6aefb740b3a302b43c3eb843f744e7d7a2e5ba777e00ce6a35f5e51f40377d73af9a5b40259f62c3b979c2204629a86a608199f4746d811e93198424ec0105a132f7d20678e819afe30407a3bcc5558151e9863e65cf13a7c6baf800e2aa70e79874547ea54fef93f9a2093047f9f3ee212b3c08556178e8277b41114a2fd02942e1bee10346738c491dba8489adae8b3b8405e1c48b0d26f33deae0e9648af49ce098c526b466dc619b527ccc248e021e39a73e5d9e2d203914246919b845bf5f2241dc0d652d62cbe57b3edc76a7ea41a90bf2b0dc6f484cf69d32afb559d7c2e8713ba1ca7ad31655abe491ca82eb24695057056c43448af93d32691231502c9ec62d505e524b72e659cda8e2a449a300c08a3db528c30a39e97a89f607b2c978c00d40a5a92706ddd14ab5bcf4461e84875b390abca247c54eca11ae615adcbcf9ec37f048c1583f21727a08a014180f0c629630b901d3296d1fd52346fad75172f76b198a78b2be39914cf053bb3d68a89b78c4bd7a99c7c79fcf08b3f36373e7d15b9fe287fcdf75ebcde0f6c6b66de9be899e43532b246d82918eeb9c0b0eeef574db24279684d0312a838224ab4a5a71621a5288c24411a2f9465e08e8db5f07a5abe413c3fa294be0b4cf26e3b05d610732e977f9b6bad39dbbbb74be792048cef2409a1e89f6bd779db20293b1201b706093e0ae610f922012b1d420dd13294b7a09fe556730e18af6eb54f98d6cffb3a341ac86fb63b0b8f64b36fe7ff0bbadf271b758d5d9a7357eac83baa526fba431bf688dc99921bfe6860523d13d49b7fb72ccc30859ea6e1df20e9ec2f30a093d54bdb8cdc5643b88f60b03d050c00699e5f53f8c6c6563bdfae8e091c8f1f73a83bf6e97de79c9c964025598a9cd3ada8777f45ce80dc877731475fd685b3fddbd76a1810462ecd28228bd887461a6a34e275832c82a47e7103d85924d53c58882ebe28f84b2dc9b6b1b9800c900c152ae4c2bcc74589bed35803325e4b4681e940c8e040c737bb0dd1107a19161a87bbe3394b33b44814b47f7f8c45ae5d4db1834d70969e02101914ee22c7747d0d63cf57c01dddbb7ae14cf0ec81c70c8789a43127ad14999cfb64a763a6a7a64e0050c9101393f2760e18cdf0a72a0981d3abeaef508885d8f556f6c2ce0c8c61e04d6bd39ae2bec41d1aa6f742843b6fa40fdc5003ac3fc9f6d1eac65f043685c88c6a4119a6e47dfd29a0bc45b8d752e5cef2e2906f65b6b6fc461a09f0996a1618a9d40e29336bd108387dd", 0x1000}, {&(0x7f0000003500)="f77dce3d4227f9bc2ad250d16eeaa04c879e15b5c2f37e6a8de69a38caeb0b9160a42250c6519e4d8ee1e78ef789b86d500035aa1b21d1a32f56a883409c41c47fcd4813f26b43614ee199f41af640544ba590eb04f0d9537277947ff0601affeccfea570236cdd36ce75306e7b9cfc0f903afb8a73b9364a4253d983d9ed961225fff398da3d62216b6fdab6dcfc11cac8c5d3d3bc5b2fe69f599fad49c72ac4e58ffc34cd5d7fbe3d59f0500524093d8b85947a4b37f250f91e9208d47502859feb337cdccce3e9d16f288829e74bdbff89565f6e1c4ba", 0xd8}, {&(0x7f0000003600)="ac1965a3e7aa090fc207c253659215d119fc7f0980e7e5b5c408d03b7408ef2a69889b433b550aee533761a17abcc33354c426abdd4ac340d6962d9617ae387012c478f4dda14557e37b272f076199ea6b898af1a47755e4aebd2cb55b4876c27957e881f3f1", 0x66}], 0x8, &(0x7f0000003700)=[@rthdr={{0x98, 0x29, 0x39, {0x59, 0x10, 0x1, 0x1, 0x0, [@private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private2, @private2, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0xb0}}, {{&(0x7f00000037c0)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000003800)="271cab0c8f62b085d481b75e731597d41827644e7bb514a8837c526d24baa4f366ec57020b0f36407b9470336ba11693ca84ecb79a11fc47eab4461ef5db8b9d1726bba593abcd902ecbc9785b564a506262402cc72801634de34c6633a87d07dca51d488941115a293685cde5d60308e1516668ea697ee96e0edafba5aec616001f0166840db4b38720cb0cd86218617e23547badaeaf1ccba8ab8cb988350ee7ce991a3404ccf5bc5e8d2434c482fdc3bdbc287808056ed26a9370d3ff08fee466627063ee6ebe7a0b96cb38656e0ca8ce57788e00610efd46847743ffdaa202def95882", 0xe5}], 0x1, &(0x7f0000003940)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x96}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0x32, 0x15, '\x00', [@generic={0xff, 0x55, "d9efe9cc64c30b95e2b51d2fa5201f5bc5379d44e979a6f5f6b0b371353a8663880859ebcb993350189289650f1379b54047d5e83ee4890a2e3f3e884018dcec7ae7e7d342cd89e624f52ecc30f0df14ec385e4cb6"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1f, 0x1, [0x7f]}}, @ra={0x5, 0x2, 0x5a4}, @calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x7f7, [0x3ff, 0x200, 0x1, 0x100000000]}}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x2c, 0xf, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x1, 0x13, "0bf32f347533047ddb5d8af9a35bbc471e211a"}, @ra={0x5, 0x2, 0xff82}, @generic={0x80, 0x4b, "a9067830b8700eb1bf4ed5bbfd7e7d6bad1cf0fc89e87b4fed8946ca53938730cfd94f0e8ded40a2658344e472f91c6780486d797a36f09c86e804059a0392b472b839653358ee139e45a9"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}, @rthdr={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0xc0}}], 0x240}}, {{&(0x7f0000003b80)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c, &(0x7f0000003f40)=[{&(0x7f0000003bc0)="2adc42f58726", 0x6}, {&(0x7f0000003c00)="96201986a13e45f6528d9861f81d0dbbf1086b4bc0b160bedc01f56cd1475d34e3ee9f875e858b86097a1b1b03255b9992397cd53a001ec840cced7c89dd9e434f2fa92ca2738a18a4c14154d2d5a244e5ce5aba5df1cd1354158c75f43360f4549232b9ed7ff57f586809c0c9743aca3b4124c00be53e0ca9b1bed35901599b634a230e96ec", 0x86}, {&(0x7f0000003cc0)="f4a8d2e0b896731613a6dee842986bde619205fb1190fbf72f7c640dfbf0f1989e2b8e672836265615bb228c782b45c90270b36aadfacb258c5874e061abb5320173b98945dc01021a8b0d68b480750837c2a614e1a7ac746493817ca2f3f0484192e402650911804471b182f8b8c058d0dff098ccfe83f38f73d5cc19d11f07c8bcdc6ffa7ce4107c440fb46d6e35d5667ad1bf45d44b18a4a154ea5b291c1fd0668a60a1e8492f22dc54cd51492824bd279a3ed9396dc37eb37a11e1f0a922b6f6dfa85c2c9f67", 0xc8}, {&(0x7f0000003dc0)="59710a721d5aedcf33c2fc3254da45bbb8ba8da24097e4708545cae8603373b068ce6b2711325ad4f22c81a66139791dfd83bfa20fbdbcb2028e778c9fe12580988f8f7fc60f12caed04", 0x4a}, {&(0x7f0000003e40)="6e58372cd942324aa4a6a99b47bb967428e8ec73beba3ec6539baa0cd3d55217529ea39ddb65b48c9355043a9a7dd31a341a45b483c62efa17746dd6f0c6246f7b94c1fd043a69790dd2c538c9545fe5da97eb6f8f41389a5971c9d39a152c419db71a66443c798cece868e7af1819e27ad42d4a508f7db9d1683654adf1018d68c7c9ea09564a3244dd188ff21343e7e96cd211a01d0726fc79dfc8d8eedca14e1c6ffd7a3065c6ce7f0b59dc43bfb2590b440c180ccceb183d1d18bee2c2bf8081e6899f685cffb6bce5ed407eee3bbf26056c19796aa33604b5b7e37aaed600bad235f45575a12c4d5df94ec514dfdd0eb31e1b4b", 0xf6}], 0x5, &(0x7f0000003fc0)=ANY=[@ANYBLOB="24001000002900000032000000fe88000000000b019239000000000001000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}, {{&(0x7f0000004000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xde}, 0x1c, &(0x7f0000005440)=[{&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005940)="2982290f36b08133865dc2d0423a37a30bc2b6a766148224cf9071081e2aba8b0dace97b91c143649fad7621c8d49ce88b09396fd08c311ac7dacdb4ca34659d4627d5fb45d5e192ec754f8f3b95620b08380765f47b58490b8a463b39b59548b7caa569674ab86daa84584823a84705939d53b4a476ae27b0350a5834ac322bc9d517b5851092ff14ce039f6acd4218acf0eb9cad12b312e1abfde1fe9ad307b893aa8beca34990bee0749e767a5ddf0a7a87c79b5568c3f3ef8d7f2cd48955dc419b12fa9bec9a3cd7c69e5a4c29d0380c8b772f6c96204cb4584e98c2ded3b3cc4f00e14b718cae7f5ea24024f7d11781046bea", 0xf5}, {&(0x7f0000005140)="490726f4b4fe06eb19eabca9c2e506a960b1499d92315570d3c2c7fc104185a9b4732aacc35fdbf0761c8d99debf1e14bee542200d0cac513fb86eb2b1db3605b7ebe9596063c939bc67a8642be1aa8827966ab2eb57137d4a1c091c6cb0a531fc452699ab53e5e9f49d7632d03cda2e12c7810aa7b91974c941c262f8acd5134a12ab0077e8d422c3cd42610bbf30e2d064228cedad5b4a86dfb851f3b9b5c4cdea3ba9190492585c0aebeca39e355a91b8c578405ee327fac631cde591c60751da02de9acfbf1b46cfd775382d112137eab51c11873e6d1956012194828da118b8e9a149c5b7fc5caeec934612327294396c6258ca", 0xf6}, {&(0x7f0000005240)="98e6593c979a883370d4d34a1b30e95d10bdbdb19d78b5ef9f1d10dc1d3c11ffef80c22fef5ac2c639da9c51427d09f0449415d28bf49e260cad31a9f7eec0d15dfe7b0f6899e66df1fd5e7186ddb55b228dc16fd968895f8477da0d2d2460424c815de6ae8fbd6afb4a2b19374c3dff742b3fccede32b8fbf1668d3e2f7f0abaa44dd465361aabf83d09f3561442620b2bc53243b1074c0c03374d414d05f2bfd3d13ed3ddaf8bc9e18ecc0524ba2725bdbfd27d44ca23a1c79763f7b0f9a91636fe067fbe740e5d7f3fe2ed6a69af1a03098179efe718ca9222586e2d553b99a837bece654c1574142e9c844b20843310b86312782a16f1b57536e8b", 0xfd}, {&(0x7f0000005340)="474a9aa6f925141d911b6bfd2cd1a7f7a723d2fd86285969a70e4a4da7fb3a64e4d858131a606ba47d1e49e5667218539a027b5e1b89979a8cd735e87b13b6167bbbc38268ab40527f5b46f488cba18d205ddfc781f54865cc943d826858f437608d77acd0cfb19085782bd814183e4afef64343ec58ef6fb398dd5d6fa81f00c6703c805196989fb96bdac7afd26d0c3944229d65681f8f01a4ddace1b384df8f656e2e5a40c860a91a94d79e4d8dc7d46268f597c5018e27510444d4cf95be7b7847adcc0649e860b525ca246503370795401c422afa0866e29bb8474a6fdcb3022944edb1498337aa9a0d", 0xec}], 0x5, &(0x7f0000005780)=ANY=[@ANYBLOB="78000000000000002900000036000000000c0000000000000738000000000cf90100010001000000000008000000000000002000000000000000090000000000000000000000000100000000000000000000c910ff01000000000000000000000000000105020006050208f50502086d0502000005020fff24000000000000002900000032000000fe800000000000000000000000000025", @ANYRES32=r10, @ANYBLOB="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"], 0xa0}}, {{&(0x7f0000005580)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f00000055c0)}}], 0x6, 0x800)

[ 2252.904158][   T28] audit: type=1804 audit(1696025964.230:10652): pid=853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3036/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0
22:19:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x321, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18620}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x76}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2253.067925][  T898] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2253.093370][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2253.099892][  T898] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2253.100595][  T898] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x24}}, 0x0)
r4 = socket(0x22, 0x2, 0x4)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x58, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="6bc6df56fe0e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c804e1c9f99e4486c21568075799bafc"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="abdad8246994"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x801)
socketpair(0x1d, 0x3, 0x401, &(0x7f0000000280))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000200)=""/112, 0x70})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x88, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x88}}, 0x4008090)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:24 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)
shutdown(r0, 0x0)

[ 2253.236219][  T896] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2253.270351][  T896] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2253.301304][  T898] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x321, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18620}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x76}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x321, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18620}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x76}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:24 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)
shutdown(r0, 0x0)

22:19:24 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
accept4(r0, 0x0, 0x0, 0x100000)

[ 2253.466196][   T28] audit: type=1804 audit(1696025964.790:10653): pid=913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3295/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
22:19:24 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:24 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async, rerun: 64)
r1 = socket(0x22, 0x2, 0x4) (rerun: 64)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async, rerun: 32)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 32)
shutdown(r0, 0x0)

22:19:24 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x100000)

22:19:25 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
shutdown(r0, 0x0)

22:19:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x321, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18620}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x76}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:25 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
accept4(r0, 0x0, 0x0, 0x100000)

22:19:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000949900000000140012800b000110677265746170000004000280"], 0x34}}, 0x0)

[ 2254.059843][   T28] audit: type=1804 audit(1696025965.390:10654): pid=939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3037/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
22:19:25 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0)
shutdown(r1, 0x0)

22:19:25 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
shutdown(r0, 0x0)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

22:19:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x24}}, 0x0) (async, rerun: 32)
r4 = socket(0x22, 0x2, 0x4) (rerun: 32)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x58, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="6bc6df56fe0e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c804e1c9f99e4486c21568075799bafc"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="abdad8246994"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x801)
socketpair(0x1d, 0x3, 0x401, &(0x7f0000000280))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000200)=""/112, 0x70}) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x88, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x88}}, 0x4008090) (async, rerun: 64)
sendfile(r8, r7, 0x0, 0x100000002) (rerun: 64)

22:19:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000949900000000140012800b000110677265746170000004000280"], 0x34}}, 0x0)

22:19:25 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async, rerun: 32)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 32)
bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
shutdown(r0, 0x0)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

[ 2254.475813][  T939] __nla_validate_parse: 123 callbacks suppressed
[ 2254.475838][  T939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2254.501202][   T28] audit: type=1804 audit(1696025965.830:10655): pid=963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3296/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[ 2254.559464][  T939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2254.610079][  T939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2254.617113][   T28] audit: type=1804 audit(1696025965.860:10656): pid=963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3296/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
22:19:26 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r2], 0x24}}, 0x0) (async)
r4 = socket(0x22, 0x2, 0x4)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x58, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="6bc6df56fe0e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c804e1c9f99e4486c21568075799bafc"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="abdad8246994"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x801)
socketpair(0x1d, 0x3, 0x401, &(0x7f0000000280)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000200)=""/112, 0x70}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x88, 0x2, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x88}}, 0x4008090)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000949900000000140012800b000110677265746170000004000280"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000949900000000140012800b000110677265746170000004000280"], 0x34}}, 0x0)

22:19:26 executing program 1:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)

22:19:26 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
shutdown(r0, 0x0) (async)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

22:19:26 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
shutdown(r2, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002100000000000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0)
write(r1, &(0x7f00000009c0)="f27d56bdef756492d0c978e2a31016bdd0082006b8775b820ae0601b8d489c8e164b2adc5d1271d25448e9b105b2ffa202619c1f21e5380e17d282a9f65a2ef9955de954563132ddb9783a281beb0f38044a20d0b1066f71891e739016530bc013683938e8d5576ad3ba77bf314d83b5c6e748b4d67d8864649bb4c0e0fd6144b7a0f6ac4fde9f0bb32ec032286ac14fed718dc446f8eb52936249a45d50747ff5429a67362335b10652d265e9f6ef57a8827892c19ec85b0edca703f7b11f3b9fc8adcff087de8546846df3c98f36cdfa94b5d4ce527191724078ae209cc92715253449112c2ecc1dec822c", 0xec)
recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/5, 0x5}, {&(0x7f0000000700)=""/227, 0xe3}], 0x4, &(0x7f00000008c0)=""/176, 0xb0}, 0x5}], 0x1, 0x14140, &(0x7f0000000980))
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x4013}, 0x4000)

22:19:26 executing program 1:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)

[ 2254.864331][   T28] audit: type=1804 audit(1696025966.190:10657): pid=981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3297/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
[ 2255.079404][   T28] audit: type=1804 audit(1696025966.400:10658): pid=992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3038/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[ 2255.085807][  T992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:26 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) (async)
shutdown(r1, 0x0)

22:19:26 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x24000000000, 0xfffffffffffffffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)

22:19:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r3 = socket(0x22, 0x2, 0x4)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB="c62d27b9bdebf40908ff7c850704f818569da1f1aa77784765117d9cb9aa8e62052c8dbf0c56b4c1c0a733a24107ad7cfa7f86cfdd6e9a30c6b951cc727b2a3a583fe5bce29b2b26c51f19315f8e011c610e3124bfc4cdd546ca3102b91feeb36f4491810dabec7b96026fa671ba00dbebaca1c5d424ac48d86762f2b34834376e228ab2deca89aaadb676285d5ae513cab4f6573863b76585504b7c8444cae77e7fec4f745b99c2016d411ca8de2387c012ff830176e21889ece16a54fb58ac0c31041dc26e5c41789585398bbd5c3d7c89a2bdf0"], 0x3c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000000726574617001000000000000000000", @ANYRES32=r10, @ANYBLOB="1389d3dc95b8388764b6cf8cee3cd5811e68dd0bacff86e3cfc4f8582d78d78d868e0d714844cc258f501642f1f930afeef687386a3cef5f2b259b713e9f409f9c15bbab0af315cb8879b71437d1ecdc6fe1932ba8f31e05e5bbd5a37ac67b7d71ea600d3e1af13e3223f562000597007da887eb3d071adea25b3e3031f43eeb4380c40f136e9b237e748bfa53e0703cb93ffe"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c80000010000184000000000000000000000080", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000e00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006500000329bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="100008ca27d92ccd5db98e0008000b00b000000008000b000800000008000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40081)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x58, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fbdfdf251400aa3608000e00990f000005000c4a6382f400"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:26 executing program 1:
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)

22:19:26 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
shutdown(r2, 0x1) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002100000000000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0) (async)
write(r1, &(0x7f00000009c0)="f27d56bdef756492d0c978e2a31016bdd0082006b8775b820ae0601b8d489c8e164b2adc5d1271d25448e9b105b2ffa202619c1f21e5380e17d282a9f65a2ef9955de954563132ddb9783a281beb0f38044a20d0b1066f71891e739016530bc013683938e8d5576ad3ba77bf314d83b5c6e748b4d67d8864649bb4c0e0fd6144b7a0f6ac4fde9f0bb32ec032286ac14fed718dc446f8eb52936249a45d50747ff5429a67362335b10652d265e9f6ef57a8827892c19ec85b0edca703f7b11f3b9fc8adcff087de8546846df3c98f36cdfa94b5d4ce527191724078ae209cc92715253449112c2ecc1dec822c", 0xec) (async)
recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/5, 0x5}, {&(0x7f0000000700)=""/227, 0xe3}], 0x4, &(0x7f00000008c0)=""/176, 0xb0}, 0x5}], 0x1, 0x14140, &(0x7f0000000980))
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x4013}, 0x4000)

[ 2255.167645][  T992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2255.179462][ T4445] Bluetooth: hci5: command 0x0405 tx timeout
[ 2255.233058][  T992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2255.275012][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2255.301346][  T992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2255.344637][  T992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2255.395861][  T992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2255.471877][   T28] audit: type=1804 audit(1696025966.800:10659): pid=1017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3298/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0
22:19:27 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
shutdown(r2, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002100000000000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0)
write(r1, &(0x7f00000009c0)="f27d56bdef756492d0c978e2a31016bdd0082006b8775b820ae0601b8d489c8e164b2adc5d1271d25448e9b105b2ffa202619c1f21e5380e17d282a9f65a2ef9955de954563132ddb9783a281beb0f38044a20d0b1066f71891e739016530bc013683938e8d5576ad3ba77bf314d83b5c6e748b4d67d8864649bb4c0e0fd6144b7a0f6ac4fde9f0bb32ec032286ac14fed718dc446f8eb52936249a45d50747ff5429a67362335b10652d265e9f6ef57a8827892c19ec85b0edca703f7b11f3b9fc8adcff087de8546846df3c98f36cdfa94b5d4ce527191724078ae209cc92715253449112c2ecc1dec822c", 0xec)
recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/5, 0x5}, {&(0x7f0000000700)=""/227, 0xe3}], 0x4, &(0x7f00000008c0)=""/176, 0xb0}, 0x5}], 0x1, 0x14140, &(0x7f0000000980))
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c040000f30300012dbd7000fddbdf2503000000000000003f00000003000000fbffffff00b90200000000000000000073ffffff0700000001000000050000001f0000000200000001000000c7000000874800000700000009000000000000000500000005000000420b00000100010003000000010000002ab8ffff000000000100010008000000000800000800000002000000ff0000000300000001000000070000000600000004000000dc9b00007f000000010000000700000002000000ff0300000500000001800000ff7f0000050000000001000009000000000800006e0000000600000007000000a80a000008000000ffff00008100000001000000020000000900000001000000ff000000ff0100007e040000fffffeff0100000031000000ff07000004000000050000007c0000008608000001000100ffff0000020000000000010002000000ffffffff02000000b9070000ff7f0000585f00004f0000004000000079820000010000003f000000040000007748831407000000d8030000000000007f000000030000000300000000000000ddd700000400000009000000d677000009000000ff030000feffffff03000000030000002d42000044028645000000000100000000000000000000007f00000007000000fe600000e0ffffff060000000100010004000000008000000300000009000000376500000180000000100000000000000700000003000000f492d47e63f9ea1400840000ff00000000f8ffff00000014010000000200000003000000db2b0000ffffffff03000000008000000500000005000000008000000400000008000000b103000000000000020000000900000005000000090000001f0000003f00000005000000090000000700000004000000ffffffff080000000400000040000000810000005c0000000200000067bb0000df030000020000000100008006000000ff01000002000000030000004b5b0000ff000000020000009600000084000000ffff000000000000ff0f0000000000001200000040000000cb030000000000000400000068e8000000000100ff0700000700000000080000090000009908000009000000030000000008000047040000000000000104000000020000000800000900000005000000000400003f00008000000080fa000000d3bcffff01000080060000000000000008000000008000000600000007000000ca0f000001f0ffffd8000000ffff0000090000000000010001000000030000000200000001000000d40200000800000005000000050000009a2cc507050000000500000005000000ffff000008000000ff7f00000000000005000000fbffffffde6d00000200000000010000800000007f000000030000009b03000078070000aef2ffffb5070000080000000400000009000000010000000500000009000000a16c0000d60b00001900000000402d2b0000002d63007b7d235b7b2d2ed33a0000005d0000000000"], 0x43c}, 0x1, 0x0, 0x0, 0x4013}, 0x4000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
shutdown(r2, 0x1) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002100000000000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0) (async)
write(r1, &(0x7f00000009c0)="f27d56bdef756492d0c978e2a31016bdd0082006b8775b820ae0601b8d489c8e164b2adc5d1271d25448e9b105b2ffa202619c1f21e5380e17d282a9f65a2ef9955de954563132ddb9783a281beb0f38044a20d0b1066f71891e739016530bc013683938e8d5576ad3ba77bf314d83b5c6e748b4d67d8864649bb4c0e0fd6144b7a0f6ac4fde9f0bb32ec032286ac14fed718dc446f8eb52936249a45d50747ff5429a67362335b10652d265e9f6ef57a8827892c19ec85b0edca703f7b11f3b9fc8adcff087de8546846df3c98f36cdfa94b5d4ce527191724078ae209cc92715253449112c2ecc1dec822c", 0xec) (async)
recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f00000006c0)=""/5, 0x5}, {&(0x7f0000000700)=""/227, 0xe3}], 0x4, &(0x7f00000008c0)=""/176, 0xb0}, 0x5}], 0x1, 0x14140, &(0x7f0000000980)) (async)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x4013}, 0x4000) (async)

22:19:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

22:19:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
r3 = socket(0x22, 0x2, 0x4)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB="c62d27b9bdebf40908ff7c850704f818569da1f1aa77784765117d9cb9aa8e62052c8dbf0c56b4c1c0a733a24107ad7cfa7f86cfdd6e9a30c6b951cc727b2a3a583fe5bce29b2b26c51f19315f8e011c610e3124bfc4cdd546ca3102b91feeb36f4491810dabec7b96026fa671ba00dbebaca1c5d424ac48d86762f2b34834376e228ab2deca89aaadb676285d5ae513cab4f6573863b76585504b7c8444cae77e7fec4f745b99c2016d411ca8de2387c012ff830176e21889ece16a54fb58ac0c31041dc26e5c41789585398bbd5c3d7c89a2bdf0"], 0x3c}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000000726574617001000000000000000000", @ANYRES32=r10, @ANYBLOB="1389d3dc95b8388764b6cf8cee3cd5811e68dd0bacff86e3cfc4f8582d78d78d868e0d714844cc258f501642f1f930afeef687386a3cef5f2b259b713e9f409f9c15bbab0af315cb8879b71437d1ecdc6fe1932ba8f31e05e5bbd5a37ac67b7d71ea600d3e1af13e3223f562000597007da887eb3d071adea25b3e3031f43eeb4380c40f136e9b237e748bfa53e0703cb93ffe"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c80000010000184000000000000000000000080", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000e00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006500000329bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="100008ca27d92ccd5db98e0008000b00b000000008000b000800000008000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40081)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0) (async)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x58, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fbdfdf251400aa3608000e00990f000005000c4a6382f400"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

22:19:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
r3 = socket(0x22, 0x2, 0x4)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB="c62d27b9bdebf40908ff7c850704f818569da1f1aa77784765117d9cb9aa8e62052c8dbf0c56b4c1c0a733a24107ad7cfa7f86cfdd6e9a30c6b951cc727b2a3a583fe5bce29b2b26c51f19315f8e011c610e3124bfc4cdd546ca3102b91feeb36f4491810dabec7b96026fa671ba00dbebaca1c5d424ac48d86762f2b34834376e228ab2deca89aaadb676285d5ae513cab4f6573863b76585504b7c8444cae77e7fec4f745b99c2016d411ca8de2387c012ff830176e21889ece16a54fb58ac0c31041dc26e5c41789585398bbd5c3d7c89a2bdf0"], 0x3c}}, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="000000726574617001000000000000000000", @ANYRES32=r10, @ANYBLOB="1389d3dc95b8388764b6cf8cee3cd5811e68dd0bacff86e3cfc4f8582d78d78d868e0d714844cc258f501642f1f930afeef687386a3cef5f2b259b713e9f409f9c15bbab0af315cb8879b71437d1ecdc6fe1932ba8f31e05e5bbd5a37ac67b7d71ea600d3e1af13e3223f562000597007da887eb3d071adea25b3e3031f43eeb4380c40f136e9b237e748bfa53e0703cb93ffe"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c80000010000184000000000000000000000080", @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000e00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000006500000329bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="100008ca27d92ccd5db98e0008000b00b000000008000b000800000008000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0) (async)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x58, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000227bd7000fbdfdf251400aa3608000e00990f000005000c4a6382f400"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:27 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0)
shutdown(r1, 0x0)

22:19:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x24000000000, 0xfffffffffffffffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x24000000000, 0xfffffffffffffffe}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendfile(r7, r6, 0x0, 0x100000002) (async)

22:19:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000021c736ff52000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="4b2d4ebb623ae09e4b099e6a4a6bffffef4c2f615e93f8fdc6708d23ae28c2d73c603cf5b363da5cdea44657231fcea96ab881aa90da", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES8=r3], 0x448}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x0, &(0x7f0000000300))
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000001fc0)="6819b7f1442af4b503884bef1a2f2ba0b02da1585fb5028e0aaac35381f74971896492340fc89188c5c6e7ac8fb30546def6164ef1fad73eac002256441f4b83b3af7ee0ab9370189ce3079e4f4997ed08c0ff650d45a4dfaf87776bd71e3f56d8f179a028f127b08153b5cc3cad07fb0c3b48ded0b7486808cc44fe1002835e1b7517312dd112ee6f43469bae967e9883104eeac6c72474e6ccffa92aa39a6c579eda215b", 0xa5}], 0x1, 0x4, 0xfff)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r6, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r7, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r8=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r7, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@val={r7}, @max}})
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000880), 0x8)
shutdown(r9, 0x0)

22:19:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

[ 2256.203940][   T28] audit: type=1804 audit(1696025967.530:10660): pid=1032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3039/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
22:19:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]})

22:19:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]})

[ 2256.594960][   T28] audit: type=1804 audit(1696025967.920:10661): pid=1051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3299/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
22:19:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x24000000000, 0xfffffffffffffffe}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)

22:19:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:28 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="000826bd700000000000890000000c009900e1ffffff0000000038001d803400008005000b00010000000500090000000000040004000c000300f30000000000000005000a000000000005000b0000000000f0001d80300000800c000200000400000000000005000900000000000c00020048160000000000000400040005000c0001000000a800008005000800f700000090000d80340003801400030006000300020006000180400008000002050004000200000014000300000004007678fbfffe01000027000000280000801400030000000100f9ffd702000000000000f8000500040001000000050004000000000005000400000000001c0003800500060002000000050004000100000005000400010000000400040005000c0000000000140000800500080018000000050007000000000024001d8020000080060005008f0000000c000200020000000000000005000b0000000000a70a9d466677059b15c246e6e24376a795f4ebce749bc94af4c41acc6fb6f9251ee3b180e207c82b73656a6d2f7afc3471c626eab34815ed0f1dc86c43a9774b796015029fc1431191aaeaedaf35021cac59706ddadf9dc5f7b226b7972851242c24a85bcc93a19e985241d183bd7c3d289964e3693d9f3cdc6104be7df30560d97869f5437f9d62304afe97cd68f0d5515e1041b88d84a48da7ccf3454a8af801a0a847ce15e80934816aa99294bc8bc928dcb418205d4ee6bc05db0bd7b96096e71d0483deabbd6010e398b2ab52beb47d17651dbc949cbc52c88609eb0050b748c21867a133ed4cd542a253a44059cc6ac8918b933566abff2b029334046e20264e8bc40157fe681c89ff6bfe9c49e7b61146cdac38c73245e5c7994981851c428814b6e1bc5816e8594b0f4d79bd74837801280d4d0b25b99c69"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]})

22:19:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r5, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2256.987166][   T28] audit: type=1804 audit(1696025968.310:10662): pid=1067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3300/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0
22:19:28 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

22:19:28 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x80000)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="a0aa9a42c63dfd76fb2ef999923968023aa3ad2818d2c72a0013e71d0a16ee7cce239b0b22fb3826d14691805ca897a752676262fe88f04dfe267f8d5d2c006862e31c32eed4ad32f5c8ee0b6a9586846e7389d941b67342f8070b204cf3cf9435d798eab3a63593d77d7721ca0f4f1d7ad466d2b23dd64294fa7576", 0x7c}, {&(0x7f00000004c0)="32f554a6216dfc535619f5b5df4675b2c1ac714f87374a204c05456aa09b5d10c3e5fb0306cf222594b1532a3ab8f50f89a1e1a921ee63de93e663ee76becf709e611d0ef01259fd11caaf1f7ba3a0f17fd06020c5db256773040cd1dd8928a747c5b5ed55d43b792bbd23f721dc97439cd73e374370e836eac6d7db96e324d6150d30463ea52019ab2488e3078fb5c3ff37dccb540c8b0d", 0x98}, {&(0x7f0000000680)="d14e4626dbfc28236580754e4be166f00f2d5d9ee0411f7b5189f8f04021a45ba6e51331b53b02e75f830fd413d4eff241eaa2716c6437046183e4f6e5ffb64856f35bbbf3591807183c04d8353a27748784f6edb3ca205fbaa71a07455b3f437dc6bc25ded94ed17e4c7d7618ae720669c462fb934e30315907d2f79aeb05a95f302bfe832e7d792b437c238376866434138a759f08ea44daeabf09cc7e9bd31fd22c94dfe55d9f230109c04740ac7c10a63ce2c59057f77e057134bb", 0xbd}, {&(0x7f0000000740)="fa5a6d259cadb42cf167d4fa11df3e096bcb3917d9cff6d976bd15d9c4f19079825d075b2f99a66128b6278b5d8163bbdb560f01309758d0023443384c87be6cf7a8637ffdf87c5866d350222e2c306d60748e4eb2bac2c4bac7a57dee0406f48d46d4efb7c17b1fed34e684221139daf8632ca2091dada897616f770524d4e999bb2f47ee0d0fd14727c1e16de02dafe2e92cc3bd2efcc62f310fcc03364e0f92919be46981eebb6adca2522e16a1d1c3d96e53cd3140b0347cd46dc317d4f294c7f06264f5314d6447dc80298fb3f3b4cac5b182f1a107526dfaef667c7d918481065a09d5e0832e8d", 0xea}, {&(0x7f0000000840)="a4fb12f4e9e27cb159bac371d53fdf03db3b22f34084d514bae5fe18eb01c48bd479d6ca40d020e6491f04b328b1f4461624a8aa062949dabecafadf46e03a6e7544bbb43b5217e4d17a4f82171a061e43e452319925809f92b466c0158e404a1736dee79a4955fece599d1e42f8b7953238024bea9d35957870b01a8e021ea9ac28fe1569de188c8e00b3635e1c1c6fe8e81571dc8702b7164df4e7", 0x9c}, {&(0x7f0000000900)="232aadb7f12871f24725eadb2653b3cec1649dfffd280f08c0e6516147a47f5bae69265e3cf02f7c2589fd3f4562cde374d27248b6d70b248ecf19a0344350e841b30916dc36395dc79bf993d1483ec17fe0d809e61085b90a9bf9ba4457452f2a8df104167b6eba2429349a2b4895d651dce879d9b00fc056002b380fee4b578d76e2a4e6553b1723", 0x89}, {&(0x7f00000002c0)="06eae39baf907dd906f53e544e64c24b472f4c356bcd7a59bc347bc952c403a4e59f50adb90948648de0d032fc41709d508bd86147cac0f4f86e7beb10f7", 0x3e}], 0x7, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb4, [@loopback, @rand_addr=0x64010100, @empty, @empty]}, @cipso={0x86, 0x5b, 0x0, [{0x3, 0x4, "e750"}, {0x5, 0x6, "a46054a7"}, {0x6, 0xe, "75e1faf2d2fe738c76c2c383"}, {0x6, 0xc, "b45db3a511dfe73da1a9"}, {0x5, 0x2}, {0x5, 0x3, '<'}, {0x1, 0x10, "159da2d20c7e286bd66d40bb9229"}, {0x0, 0x8, "d443e7066228"}, {0x5, 0x12, "8395b25fd83c12e59f76ce9bc3ecf2ad"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0x87, 0x0, 0x7, [0x5, 0x800, 0x6, 0x7]}]}}}], 0x98}, 0x4000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100028bd7000fedbdf251700000044000180140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="aadf2c817240849008bd8226d65d9108000100", @ANYRES32=r7, @ANYBLOB="080003000000000014000200"/28], 0x58}}, 0x4815)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000020000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000bc0)={0x107c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x1064, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '${+%\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000009c0)={'wg0\x00', &(0x7f00000005c0)=@ethtool_test={0x1a, 0x7, 0x5, 0x1, [0x582]}})
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r13}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r13}]}}}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000001cc0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffff62, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2055}, 0x40000)
bind$packet(r11, &(0x7f0000000b00)={0x11, 0x1, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14)

22:19:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000021c736ff52000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="4b2d4ebb623ae09e4b099e6a4a6bffffef4c2f615e93f8fdc6708d23ae28c2d73c603cf5b363da5cdea44657231fcea96ab881aa90da", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES8=r3], 0x448}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x0, &(0x7f0000000300)) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) (async)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000001fc0)="6819b7f1442af4b503884bef1a2f2ba0b02da1585fb5028e0aaac35381f74971896492340fc89188c5c6e7ac8fb30546def6164ef1fad73eac002256441f4b83b3af7ee0ab9370189ce3079e4f4997ed08c0ff650d45a4dfaf87776bd71e3f56d8f179a028f127b08153b5cc3cad07fb0c3b48ded0b7486808cc44fe1002835e1b7517312dd112ee6f43469bae967e9883104eeac6c72474e6ccffa92aa39a6c579eda215b", 0xa5}], 0x1, 0x4, 0xfff) (async)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3) (rerun: 32)
shutdown(r6, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}}) (async)
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r7, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r8=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r7, 0x81, 0x1000, 0x1}) (async, rerun: 32)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@val={r7}, @max}}) (async, rerun: 32)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000880), 0x8)
shutdown(r9, 0x0)

22:19:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = socket(0x22, 0x2, 0x4)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x54f1534c09d4cb57}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={'bridge_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x100000002)

22:19:28 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

[ 2257.241246][   T28] audit: type=1804 audit(1696025968.570:10663): pid=1075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3040/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[ 2257.251445][ T4445] Bluetooth: hci5: command 0x0405 tx timeout
22:19:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x54}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80)

22:19:28 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)

22:19:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000021c736ff52000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000021c736ff52000000000000000a000000000000000000000008000e0000000000"], 0x24}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="4b2d4ebb623ae09e4b099e6a4a6bffffef4c2f615e93f8fdc6708d23ae28c2d73c603cf5b363da5cdea44657231fcea96ab881aa90da", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES8=r3], 0x448}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x0, &(0x7f0000000300))
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000001fc0)="6819b7f1442af4b503884bef1a2f2ba0b02da1585fb5028e0aaac35381f74971896492340fc89188c5c6e7ac8fb30546def6164ef1fad73eac002256441f4b83b3af7ee0ab9370189ce3079e4f4997ed08c0ff650d45a4dfaf87776bd71e3f56d8f179a028f127b08153b5cc3cad07fb0c3b48ded0b7486808cc44fe1002835e1b7517312dd112ee6f43469bae967e9883104eeac6c72474e6ccffa92aa39a6c579eda215b", 0xa5}], 0x1, 0x4, 0xfff)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r6, 0x1) (async)
shutdown(r6, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r7, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "02c8305d689e455364f00ddb8f12e573"}) (async)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r8=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r7, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{}, {@val={r7}, @max}})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r9, &(0x7f0000000880), 0x8)
shutdown(r9, 0x0) (async)
shutdown(r9, 0x0)

22:19:28 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
shutdown(r2, 0x1)

[ 2257.571761][   T28] audit: type=1804 audit(1696025968.900:10664): pid=1088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3301/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
22:19:29 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:29 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x80000) (async, rerun: 32)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="a0aa9a42c63dfd76fb2ef999923968023aa3ad2818d2c72a0013e71d0a16ee7cce239b0b22fb3826d14691805ca897a752676262fe88f04dfe267f8d5d2c006862e31c32eed4ad32f5c8ee0b6a9586846e7389d941b67342f8070b204cf3cf9435d798eab3a63593d77d7721ca0f4f1d7ad466d2b23dd64294fa7576", 0x7c}, {&(0x7f00000004c0)="32f554a6216dfc535619f5b5df4675b2c1ac714f87374a204c05456aa09b5d10c3e5fb0306cf222594b1532a3ab8f50f89a1e1a921ee63de93e663ee76becf709e611d0ef01259fd11caaf1f7ba3a0f17fd06020c5db256773040cd1dd8928a747c5b5ed55d43b792bbd23f721dc97439cd73e374370e836eac6d7db96e324d6150d30463ea52019ab2488e3078fb5c3ff37dccb540c8b0d", 0x98}, {&(0x7f0000000680)="d14e4626dbfc28236580754e4be166f00f2d5d9ee0411f7b5189f8f04021a45ba6e51331b53b02e75f830fd413d4eff241eaa2716c6437046183e4f6e5ffb64856f35bbbf3591807183c04d8353a27748784f6edb3ca205fbaa71a07455b3f437dc6bc25ded94ed17e4c7d7618ae720669c462fb934e30315907d2f79aeb05a95f302bfe832e7d792b437c238376866434138a759f08ea44daeabf09cc7e9bd31fd22c94dfe55d9f230109c04740ac7c10a63ce2c59057f77e057134bb", 0xbd}, {&(0x7f0000000740)="fa5a6d259cadb42cf167d4fa11df3e096bcb3917d9cff6d976bd15d9c4f19079825d075b2f99a66128b6278b5d8163bbdb560f01309758d0023443384c87be6cf7a8637ffdf87c5866d350222e2c306d60748e4eb2bac2c4bac7a57dee0406f48d46d4efb7c17b1fed34e684221139daf8632ca2091dada897616f770524d4e999bb2f47ee0d0fd14727c1e16de02dafe2e92cc3bd2efcc62f310fcc03364e0f92919be46981eebb6adca2522e16a1d1c3d96e53cd3140b0347cd46dc317d4f294c7f06264f5314d6447dc80298fb3f3b4cac5b182f1a107526dfaef667c7d918481065a09d5e0832e8d", 0xea}, {&(0x7f0000000840)="a4fb12f4e9e27cb159bac371d53fdf03db3b22f34084d514bae5fe18eb01c48bd479d6ca40d020e6491f04b328b1f4461624a8aa062949dabecafadf46e03a6e7544bbb43b5217e4d17a4f82171a061e43e452319925809f92b466c0158e404a1736dee79a4955fece599d1e42f8b7953238024bea9d35957870b01a8e021ea9ac28fe1569de188c8e00b3635e1c1c6fe8e81571dc8702b7164df4e7", 0x9c}, {&(0x7f0000000900)="232aadb7f12871f24725eadb2653b3cec1649dfffd280f08c0e6516147a47f5bae69265e3cf02f7c2589fd3f4562cde374d27248b6d70b248ecf19a0344350e841b30916dc36395dc79bf993d1483ec17fe0d809e61085b90a9bf9ba4457452f2a8df104167b6eba2429349a2b4895d651dce879d9b00fc056002b380fee4b578d76e2a4e6553b1723", 0x89}, {&(0x7f00000002c0)="06eae39baf907dd906f53e544e64c24b472f4c356bcd7a59bc347bc952c403a4e59f50adb90948648de0d032fc41709d508bd86147cac0f4f86e7beb10f7", 0x3e}], 0x7, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb4, [@loopback, @rand_addr=0x64010100, @empty, @empty]}, @cipso={0x86, 0x5b, 0x0, [{0x3, 0x4, "e750"}, {0x5, 0x6, "a46054a7"}, {0x6, 0xe, "75e1faf2d2fe738c76c2c383"}, {0x6, 0xc, "b45db3a511dfe73da1a9"}, {0x5, 0x2}, {0x5, 0x3, '<'}, {0x1, 0x10, "159da2d20c7e286bd66d40bb9229"}, {0x0, 0x8, "d443e7066228"}, {0x5, 0x12, "8395b25fd83c12e59f76ce9bc3ecf2ad"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0x87, 0x0, 0x7, [0x5, 0x800, 0x6, 0x7]}]}}}], 0x98}, 0x4000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100028bd7000fedbdf251700000044000180140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="aadf2c817240849008bd8226d65d9108000100", @ANYRES32=r7, @ANYBLOB="080003000000000014000200"/28], 0x58}}, 0x4815) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000020000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815) (rerun: 64)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000bc0)={0x107c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x1064, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '${+%\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000009c0)={'wg0\x00', &(0x7f00000005c0)=@ethtool_test={0x1a, 0x7, 0x5, 0x1, [0x582]}}) (async)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r13}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r13}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000001cc0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffff62, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2055}, 0x40000) (async, rerun: 32)
bind$packet(r11, &(0x7f0000000b00)={0x11, 0x1, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) (rerun: 32)

22:19:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x54}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80)

22:19:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2527000000080003006340e2c4a93904d6b3eca5b3ca9726f53fde5e94d2a125b2f30d20cf6e92b797d65b649626697000d148e5e25156146447d8f0ecc6ea04893716620ac199ce2b616f421cece1b14bd3de714ac6c808e8527d5d334560db746ca54141c40dd129fad4728ad4098b24305d5c4fe614d7d99acf68dda3262cbc", @ANYRES32=r1, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4004}, 0x8080)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000880), 0x8)
shutdown(r2, 0x0)

22:19:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2527000000080003006340e2c4a93904d6b3eca5b3ca9726f53fde5e94d2a125b2f30d20cf6e92b797d65b649626697000d148e5e25156146447d8f0ecc6ea04893716620ac199ce2b616f421cece1b14bd3de714ac6c808e8527d5d334560db746ca54141c40dd129fad4728ad4098b24305d5c4fe614d7d99acf68dda3262cbc", @ANYRES32=r1, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4004}, 0x8080)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000880), 0x8)
shutdown(r2, 0x0)

22:19:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2527000000080003006340e2c4a93904d6b3eca5b3ca9726f53fde5e94d2a125b2f30d20cf6e92b797d65b649626697000d148e5e25156146447d8f0ecc6ea04893716620ac199ce2b616f421cece1b14bd3de714ac6c808e8527d5d334560db746ca54141c40dd129fad4728ad4098b24305d5c4fe614d7d99acf68dda3262cbc", @ANYRES32=r1, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4004}, 0x8080)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r2, &(0x7f0000000880), 0x8)
shutdown(r2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf2527000000080003006340e2c4a93904d6b3eca5b3ca9726f53fde5e94d2a125b2f30d20cf6e92b797d65b649626697000d148e5e25156146447d8f0ecc6ea04893716620ac199ce2b616f421cece1b14bd3de714ac6c808e8527d5d334560db746ca54141c40dd129fad4728ad4098b24305d5c4fe614d7d99acf68dda3262cbc", @ANYRES32=r1, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4004}, 0x8080) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r2, &(0x7f0000000880), 0x8) (async)
shutdown(r2, 0x0) (async)

22:19:29 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (async)
r4 = socket(0x22, 0x2, 0x4)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x54f1534c09d4cb57}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={'bridge_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x100000002)

22:19:29 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x80000)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="a0aa9a42c63dfd76fb2ef999923968023aa3ad2818d2c72a0013e71d0a16ee7cce239b0b22fb3826d14691805ca897a752676262fe88f04dfe267f8d5d2c006862e31c32eed4ad32f5c8ee0b6a9586846e7389d941b67342f8070b204cf3cf9435d798eab3a63593d77d7721ca0f4f1d7ad466d2b23dd64294fa7576", 0x7c}, {&(0x7f00000004c0)="32f554a6216dfc535619f5b5df4675b2c1ac714f87374a204c05456aa09b5d10c3e5fb0306cf222594b1532a3ab8f50f89a1e1a921ee63de93e663ee76becf709e611d0ef01259fd11caaf1f7ba3a0f17fd06020c5db256773040cd1dd8928a747c5b5ed55d43b792bbd23f721dc97439cd73e374370e836eac6d7db96e324d6150d30463ea52019ab2488e3078fb5c3ff37dccb540c8b0d", 0x98}, {&(0x7f0000000680)="d14e4626dbfc28236580754e4be166f00f2d5d9ee0411f7b5189f8f04021a45ba6e51331b53b02e75f830fd413d4eff241eaa2716c6437046183e4f6e5ffb64856f35bbbf3591807183c04d8353a27748784f6edb3ca205fbaa71a07455b3f437dc6bc25ded94ed17e4c7d7618ae720669c462fb934e30315907d2f79aeb05a95f302bfe832e7d792b437c238376866434138a759f08ea44daeabf09cc7e9bd31fd22c94dfe55d9f230109c04740ac7c10a63ce2c59057f77e057134bb", 0xbd}, {&(0x7f0000000740)="fa5a6d259cadb42cf167d4fa11df3e096bcb3917d9cff6d976bd15d9c4f19079825d075b2f99a66128b6278b5d8163bbdb560f01309758d0023443384c87be6cf7a8637ffdf87c5866d350222e2c306d60748e4eb2bac2c4bac7a57dee0406f48d46d4efb7c17b1fed34e684221139daf8632ca2091dada897616f770524d4e999bb2f47ee0d0fd14727c1e16de02dafe2e92cc3bd2efcc62f310fcc03364e0f92919be46981eebb6adca2522e16a1d1c3d96e53cd3140b0347cd46dc317d4f294c7f06264f5314d6447dc80298fb3f3b4cac5b182f1a107526dfaef667c7d918481065a09d5e0832e8d", 0xea}, {&(0x7f0000000840)="a4fb12f4e9e27cb159bac371d53fdf03db3b22f34084d514bae5fe18eb01c48bd479d6ca40d020e6491f04b328b1f4461624a8aa062949dabecafadf46e03a6e7544bbb43b5217e4d17a4f82171a061e43e452319925809f92b466c0158e404a1736dee79a4955fece599d1e42f8b7953238024bea9d35957870b01a8e021ea9ac28fe1569de188c8e00b3635e1c1c6fe8e81571dc8702b7164df4e7", 0x9c}, {&(0x7f0000000900)="232aadb7f12871f24725eadb2653b3cec1649dfffd280f08c0e6516147a47f5bae69265e3cf02f7c2589fd3f4562cde374d27248b6d70b248ecf19a0344350e841b30916dc36395dc79bf993d1483ec17fe0d809e61085b90a9bf9ba4457452f2a8df104167b6eba2429349a2b4895d651dce879d9b00fc056002b380fee4b578d76e2a4e6553b1723", 0x89}, {&(0x7f00000002c0)="06eae39baf907dd906f53e544e64c24b472f4c356bcd7a59bc347bc952c403a4e59f50adb90948648de0d032fc41709d508bd86147cac0f4f86e7beb10f7", 0x3e}], 0x7, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb4, [@loopback, @rand_addr=0x64010100, @empty, @empty]}, @cipso={0x86, 0x5b, 0x0, [{0x3, 0x4, "e750"}, {0x5, 0x6, "a46054a7"}, {0x6, 0xe, "75e1faf2d2fe738c76c2c383"}, {0x6, 0xc, "b45db3a511dfe73da1a9"}, {0x5, 0x2}, {0x5, 0x3, '<'}, {0x1, 0x10, "159da2d20c7e286bd66d40bb9229"}, {0x0, 0x8, "d443e7066228"}, {0x5, 0x12, "8395b25fd83c12e59f76ce9bc3ecf2ad"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0x87, 0x0, 0x7, [0x5, 0x800, 0x6, 0x7]}]}}}], 0x98}, 0x4000) (async)
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="a0aa9a42c63dfd76fb2ef999923968023aa3ad2818d2c72a0013e71d0a16ee7cce239b0b22fb3826d14691805ca897a752676262fe88f04dfe267f8d5d2c006862e31c32eed4ad32f5c8ee0b6a9586846e7389d941b67342f8070b204cf3cf9435d798eab3a63593d77d7721ca0f4f1d7ad466d2b23dd64294fa7576", 0x7c}, {&(0x7f00000004c0)="32f554a6216dfc535619f5b5df4675b2c1ac714f87374a204c05456aa09b5d10c3e5fb0306cf222594b1532a3ab8f50f89a1e1a921ee63de93e663ee76becf709e611d0ef01259fd11caaf1f7ba3a0f17fd06020c5db256773040cd1dd8928a747c5b5ed55d43b792bbd23f721dc97439cd73e374370e836eac6d7db96e324d6150d30463ea52019ab2488e3078fb5c3ff37dccb540c8b0d", 0x98}, {&(0x7f0000000680)="d14e4626dbfc28236580754e4be166f00f2d5d9ee0411f7b5189f8f04021a45ba6e51331b53b02e75f830fd413d4eff241eaa2716c6437046183e4f6e5ffb64856f35bbbf3591807183c04d8353a27748784f6edb3ca205fbaa71a07455b3f437dc6bc25ded94ed17e4c7d7618ae720669c462fb934e30315907d2f79aeb05a95f302bfe832e7d792b437c238376866434138a759f08ea44daeabf09cc7e9bd31fd22c94dfe55d9f230109c04740ac7c10a63ce2c59057f77e057134bb", 0xbd}, {&(0x7f0000000740)="fa5a6d259cadb42cf167d4fa11df3e096bcb3917d9cff6d976bd15d9c4f19079825d075b2f99a66128b6278b5d8163bbdb560f01309758d0023443384c87be6cf7a8637ffdf87c5866d350222e2c306d60748e4eb2bac2c4bac7a57dee0406f48d46d4efb7c17b1fed34e684221139daf8632ca2091dada897616f770524d4e999bb2f47ee0d0fd14727c1e16de02dafe2e92cc3bd2efcc62f310fcc03364e0f92919be46981eebb6adca2522e16a1d1c3d96e53cd3140b0347cd46dc317d4f294c7f06264f5314d6447dc80298fb3f3b4cac5b182f1a107526dfaef667c7d918481065a09d5e0832e8d", 0xea}, {&(0x7f0000000840)="a4fb12f4e9e27cb159bac371d53fdf03db3b22f34084d514bae5fe18eb01c48bd479d6ca40d020e6491f04b328b1f4461624a8aa062949dabecafadf46e03a6e7544bbb43b5217e4d17a4f82171a061e43e452319925809f92b466c0158e404a1736dee79a4955fece599d1e42f8b7953238024bea9d35957870b01a8e021ea9ac28fe1569de188c8e00b3635e1c1c6fe8e81571dc8702b7164df4e7", 0x9c}, {&(0x7f0000000900)="232aadb7f12871f24725eadb2653b3cec1649dfffd280f08c0e6516147a47f5bae69265e3cf02f7c2589fd3f4562cde374d27248b6d70b248ecf19a0344350e841b30916dc36395dc79bf993d1483ec17fe0d809e61085b90a9bf9ba4457452f2a8df104167b6eba2429349a2b4895d651dce879d9b00fc056002b380fee4b578d76e2a4e6553b1723", 0x89}, {&(0x7f00000002c0)="06eae39baf907dd906f53e544e64c24b472f4c356bcd7a59bc347bc952c403a4e59f50adb90948648de0d032fc41709d508bd86147cac0f4f86e7beb10f7", 0x3e}], 0x7, &(0x7f0000000a40)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb4, [@loopback, @rand_addr=0x64010100, @empty, @empty]}, @cipso={0x86, 0x5b, 0x0, [{0x3, 0x4, "e750"}, {0x5, 0x6, "a46054a7"}, {0x6, 0xe, "75e1faf2d2fe738c76c2c383"}, {0x6, 0xc, "b45db3a511dfe73da1a9"}, {0x5, 0x2}, {0x5, 0x3, '<'}, {0x1, 0x10, "159da2d20c7e286bd66d40bb9229"}, {0x0, 0x8, "d443e7066228"}, {0x5, 0x12, "8395b25fd83c12e59f76ce9bc3ecf2ad"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0x87, 0x0, 0x7, [0x5, 0x800, 0x6, 0x7]}]}}}], 0x98}, 0x4000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100028bd7000fedbdf251700000044000180140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="aadf2c817240849008bd8226d65d9108000100", @ANYRES32=r7, @ANYBLOB="080003000000000014000200"/28], 0x58}}, 0x4815)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000020000000180012800e00010077697265677561726400000004000280"], 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000bc0)={0x107c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x1064, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '${+%\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x107c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000009c0)={'wg0\x00', &(0x7f00000005c0)=@ethtool_test={0x1a, 0x7, 0x5, 0x1, [0x582]}}) (async)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000009c0)={'wg0\x00', &(0x7f00000005c0)=@ethtool_test={0x1a, 0x7, 0x5, 0x1, [0x582]}})
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r13}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r13}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r13}]}}}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000001cc0)={0xd8, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffff62, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2055}, 0x40000)
bind$packet(r11, &(0x7f0000000b00)={0x11, 0x1, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) (async)
bind$packet(r11, &(0x7f0000000b00)={0x11, 0x1, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14)

22:19:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x54}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80)

22:19:29 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x80000)
shutdown(r2, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

22:19:29 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
shutdown(r2, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
shutdown(r2, 0x1) (async)

22:19:29 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_getroute={0xe8, 0x1a, 0x714, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x6848a9a33bb1ca71, 0x4b, 0xff, 0x3, 0xfd, 0x6}, [@RTA_EXPIRES={0x8, 0x17, 0x40}, @RTA_UID={0x8, 0x19, r5}, @RTA_MARK={0x8, 0x10, 0x8fe}, @RTA_METRICS={0x96, 0x8, 0x0, 0x1, "964e63f67a3f943eb1aed69fa447094d231e7c5624ad5e784385694ec07679681d20d0fa6a9971f0ad9445d8886cf5ea8431bfe6848b2b25662c2fa2de1d56240ad2402d6307aeb242cf025c657888f03dca55cda30329f2aff9a5a490d6bcf00ecb0869a494bf741ef4f3f19590da42b9ae79ffb14f9ac9674692c472ae61d3d5748e98865a9c3374a95a5e95ae4726a978"}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_PRIORITY={0x8, 0x6, 0x3ff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

22:19:30 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
shutdown(r2, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd25, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
shutdown(r2, 0x1) (async)

22:19:30 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_newroute={0x6c, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x80, 0x20, 0x5, 0xff, 0x1, 0xfd, 0x3, 0x1000}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x3ff}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x10, 0x81, r6}}, @RTA_VIA={0x14, 0x12, {0xf, "27263cab6844d13e93c32131e4d0"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c840}, 0x8814)

22:19:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = socket(0x22, 0x2, 0x4)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x54f1534c09d4cb57}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000380)={'bridge_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x3af4701e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x100000002)

22:19:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_getroute={0xe8, 0x1a, 0x714, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x6848a9a33bb1ca71, 0x4b, 0xff, 0x3, 0xfd, 0x6}, [@RTA_EXPIRES={0x8, 0x17, 0x40}, @RTA_UID={0x8, 0x19, r5}, @RTA_MARK={0x8, 0x10, 0x8fe}, @RTA_METRICS={0x96, 0x8, 0x0, 0x1, "964e63f67a3f943eb1aed69fa447094d231e7c5624ad5e784385694ec07679681d20d0fa6a9971f0ad9445d8886cf5ea8431bfe6848b2b25662c2fa2de1d56240ad2402d6307aeb242cf025c657888f03dca55cda30329f2aff9a5a490d6bcf00ecb0869a494bf741ef4f3f19590da42b9ae79ffb14f9ac9674692c472ae61d3d5748e98865a9c3374a95a5e95ae4726a978"}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_PRIORITY={0x8, 0x6, 0x3ff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

22:19:30 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

[ 2259.116248][ T1176] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:30 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_newroute={0x6c, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x80, 0x20, 0x5, 0xff, 0x1, 0xfd, 0x3, 0x1000}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x3ff}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x10, 0x81, r6}}, @RTA_VIA={0x14, 0x12, {0xf, "27263cab6844d13e93c32131e4d0"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c840}, 0x8814)

22:19:30 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000008c0)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
shutdown(r0, 0x0)

22:19:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8)
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_getroute={0xe8, 0x1a, 0x714, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x6848a9a33bb1ca71, 0x4b, 0xff, 0x3, 0xfd, 0x6}, [@RTA_EXPIRES={0x8, 0x17, 0x40}, @RTA_UID={0x8, 0x19, r5}, @RTA_MARK={0x8, 0x10, 0x8fe}, @RTA_METRICS={0x96, 0x8, 0x0, 0x1, "964e63f67a3f943eb1aed69fa447094d231e7c5624ad5e784385694ec07679681d20d0fa6a9971f0ad9445d8886cf5ea8431bfe6848b2b25662c2fa2de1d56240ad2402d6307aeb242cf025c657888f03dca55cda30329f2aff9a5a490d6bcf00ecb0869a494bf741ef4f3f19590da42b9ae79ffb14f9ac9674692c472ae61d3d5748e98865a9c3374a95a5e95ae4726a978"}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_PRIORITY={0x8, 0x6, 0x3ff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

22:19:30 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x80000)
shutdown(r2, 0x0) (async)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

22:19:30 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendfile(r0, r2, 0x0, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="01002f057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057df83318f0004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendfile(r7, r6, 0x0, 0x8)

[ 2259.337662][ T4445] Bluetooth: hci5: command 0x0405 tx timeout
22:19:30 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000008c0)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async, rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async, rerun: 64)
shutdown(r0, 0x0)

[ 2259.494361][ T1198] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
sendmsg$nl_route(r11, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bind$packet(r6, &(0x7f0000000300)={0x11, 0x13, r7, 0x1, 0x7}, 0x14)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r12}]}}}]}, 0x3c}}, 0x0)
r13 = openat$cgroup_ro(r11, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2)
sendmsg$NL80211_CMD_ADD_TX_TS(r13, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r14, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x80}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x18d2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r12, 0x605, 0x8290}}}}}}]}, 0x48}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005000}, 0x800)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400961797780104000000000000000000000000aabf52bac36ffebcb68e7c27439b631f3ba379bd19fb1a0b1c3dd6da314d7e93c771ff6d6bdfc583169902bab9d19004f4ffffffffffff1390ed18c77f9db2146af18707fb79b04bba78", @ANYRES32=r15, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0)

22:19:30 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_newroute={0x6c, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x80, 0x20, 0x5, 0xff, 0x1, 0xfd, 0x3, 0x1000}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x3ff}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x10, 0x81, r6}}, @RTA_VIA={0x14, 0x12, {0xf, "27263cab6844d13e93c32131e4d0"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c840}, 0x8814)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@mpls_newroute={0x6c, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x80, 0x20, 0x5, 0xff, 0x1, 0xfd, 0x3, 0x1000}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, {0x3ff}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x10, 0x81, r6}}, @RTA_VIA={0x14, 0x12, {0xf, "27263cab6844d13e93c32131e4d0"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c840}, 0x8814) (async)

22:19:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendfile(r0, r2, 0x0, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="01002f057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057df83318f0004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendfile(r7, r6, 0x0, 0x8)

[ 2259.623488][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 2259.623507][   T28] audit: type=1804 audit(1696025970.950:10667): pid=1196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3304/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0
22:19:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

[ 2259.753208][   T28] audit: type=1804 audit(1696025971.010:10668): pid=1185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3042/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0
[ 2259.849380][   T28] audit: type=1804 audit(1696025971.180:10669): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3305/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0
22:19:31 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendfile(r0, r2, 0x0, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="01002f057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057df83318f0004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendfile(r7, r6, 0x0, 0x8)

[ 2259.892619][ T1217] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2259.918215][ T1219] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:31 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

22:19:31 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket(0x10, 0x803, 0x0) (async)
r11 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
sendmsg$nl_route(r11, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
bind$packet(r6, &(0x7f0000000300)={0x11, 0x13, r7, 0x1, 0x7}, 0x14)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r12}]}}}]}, 0x3c}}, 0x0) (async)
r13 = openat$cgroup_ro(r11, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2)
sendmsg$NL80211_CMD_ADD_TX_TS(r13, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r14, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x80}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x18d2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r12, 0x605, 0x8290}}}}}}]}, 0x48}}, 0x0) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005000}, 0x800) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400961797780104000000000000000000000000aabf52bac36ffebcb68e7c27439b631f3ba379bd19fb1a0b1c3dd6da314d7e93c771ff6d6bdfc583169902bab9d19004f4ffffffffffff1390ed18c77f9db2146af18707fb79b04bba78", @ANYRES32=r15, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0)

22:19:31 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

22:19:31 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
shutdown(r0, 0x0)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x80000)
shutdown(r2, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

[ 2260.254709][   T28] audit: type=1804 audit(1696025971.580:10670): pid=1230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3306/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
22:19:31 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

22:19:31 executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
sendmsg$nl_route(r11, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$nl_route(r11, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
bind$packet(r6, &(0x7f0000000300)={0x11, 0x13, r7, 0x1, 0x7}, 0x14)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r12}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r12}]}}}]}, 0x3c}}, 0x0)
r13 = openat$cgroup_ro(r11, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2)
sendmsg$NL80211_CMD_ADD_TX_TS(r13, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r14, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x80}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x18d2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r12, 0x605, 0x8290}}}}}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x18d2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r12, 0x605, 0x8290}}}}}}]}, 0x48}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005000}, 0x800)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400961797780104000000000000000000000000aabf52bac36ffebcb68e7c27439b631f3ba379bd19fb1a0b1c3dd6da314d7e93c771ff6d6bdfc583169902bab9d19004f4ffffffffffff1390ed18c77f9db2146af18707fb79b04bba78", @ANYRES32=r15, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0)

[ 2260.326664][   T28] audit: type=1804 audit(1696025971.630:10671): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3043/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0
[ 2260.334971][ T1228] __nla_validate_parse: 182 callbacks suppressed
[ 2260.334995][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2260.414473][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2260.490408][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:31 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100007bd0f5160df97033d451bdbeb007fb1c50ea0aab3e1683b35cd84aa7db520edefee023b0e2359619e9d4dfbcbb682409710fefe2f480fb5146bf7aa9fd1fce0078a84a56141429d67cd27ae5cdfe8a77bf6b664e5fa3ba985a745395e7172c2adaea1f7b88c49e35ed74d3e2cffa3271f3d6efa0a3f2d8baa2e736d5095b4028f4e94a6124795be0fc900248494f10c8d2f2313bb95b6b0a615c06a78ab762e347fa170bd616c5", @ANYRES16=r0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4044805)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1})

22:19:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=<r4=>r3, @ANYBLOB="04008e00080057003b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:31 executing program 4:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000008c0)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
shutdown(r0, 0x0)

[ 2260.546915][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2260.595858][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:32 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100007bd0f5160df97033d451bdbeb007fb1c50ea0aab3e1683b35cd84aa7db520edefee023b0e2359619e9d4dfbcbb682409710fefe2f480fb5146bf7aa9fd1fce0078a84a56141429d67cd27ae5cdfe8a77bf6b664e5fa3ba985a745395e7172c2adaea1f7b88c49e35ed74d3e2cffa3271f3d6efa0a3f2d8baa2e736d5095b4028f4e94a6124795be0fc900248494f10c8d2f2313bb95b6b0a615c06a78ab762e347fa170bd616c5", @ANYRES16=r0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4044805) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1})

[ 2260.734884][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2260.793451][ T1228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r3 = socket(0x22, 0x2, 0x4)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x1409, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r5=>r0, 0xb85, 0x7ff, 0x7c000})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@gettaction={0x98, 0x32, 0x20, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x40040)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x44}}, 0x0)

22:19:32 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_getnetconf={0x1c, 0x52, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x200040c1)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7ff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080004}, 0x8800)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'pimreg1\x00'})
r7 = socket(0x2b, 0x1, 0x800)
connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
shutdown(r0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000100)={0x7, 'ip6gretap0\x00', {}, 0xffff})
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8)
connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8)

22:19:32 executing program 4:
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=<r4=>r3, @ANYBLOB="04008e00080057003b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:32 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100007bd0f5160df97033d451bdbeb007fb1c50ea0aab3e1683b35cd84aa7db520edefee023b0e2359619e9d4dfbcbb682409710fefe2f480fb5146bf7aa9fd1fce0078a84a56141429d67cd27ae5cdfe8a77bf6b664e5fa3ba985a745395e7172c2adaea1f7b88c49e35ed74d3e2cffa3271f3d6efa0a3f2d8baa2e736d5095b4028f4e94a6124795be0fc900248494f10c8d2f2313bb95b6b0a615c06a78ab762e347fa170bd616c5", @ANYRES16=r0, @ANYBLOB="010026bd7000fddbdf251e0000003c012d800800010008000000ec000380050002000300000008000400010000805c000380060003000000000008000200030000000c0004000201aaaaaaaaaaaa0c0004000201aaaaaaaaaaaa06000100020000000c0004000000000000000000060001000300000008000200010000000c0004000203aaaaaaaaaaaa0800040000040000050002000100000005000200000000004400038006000100ffff000006000300ffff000006000300a1aa0000060001000300000006000300a2aa000006000100ffff0000060001000200000008000200010000000c000500ffffffffffffff7f08000100000000000c00050080000000000000000c0002000200aaaaaaaaaaaa14000380080001000300000008000400ff070000240003800500020001000000050002000300000005000200000000000800040001feffff"], 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4044805) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1})

22:19:32 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=<r4=>r3, @ANYBLOB="04008e00080057003b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:32 executing program 4:
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0)

22:19:32 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000800b00010067726574617000000c00028008000e0000000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)

22:19:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
r3 = socket(0x22, 0x2, 0x4)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x1409, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r5=>r0, 0xb85, 0x7ff, 0x7c000})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@gettaction={0x98, 0x32, 0x20, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x44}}, 0x0)

22:19:32 executing program 4:
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0)

[ 2261.348514][ T1293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2261.405727][   T28] audit: type=1804 audit(1696025972.730:10672): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3044/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
[ 2261.420689][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2261.432633][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:19:32 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
r3 = socket(0x22, 0x2, 0x4)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x1409, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000044) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r5=>r0, 0xb85, 0x7ff, 0x7c000})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@gettaction={0x98, 0x32, 0x20, 0x70bd27, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x44}}, 0x0)

22:19:32 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000800b00010067726574617000000c00028008000e0000000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)

[ 2261.503432][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:32 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async, rerun: 32)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_getnetconf={0x1c, 0x52, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x200040c1) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7ff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080004}, 0x8800) (async)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'pimreg1\x00'}) (async)
r7 = socket(0x2b, 0x1, 0x800)
connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
shutdown(r0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000100)={0x7, 'ip6gretap0\x00', {}, 0xffff}) (async)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8)

22:19:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7b1a42decfb41036b24d8e8afdad770826ed2b2d78d7771"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000000)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x100000002)

22:19:32 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000800b00010067726574617000000c00028008000e0000000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)

22:19:33 executing program 1:
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x0, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x50}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000100)=""/19, &(0x7f0000000140)=0x13)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2261.883255][   T28] audit: type=1804 audit(1696025973.210:10673): pid=1321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3310/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0
22:19:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0)

22:19:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@mpls_getnetconf={0x1c, 0x52, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x200040c1) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (rerun: 32)
shutdown(r0, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7ff}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080004}, 0x8800) (async)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'pimreg1\x00'})
r7 = socket(0x2b, 0x1, 0x800)
connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
shutdown(r0, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000100)={0x7, 'ip6gretap0\x00', {}, 0xffff}) (async, rerun: 32)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) (rerun: 32)
connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @none}, 0x8)

22:19:33 executing program 1:
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x0, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x50}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000100)=""/19, &(0x7f0000000140)=0x13)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x0, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x50}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000100)=""/19, &(0x7f0000000140)=0x13) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)

22:19:33 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$bt_cmtp(0x1f, 0x3, 0x5)
shutdown(r0, 0x0)
r2 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x800)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000100)={<r3=>0x0, 0x8000, 0x1, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000008c0)={r3, 0xde, 0x0, [0x8001, 0x7ff, 0x0, 0x3, 0x3d42], [0x0, 0x4d2, 0x5, 0x2, 0x7, 0x8, 0x0, 0x7f, 0x1, 0x2, 0x7, 0x7fffffffffffffff, 0x7, 0x800, 0x0, 0x0, 0x5, 0x1, 0x2ea82e58, 0xc00000, 0x6, 0x20, 0x1, 0x8, 0x7ab3, 0xffffffffffffffff, 0x54, 0x2432, 0x6, 0xbe, 0x10000, 0x8000000000000000, 0x67d5bc3a, 0x7fff, 0x8, 0x1d, 0x1ff, 0xffffffffffffffff, 0x8000, 0x1f, 0x5, 0x200, 0x4, 0x1, 0xffffffffffffffff, 0x21, 0x5, 0x4, 0x10000, 0x0, 0xffffffff, 0x9138, 0xe4ae, 0x2a66, 0xfffffffffffff001, 0x7fffffff, 0xffffffff, 0xfff, 0x2, 0x80000000, 0xfffffffffffff800, 0x8000000000000001, 0x1, 0x8, 0x80, 0x7f, 0xfffffffffffffeff, 0x71aef40d, 0x1, 0x1, 0x3, 0xd6b, 0x6, 0xea, 0x3f, 0x3, 0x2, 0x2, 0x7ff, 0x9b, 0x1, 0x3, 0x34b, 0x0, 0x7fff, 0x5, 0xfffffffffffffff9, 0xc53, 0x6, 0x9, 0x7fffffff, 0x0, 0x80, 0x4, 0x5, 0x2, 0x5, 0x9, 0xff, 0xa9e, 0x2, 0x8, 0x1f, 0x80000001, 0x401, 0x9, 0x4000, 0xa0000000000, 0x9, 0x7fffffff, 0x123, 0x100000000, 0xbd4, 0x7, 0x8000, 0x8, 0x2, 0x4e0, 0x5, 0x201a, 0x800]})
listen(r0, 0x401)

22:19:33 executing program 4:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x2, @local}}, [0x1, 0x6, 0x2, 0x1000, 0x1, 0x5, 0x2, 0x7fffffffffffffff, 0xffffffffffff0001, 0x9, 0x4, 0x7fff, 0x4, 0x401, 0x1f]}, &(0x7f0000000180)=0x100)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="48f08beb7a66f58b71be3a5e8966420bc2f6b7b36440ca236beb2c5a8ed62fefed", 0x21, 0xc851, &(0x7f0000000040)={0xa, 0x4e20, 0x3f, @mcast1, 0xfffffffd}, 0x1c)
shutdown(r0, 0x0)

22:19:33 executing program 1:
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x0, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x50}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000100)=""/19, &(0x7f0000000140)=0x13)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

22:19:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket$bt_cmtp(0x1f, 0x3, 0x5)
shutdown(r0, 0x0) (async)
r2 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x800) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000100)={<r3=>0x0, 0x8000, 0x1, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000008c0)={r3, 0xde, 0x0, [0x8001, 0x7ff, 0x0, 0x3, 0x3d42], [0x0, 0x4d2, 0x5, 0x2, 0x7, 0x8, 0x0, 0x7f, 0x1, 0x2, 0x7, 0x7fffffffffffffff, 0x7, 0x800, 0x0, 0x0, 0x5, 0x1, 0x2ea82e58, 0xc00000, 0x6, 0x20, 0x1, 0x8, 0x7ab3, 0xffffffffffffffff, 0x54, 0x2432, 0x6, 0xbe, 0x10000, 0x8000000000000000, 0x67d5bc3a, 0x7fff, 0x8, 0x1d, 0x1ff, 0xffffffffffffffff, 0x8000, 0x1f, 0x5, 0x200, 0x4, 0x1, 0xffffffffffffffff, 0x21, 0x5, 0x4, 0x10000, 0x0, 0xffffffff, 0x9138, 0xe4ae, 0x2a66, 0xfffffffffffff001, 0x7fffffff, 0xffffffff, 0xfff, 0x2, 0x80000000, 0xfffffffffffff800, 0x8000000000000001, 0x1, 0x8, 0x80, 0x7f, 0xfffffffffffffeff, 0x71aef40d, 0x1, 0x1, 0x3, 0xd6b, 0x6, 0xea, 0x3f, 0x3, 0x2, 0x2, 0x7ff, 0x9b, 0x1, 0x3, 0x34b, 0x0, 0x7fff, 0x5, 0xfffffffffffffff9, 0xc53, 0x6, 0x9, 0x7fffffff, 0x0, 0x80, 0x4, 0x5, 0x2, 0x5, 0x9, 0xff, 0xa9e, 0x2, 0x8, 0x1f, 0x80000001, 0x401, 0x9, 0x4000, 0xa0000000000, 0x9, 0x7fffffff, 0x123, 0x100000000, 0xbd4, 0x7, 0x8000, 0x8, 0x2, 0x4e0, 0x5, 0x201a, 0x800]}) (async)
listen(r0, 0x401)

22:19:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0)

[ 2262.517673][   T28] audit: type=1804 audit(1696025973.840:10674): pid=1340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3045/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
22:19:33 executing program 1:
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x40000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x1f, 0x6, 0x9, &(0x7f0000000000))
accept4(r0, 0x0, 0x0, 0x0)

22:19:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7b1a42decfb41036b24d8e8afdad770826ed2b2d78d7771"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000000)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x100000002)

22:19:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$bt_cmtp(0x1f, 0x3, 0x5)
shutdown(r0, 0x0) (async)
r2 = accept4(r0, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x800) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000100)={<r3=>0x0, 0x8000, 0x1, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000008c0)={r3, 0xde, 0x0, [0x8001, 0x7ff, 0x0, 0x3, 0x3d42], [0x0, 0x4d2, 0x5, 0x2, 0x7, 0x8, 0x0, 0x7f, 0x1, 0x2, 0x7, 0x7fffffffffffffff, 0x7, 0x800, 0x0, 0x0, 0x5, 0x1, 0x2ea82e58, 0xc00000, 0x6, 0x20, 0x1, 0x8, 0x7ab3, 0xffffffffffffffff, 0x54, 0x2432, 0x6, 0xbe, 0x10000, 0x8000000000000000, 0x67d5bc3a, 0x7fff, 0x8, 0x1d, 0x1ff, 0xffffffffffffffff, 0x8000, 0x1f, 0x5, 0x200, 0x4, 0x1, 0xffffffffffffffff, 0x21, 0x5, 0x4, 0x10000, 0x0, 0xffffffff, 0x9138, 0xe4ae, 0x2a66, 0xfffffffffffff001, 0x7fffffff, 0xffffffff, 0xfff, 0x2, 0x80000000, 0xfffffffffffff800, 0x8000000000000001, 0x1, 0x8, 0x80, 0x7f, 0xfffffffffffffeff, 0x71aef40d, 0x1, 0x1, 0x3, 0xd6b, 0x6, 0xea, 0x3f, 0x3, 0x2, 0x2, 0x7ff, 0x9b, 0x1, 0x3, 0x34b, 0x0, 0x7fff, 0x5, 0xfffffffffffffff9, 0xc53, 0x6, 0x9, 0x7fffffff, 0x0, 0x80, 0x4, 0x5, 0x2, 0x5, 0x9, 0xff, 0xa9e, 0x2, 0x8, 0x1f, 0x80000001, 0x401, 0x9, 0x4000, 0xa0000000000, 0x9, 0x7fffffff, 0x123, 0x100000000, 0xbd4, 0x7, 0x8000, 0x8, 0x2, 0x4e0, 0x5, 0x201a, 0x800]})
listen(r0, 0x401)

22:19:34 executing program 1:
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x40000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x1f, 0x6, 0x9, &(0x7f0000000000))
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x40000) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair(0x1f, 0x6, 0x9, &(0x7f0000000000)) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)

22:19:34 executing program 4:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x2, @local}}, [0x1, 0x6, 0x2, 0x1000, 0x1, 0x5, 0x2, 0x7fffffffffffffff, 0xffffffffffff0001, 0x9, 0x4, 0x7fff, 0x4, 0x401, 0x1f]}, &(0x7f0000000180)=0x100)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="48f08beb7a66f58b71be3a5e8966420bc2f6b7b36440ca236beb2c5a8ed62fefed", 0x21, 0xc851, &(0x7f0000000040)={0xa, 0x4e20, 0x3f, @mcast1, 0xfffffffd}, 0x1c)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x2, @local}}, [0x1, 0x6, 0x2, 0x1000, 0x1, 0x5, 0x2, 0x7fffffffffffffff, 0xffffffffffff0001, 0x9, 0x4, 0x7fff, 0x4, 0x401, 0x1f]}, &(0x7f0000000180)=0x100) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="48f08beb7a66f58b71be3a5e8966420bc2f6b7b36440ca236beb2c5a8ed62fefed", 0x21, 0xc851, &(0x7f0000000040)={0xa, 0x4e20, 0x3f, @mcast1, 0xfffffffd}, 0x1c) (async)
shutdown(r0, 0x0) (async)

22:19:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0)

[ 2262.935053][   T28] audit: type=1804 audit(1696025974.260:10675): pid=1370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3311/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
22:19:34 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:34 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x5, 0xa, 0x9, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x20050141)
shutdown(r0, 0x0)

22:19:34 executing program 1:
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x40000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x1f, 0x6, 0x9, &(0x7f0000000000))
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x40000) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair(0x1f, 0x6, 0x9, &(0x7f0000000000)) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)

22:19:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7b1a42decfb41036b24d8e8afdad770826ed2b2d78d7771"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000000) (async)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x100000002)

22:19:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000100001040000000000000075147c64cb", @ANYRES32=r3, @ANYBLOB="00000000000000001400120100677265746170000004000280000000c93a3775e11b6444e9fb2d78ff306943d8f1e5aefed0e85ea4895206dff74629b2cfbe02abf865bfd716023536a58360394ad74b9116848ea5476d114803c2880c776845711dbafb4d50998d6c7941baad492d7e3888007b52f149f3c9324815542e6d5b898136b1656dd9cf84f1f1f3336fc032a2ca1752c41868a4010c13b5c69e68fd017b9f"], 0x34}}, 0x0)

22:19:34 executing program 4:
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x2, @local}}, [0x1, 0x6, 0x2, 0x1000, 0x1, 0x5, 0x2, 0x7fffffffffffffff, 0xffffffffffff0001, 0x9, 0x4, 0x7fff, 0x4, 0x401, 0x1f]}, &(0x7f0000000180)=0x100) (async, rerun: 32)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="48f08beb7a66f58b71be3a5e8966420bc2f6b7b36440ca236beb2c5a8ed62fefed", 0x21, 0xc851, &(0x7f0000000040)={0xa, 0x4e20, 0x3f, @mcast1, 0xfffffffd}, 0x1c) (async, rerun: 64)
shutdown(r0, 0x0) (rerun: 64)

22:19:34 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

22:19:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0xfffffffffffffffd, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES64=r0], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"2f6cc49fa96f895d6570cb0d333ca0df", 0x0, 0x0, {0x1}, {0x5bb, 0x6}, 0x5, [0x9, 0x4, 0x100000001, 0x9, 0x9, 0xfffffffffffffffe, 0xf, 0x401, 0x7, 0x3, 0x1ff, 0xed60, 0x5, 0xf0, 0x1, 0x81]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='io_uring_file_get\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000540)=<r3=>0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendfile(r7, r2, &(0x7f00000001c0)=0x8, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYRESOCT, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707ce120a5106a595d1c7bb4b639", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r3)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000008c0)={{r0}, r3, 0x0, @unused=[0x800, 0x8000000000000000, 0xffff, 0x4], @devid})
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000880), 0x8)
shutdown(r9, 0x0)

22:19:34 executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000100001040000000000000075147c64cb", @ANYRES32=r3, @ANYBLOB="00000000000000001400120100677265746170000004000280000000c93a3775e11b6444e9fb2d78ff306943d8f1e5aefed0e85ea4895206dff74629b2cfbe02abf865bfd716023536a58360394ad74b9116848ea5476d114803c2880c776845711dbafb4d50998d6c7941baad492d7e3888007b52f149f3c9324815542e6d5b898136b1656dd9cf84f1f1f3336fc032a2ca1752c41868a4010c13b5c69e68fd017b9f"], 0x34}}, 0x0)

22:19:34 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair(0x5, 0xa, 0x9, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x20050141) (async, rerun: 64)
shutdown(r0, 0x0) (rerun: 64)

[ 2263.489293][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:19:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"2f6cc49fa96f895d6570cb0d333ca0df", 0x0, 0x0, {0x1}, {0x5bb, 0x6}, 0x5, [0x9, 0x4, 0x100000001, 0x9, 0x9, 0xfffffffffffffffe, 0xf, 0x401, 0x7, 0x3, 0x1ff, 0xed60, 0x5, 0xf0, 0x1, 0x81]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) (async)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='io_uring_file_get\x00', r1}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000540)=<r3=>0x0) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async, rerun: 64)
sendfile(r7, r2, &(0x7f00000001c0)=0x8, 0x2) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYRESOCT, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707ce120a5106a595d1c7bb4b639", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r3) (async)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000008c0)={{r0}, r3, 0x0, @unused=[0x800, 0x8000000000000000, 0xffff, 0x4], @devid}) (async)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000880), 0x8) (async, rerun: 32)
shutdown(r9, 0x0) (rerun: 32)

[ 2263.653888][   T28] audit: type=1804 audit(1696025974.980:10676): pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3046/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
22:19:35 executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000100001040000000000000075147c64cb", @ANYRES32=r3, @ANYBLOB="00000000000000001400120100677265746170000004000280000000c93a3775e11b6444e9fb2d78ff306943d8f1e5aefed0e85ea4895206dff74629b2cfbe02abf865bfd716023536a58360394ad74b9116848ea5476d114803c2880c776845711dbafb4d50998d6c7941baad492d7e3888007b52f149f3c9324815542e6d5b898136b1656dd9cf84f1f1f3336fc032a2ca1752c41868a4010c13b5c69e68fd017b9f"], 0x34}}, 0x0)

22:19:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
accept4(r0, 0x0, 0x0, 0x0)

22:19:35 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x5, 0xa, 0x9, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x20050141)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socketpair(0x5, 0xa, 0x9, &(0x7f0000000000)) (async)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8801}, 0x20050141) (async)
shutdown(r0, 0x0) (async)

22:19:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"2f6cc49fa96f895d6570cb0d333ca0df", 0x0, 0x0, {0x1}, {0x5bb, 0x6}, 0x5, [0x9, 0x4, 0x100000001, 0x9, 0x9, 0xfffffffffffffffe, 0xf, 0x401, 0x7, 0x3, 0x1ff, 0xed60, 0x5, 0xf0, 0x1, 0x81]}) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='io_uring_file_get\x00', r1}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000540)=<r3=>0x0) (rerun: 64)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendfile(r7, r2, &(0x7f00000001c0)=0x8, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYRESOCT, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707ce120a5106a595d1c7bb4b639", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r3) (async, rerun: 32)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000008c0)={{r0}, r3, 0x0, @unused=[0x800, 0x8000000000000000, 0xffff, 0x4], @devid}) (async, rerun: 32)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r9, &(0x7f0000000880), 0x8) (async, rerun: 64)
shutdown(r9, 0x0) (rerun: 64)

22:19:35 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0xfffffffffffffffd, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES64=r0], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:35 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:35 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
accept4(r0, 0x0, 0x0, 0x0)

22:19:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r10}]}}}]}, 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r14}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r14}]}}}]}, 0x3c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r15=>0x0}, &(0x7f0000000200)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=<r16=>0x0, &(0x7f0000000280)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f64a71b38291c28}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:35 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0xfffffffffffffffd, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES64=r0], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:35 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r2 = socket(0x5, 0x80008, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r3 = socket(0xa, 0x1, 0x0)
close(r3)
sendmmsg$inet_sctp(r3, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x23, &(0x7f00000000c0)={r5}, 0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xfdec}, 0x8)

[ 2264.656665][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 2264.656688][   T28] audit: type=1804 audit(1696025975.980:10679): pid=1447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3047/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
22:19:36 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r1, 0x0)

22:19:36 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
accept4(r0, 0x0, 0x0, 0x0)

[ 2264.830511][   T28] audit: type=1804 audit(1696025976.150:10680): pid=1460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3315/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0
22:19:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r10}]}}}]}, 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r14}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r14}]}}}]}, 0x3c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r15=>0x0}, &(0x7f0000000200)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=<r16=>0x0, &(0x7f0000000280)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f64a71b38291c28}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{}], 0xa, "6b996085aae375be7e0664d8c0cb61074a86609421710f62b8f29870cbf544b9a689c8886a32fd7d8986f0db3c81c2c5df70f21f205a0e4b608fd69c0951680e56c2bc0a2388af10027f9ac7a6d152a59963516d7bbb0388addd2c9f5f7ddd4ad07f089b984d258e2750ae4ec4fea6848d4a4e906b53581a0136cee8ac3b962d09734c2a32a25026a704614fa0fbcc4f106a91275bc834a73d57efd75bf87ba318da9f2c234cb06960c213a2951233140fa7bb77424bc72fac3855a05c08253baae852c4d1fdd673a9eeef59870db7f9359bccfe7b09f75a9f82f8d3ba844e9ece3994dbd9eff57e8c21e30f190bc7b75e7d08c63448c1c8c1"}, 0x105)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:36 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x22, 0x2, 0x4) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r2 = socket(0x5, 0x80008, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
socket(0xa, 0x1, 0x0) (async)
r3 = socket(0xa, 0x1, 0x0)
close(r3)
sendmmsg$inet_sctp(r3, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x23, &(0x7f00000000c0)={r5}, 0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xfdec}, 0x8) (async)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xfdec}, 0x8)

22:19:36 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
accept4(r0, 0x0, 0x0, 0x0)

22:19:36 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x148}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x118, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}}, 0x4815)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r10}]}}}]}, 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r13, &(0x7f0000000000)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r14}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r14}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r14}]}}}]}, 0x3c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r15=>0x0}, &(0x7f0000000200)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=<r16=>0x0, &(0x7f0000000280)=0x4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f64a71b38291c28}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:36 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async)
accept4(r0, 0x0, 0x0, 0x0)

22:19:36 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0)
r2 = socket(0x5, 0x80008, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r3 = socket(0xa, 0x1, 0x0)
close(r3) (async)
sendmmsg$inet_sctp(r3, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) (async)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x23, &(0x7f00000000c0)={r5}, 0x8) (async)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xfdec}, 0x8)

[ 2265.545511][   T28] audit: type=1804 audit(1696025976.870:10681): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3316/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[ 2265.582029][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:19:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newroute={0x24, 0x18, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x2, 0xfd, 0x2, 0xfe, 0x3}, [@RTA_IIF={0x8, 0x3, r3}]}, 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {0x5}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xfa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc001)

[ 2265.595644][ T1478] __nla_validate_parse: 162 callbacks suppressed
[ 2265.595667][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
22:19:37 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"3c2a9c01aefb3adb5c4ab09a81f2f756", 0x0, 0x0, {0x0, 0x8}, {0x80000000, 0x29b}, 0x3, [0x1, 0x20000007fff, 0x5, 0x8, 0x80, 0x0, 0x9, 0x1, 0x2, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0xfff, 0x9, 0x20]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
listen(r1, 0xfffffffe)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000280)=0x1e, 0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20}, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="4667df66c6ba58066c2b787dd8c532b45375f34006780b11f425ce608921b591fd36179a960d03087ec7a44c50246ae9ae78b83112db05500b2c59d631e67ab51af063cdc68b4a6630b7ca76458aa015d94d580faac875c5a06ed491affe63122fc416848fc572026186ebca76766842aadedfacf7", 0x75, 0x4004c10, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)

22:19:37 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r1, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
socket$bt_cmtp(0x1f, 0x3, 0x5) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
shutdown(r1, 0x0) (async)

[ 2265.787104][   T28] audit: type=1804 audit(1696025977.110:10682): pid=1492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3048/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
22:19:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0xffffffffffffffbc)
shutdown(r0, 0x0)

[ 2265.836116][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0xffffffffffffffbc) (async, rerun: 64)
shutdown(r0, 0x0) (rerun: 64)

[ 2265.984910][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2266.059332][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2266.095864][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2266.122892][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2266.136850][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2266.150409][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:37 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"3c2a9c01aefb3adb5c4ab09a81f2f756", 0x0, 0x0, {0x0, 0x8}, {0x80000000, 0x29b}, 0x3, [0x1, 0x20000007fff, 0x5, 0x8, 0x80, 0x0, 0x9, 0x1, 0x2, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0xfff, 0x9, 0x20]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
listen(r1, 0xfffffffe)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000280)=0x1e, 0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20}, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="4667df66c6ba58066c2b787dd8c532b45375f34006780b11f425ce608921b591fd36179a960d03087ec7a44c50246ae9ae78b83112db05500b2c59d631e67ab51af063cdc68b4a6630b7ca76458aa015d94d580faac875c5a06ed491affe63122fc416848fc572026186ebca76766842aadedfacf7", 0x75, 0x4004c10, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"3c2a9c01aefb3adb5c4ab09a81f2f756", 0x0, 0x0, {0x0, 0x8}, {0x80000000, 0x29b}, 0x3, [0x1, 0x20000007fff, 0x5, 0x8, 0x80, 0x0, 0x9, 0x1, 0x2, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0xfff, 0x9, 0x20]}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
listen(r1, 0xfffffffe) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000280)=0x1e, 0x4) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
sendto$inet6(r3, &(0x7f00000002c0)="4667df66c6ba58066c2b787dd8c532b45375f34006780b11f425ce608921b591fd36179a960d03087ec7a44c50246ae9ae78b83112db05500b2c59d631e67ab51af063cdc68b4a6630b7ca76458aa015d94d580faac875c5a06ed491affe63122fc416848fc572026186ebca76766842aadedfacf7", 0x75, 0x4004c10, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) (async)

22:19:37 executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newroute={0x24, 0x18, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x2, 0xfd, 0x2, 0xfe, 0x3}, [@RTA_IIF={0x8, 0x3, r3}]}, 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {0x5}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xfa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc001)

22:19:37 executing program 4:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r1, 0x0)

[ 2266.165291][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2266.180549][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:37 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0xffffffffffffffbc)
shutdown(r0, 0x0)

22:19:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{}], 0xa, "6b996085aae375be7e0664d8c0cb61074a86609421710f62b8f29870cbf544b9a689c8886a32fd7d8986f0db3c81c2c5df70f21f205a0e4b608fd69c0951680e56c2bc0a2388af10027f9ac7a6d152a59963516d7bbb0388addd2c9f5f7ddd4ad07f089b984d258e2750ae4ec4fea6848d4a4e906b53581a0136cee8ac3b962d09734c2a32a25026a704614fa0fbcc4f106a91275bc834a73d57efd75bf87ba318da9f2c234cb06960c213a2951233140fa7bb77424bc72fac3855a05c08253baae852c4d1fdd673a9eeef59870db7f9359bccfe7b09f75a9f82f8d3ba844e9ece3994dbd9eff57e8c21e30f190bc7b75e7d08c63448c1c8c1"}, 0x105) (async, rerun: 64)
sendfile(r6, r5, 0x0, 0x100000002) (rerun: 64)

22:19:37 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"3c2a9c01aefb3adb5c4ab09a81f2f756", 0x0, 0x0, {0x0, 0x8}, {0x80000000, 0x29b}, 0x3, [0x1, 0x20000007fff, 0x5, 0x8, 0x80, 0x0, 0x9, 0x1, 0x2, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0xfff, 0x9, 0x20]}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
listen(r1, 0xfffffffe)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000280)=0x1e, 0x4) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000002c0)="4667df66c6ba58066c2b787dd8c532b45375f34006780b11f425ce608921b591fd36179a960d03087ec7a44c50246ae9ae78b83112db05500b2c59d631e67ab51af063cdc68b4a6630b7ca76458aa015d94d580faac875c5a06ed491affe63122fc416848fc572026186ebca76766842aadedfacf7", 0x75, 0x4004c10, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)

22:19:37 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newroute={0x24, 0x18, 0x200, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x2, 0xfd, 0x2, 0xfe, 0x3}, [@RTA_IIF={0x8, 0x3, r3}]}, 0x24}}, 0x0) (rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {0x5}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xfa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc001)

22:19:37 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:37 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:19:37 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
shutdown(r1, 0x1)
shutdown(r0, 0x0)

[ 2266.617194][   T28] audit: type=1804 audit(1696025977.940:10683): pid=1535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3317/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
22:19:38 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async, rerun: 64)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 64)
shutdown(r1, 0x1) (async)
shutdown(r0, 0x0)

22:19:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r6 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140))
getsockopt(r6, 0x3, 0x0, &(0x7f0000000300)=""/2, &(0x7f0000000380)=0x2)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in6}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2266.855042][   T28] audit: type=1804 audit(1696025978.180:10684): pid=1540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3049/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0
22:19:38 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
shutdown(r1, 0x1)
shutdown(r0, 0x0)

22:19:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) (async)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r6 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140))
getsockopt(r6, 0x3, 0x0, &(0x7f0000000300)=""/2, &(0x7f0000000380)=0x2) (async)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in6}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:38 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x8}, &(0x7f00000000c0)=0x90)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
shutdown(r1, 0x0)

22:19:38 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async, rerun: 32)
r6 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (rerun: 32)
getsockopt(r6, 0x3, 0x0, &(0x7f0000000300)=""/2, &(0x7f0000000380)=0x2) (async)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in6}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (rerun: 64)

22:19:38 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
shutdown(r0, 0x0)

22:19:38 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0', [{}], 0xa, "6b996085aae375be7e0664d8c0cb61074a86609421710f62b8f29870cbf544b9a689c8886a32fd7d8986f0db3c81c2c5df70f21f205a0e4b608fd69c0951680e56c2bc0a2388af10027f9ac7a6d152a59963516d7bbb0388addd2c9f5f7ddd4ad07f089b984d258e2750ae4ec4fea6848d4a4e906b53581a0136cee8ac3b962d09734c2a32a25026a704614fa0fbcc4f106a91275bc834a73d57efd75bf87ba318da9f2c234cb06960c213a2951233140fa7bb77424bc72fac3855a05c08253baae852c4d1fdd673a9eeef59870db7f9359bccfe7b09f75a9f82f8d3ba844e9ece3994dbd9eff57e8c21e30f190bc7b75e7d08c63448c1c8c1"}, 0x105)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:38 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x8}, &(0x7f00000000c0)=0x90) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
shutdown(r1, 0x0)

22:19:38 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 2267.617754][   T28] audit: type=1804 audit(1696025978.940:10685): pid=1576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3318/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0
[ 2267.648727][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:19:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
shutdown(r0, 0x0)

22:19:39 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', <r5=>r4, 0x20, 0x8000, 0x0, 0x5, {{0x24, 0x4, 0x3, 0x3c, 0x90, 0x65, 0x0, 0x1e, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x30, 0x1, 0x5, [{@loopback, 0x6}, {@private=0xa010101, 0x7}, {@remote, 0x1}, {@local, 0x10000}, {@local}, {@broadcast, 0xfa2}, {@rand_addr=0x64010102, 0x10001}, {@local, 0xffffffff}, {@private=0xa010101, 0xdbcc0000}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x10, "27250e45c0adbb7c06510d5588cb"}, {0x0, 0x3, "b5"}, {0x5, 0xd, "69dd796d19743dd6d9f857"}]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b00010067726574800000003aeb043bd58d7b6600000000"], 0x34}}, 0x0)

22:19:39 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x8}, &(0x7f00000000c0)=0x90) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8) (async)
shutdown(r1, 0x0)

22:19:39 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="d550b8cc", @ANYRES16=r2, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4}, 0x41)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r5, r4, 0x0, 0x100000002)

22:19:39 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', <r5=>r4, 0x20, 0x8000, 0x0, 0x5, {{0x24, 0x4, 0x3, 0x3c, 0x90, 0x65, 0x0, 0x1e, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x30, 0x1, 0x5, [{@loopback, 0x6}, {@private=0xa010101, 0x7}, {@remote, 0x1}, {@local, 0x10000}, {@local}, {@broadcast, 0xfa2}, {@rand_addr=0x64010102, 0x10001}, {@local, 0xffffffff}, {@private=0xa010101, 0xdbcc0000}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x10, "27250e45c0adbb7c06510d5588cb"}, {0x0, 0x3, "b5"}, {0x5, 0xd, "69dd796d19743dd6d9f857"}]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b00010067726574800000003aeb043bd58d7b6600000000"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r4, 0x20, 0x8000, 0x0, 0x5, {{0x24, 0x4, 0x3, 0x3c, 0x90, 0x65, 0x0, 0x1e, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x30, 0x1, 0x5, [{@loopback, 0x6}, {@private=0xa010101, 0x7}, {@remote, 0x1}, {@local, 0x10000}, {@local}, {@broadcast, 0xfa2}, {@rand_addr=0x64010102, 0x10001}, {@local, 0xffffffff}, {@private=0xa010101, 0xdbcc0000}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x10, "27250e45c0adbb7c06510d5588cb"}, {0x0, 0x3, "b5"}, {0x5, 0xd, "69dd796d19743dd6d9f857"}]}]}}}}}) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b00010067726574800000003aeb043bd58d7b6600000000"], 0x34}}, 0x0) (async)

22:19:39 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 2268.171593][   T28] audit: type=1804 audit(1696025979.500:10686): pid=1597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3319/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0
[ 2268.230709][   T28] audit: type=1804 audit(1696025979.530:10687): pid=1586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3050/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
22:19:39 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async)
shutdown(r0, 0x0) (async)

22:19:39 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r4, 0x20, 0x8000, 0x0, 0x5, {{0x24, 0x4, 0x3, 0x3c, 0x90, 0x65, 0x0, 0x1e, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x30, 0x1, 0x5, [{@loopback, 0x6}, {@private=0xa010101, 0x7}, {@remote, 0x1}, {@local, 0x10000}, {@local}, {@broadcast, 0xfa2}, {@rand_addr=0x64010102, 0x10001}, {@local, 0xffffffff}, {@private=0xa010101, 0xdbcc0000}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x10, "27250e45c0adbb7c06510d5588cb"}, {0x0, 0x3, "b5"}, {0x5, 0xd, "69dd796d19743dd6d9f857"}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', <r5=>r4, 0x20, 0x8000, 0x0, 0x5, {{0x24, 0x4, 0x3, 0x3c, 0x90, 0x65, 0x0, 0x1e, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0x30, 0x1, 0x5, [{@loopback, 0x6}, {@private=0xa010101, 0x7}, {@remote, 0x1}, {@local, 0x10000}, {@local}, {@broadcast, 0xfa2}, {@rand_addr=0x64010102, 0x10001}, {@local, 0xffffffff}, {@private=0xa010101, 0xdbcc0000}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x26, 0x0, [{0x2, 0x10, "27250e45c0adbb7c06510d5588cb"}, {0x0, 0x3, "b5"}, {0x5, 0xd, "69dd796d19743dd6d9f857"}]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b00010067726574800000003aeb043bd58d7b6600000000"], 0x34}}, 0x0)

22:19:39 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:40 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x0)

22:19:40 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
connect$bt_sco(r1, &(0x7f0000000040), 0x8)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00')
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ffff0000000000000200000000000000370800000000000002000000000000000700000000000000be0f0000000000000f0800000600000004000000020000000300000000000000400000000000000000020000000000000000000000000000100000000000000000000000000000000000000000000000cb08cd111bdae13e45bde47ae40876f5e68652d3d94cd10676cb332a320b73446e45642d29807e5e203444ac6a0a8a08ef5d95121e77b87a62f32c839d87d17423768a10019713727a4ef176268684baab990bdffe37b0df2a234b7b70bc2ec8e2f588c7d47211e7dee9ff26a84ab11c08933d4b983d753d68ca8c23d103a3bb3baaa25cb6a37e925f2b318b75f0fca78fe4fca7fe9b6e82d3f0e202aa2348f1d31c641bc4d4cb4546000ddca17e284ca7f885e8a6f93c879ad31d962bb569760903c246355873f3c77c2943d83093e38dfc6a1be38ad61b20e7bd968d56d6394645b414021e0d620f55c62dc0b5806a22d507"])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r5, r4, 0x0, 0x100000002)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0xf)
bind$bt_sco(r1, &(0x7f0000000480), 0x8)
write$binfmt_script(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c6530200020285e5c2620403a2f235d0a2ee0cff646bb19da9476581e30df05de15c21c5e8641a24c7a03ff13d282136477ca430944ed12008a31fed748a036960a693d58daf40771954f3afd6ebe645c79a17aea4bd8ae4658555f6263c64826abb82f4fc1706708157c2bd6da2133a39f88b8b170cd0c8857f3c5bbe46b4613a4e5ad1a677997bb1c2941f970067fb10c3e40e21c506c62845c98fb3b0b00"], 0x9e)
sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa4, 0x0, 0x701, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8fae6b33d86e51a96af5ff9e72bff0e3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "520b50a033f02303542150a7b85ffdab"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8004785aa3c434005d463969353ee516"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2e558c27b96f113a001a71b12f112730"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a251581de4fae2c9e4039cc50808faaa"}, @NL80211_ATTR_MAC={0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10080}, 0x8844)

22:19:40 executing program 2:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:40 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="d550b8cc", @ANYRES16=r2, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4}, 0x41)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r5, r4, 0x0, 0x100000002) (async)
sendfile(r5, r4, 0x0, 0x100000002)

22:19:40 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r1, 0x0, 0x0, 0x0)

22:19:40 executing program 2:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:40 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r1, 0x0, 0x0, 0x0)

22:19:40 executing program 4:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x0)

22:19:40 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
connect$bt_sco(r1, &(0x7f0000000040), 0x8)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00')
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ffff0000000000000200000000000000370800000000000002000000000000000700000000000000be0f0000000000000f0800000600000004000000020000000300000000000000400000000000000000020000000000000000000000000000100000000000000000000000000000000000000000000000cb08cd111bdae13e45bde47ae40876f5e68652d3d94cd10676cb332a320b73446e45642d29807e5e203444ac6a0a8a08ef5d95121e77b87a62f32c839d87d17423768a10019713727a4ef176268684baab990bdffe37b0df2a234b7b70bc2ec8e2f588c7d47211e7dee9ff26a84ab11c08933d4b983d753d68ca8c23d103a3bb3baaa25cb6a37e925f2b318b75f0fca78fe4fca7fe9b6e82d3f0e202aa2348f1d31c641bc4d4cb4546000ddca17e284ca7f885e8a6f93c879ad31d962bb569760903c246355873f3c77c2943d83093e38dfc6a1be38ad61b20e7bd968d56d6394645b414021e0d620f55c62dc0b5806a22d507"])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r5, r4, 0x0, 0x100000002) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0xf)
bind$bt_sco(r1, &(0x7f0000000480), 0x8) (async)
write$binfmt_script(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c6530200020285e5c2620403a2f235d0a2ee0cff646bb19da9476581e30df05de15c21c5e8641a24c7a03ff13d282136477ca430944ed12008a31fed748a036960a693d58daf40771954f3afd6ebe645c79a17aea4bd8ae4658555f6263c64826abb82f4fc1706708157c2bd6da2133a39f88b8b170cd0c8857f3c5bbe46b4613a4e5ad1a677997bb1c2941f970067fb10c3e40e21c506c62845c98fb3b0b00"], 0x9e) (async)
sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa4, 0x0, 0x701, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8fae6b33d86e51a96af5ff9e72bff0e3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "520b50a033f02303542150a7b85ffdab"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8004785aa3c434005d463969353ee516"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2e558c27b96f113a001a71b12f112730"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a251581de4fae2c9e4039cc50808faaa"}, @NL80211_ATTR_MAC={0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10080}, 0x8844)

[ 2269.209357][   T28] audit: type=1804 audit(1696025980.530:10688): pid=1614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3051/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0
22:19:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="d550b8cc", @ANYRES16=r2, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4}, 0x41) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r5, r4, 0x0, 0x100000002)

22:19:40 executing program 2:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2269.729054][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:19:41 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:41 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r1, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)) (async)
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)

22:19:41 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
connect$bt_sco(r1, &(0x7f0000000880)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x0)

22:19:41 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>r0})
connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00')
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r5, r4, 0x0, 0x100000002) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0xf)
bind$bt_sco(r1, &(0x7f0000000480), 0x8) (async)
write$binfmt_script(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c6530200020285e5c2620403a2f235d0a2ee0cff646bb19da9476581e30df05de15c21c5e8641a24c7a03ff13d282136477ca430944ed12008a31fed748a036960a693d58daf40771954f3afd6ebe645c79a17aea4bd8ae4658555f6263c64826abb82f4fc1706708157c2bd6da2133a39f88b8b170cd0c8857f3c5bbe46b4613a4e5ad1a677997bb1c2941f970067fb10c3e40e21c506c62845c98fb3b0b00"], 0x9e) (async)
sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xa4, 0x0, 0x701, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8fae6b33d86e51a96af5ff9e72bff0e3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "520b50a033f02303542150a7b85ffdab"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8004785aa3c434005d463969353ee516"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2e558c27b96f113a001a71b12f112730"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a251581de4fae2c9e4039cc50808faaa"}, @NL80211_ATTR_MAC={0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10080}, 0x8844)

22:19:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:41 executing program 5:
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000100)={@multicast1, @remote, 0x1, "ab279b1b33760a83a9d70f2fbafcc921593104408cae257c3357443a3813a72c", 0x8, 0xffffffff, 0xfffffc00, 0x8}, 0x3c)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200))
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)

22:19:41 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x23, 0x2, 0x9)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:41 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x100800)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x1)

22:19:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)

[ 2270.252618][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 2270.252641][   T28] audit: type=1804 audit(1696025981.580:10690): pid=1675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3322/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
22:19:41 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x100800) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x1)

[ 2270.427176][   T28] audit: type=1804 audit(1696025981.670:10691): pid=1674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3052/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
22:19:41 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x23, 0x2, 0x9)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (rerun: 32)

[ 2270.606254][ T1671] __nla_validate_parse: 159 callbacks suppressed
[ 2270.606283][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2270.660148][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2270.710123][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2270.759672][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:42 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:42 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x1)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)

22:19:42 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x100800) (async)
accept4(r0, 0x0, 0x0, 0x100800)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x1)

22:19:42 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0x23, 0x2, 0x9)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0)

22:19:42 executing program 5:
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000100)={@multicast1, @remote, 0x1, "ab279b1b33760a83a9d70f2fbafcc921593104408cae257c3357443a3813a72c", 0x8, 0xffffffff, 0xfffffc00, 0x8}, 0x3c)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200))
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000100)={@multicast1, @remote, 0x1, "ab279b1b33760a83a9d70f2fbafcc921593104408cae257c3357443a3813a72c", 0x8, 0xffffffff, 0xfffffc00, 0x8}, 0x3c) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendfile(r7, r6, 0x0, 0x100000002) (async)

22:19:42 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x1)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x1) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r1, &(0x7f0000000000), 0x8) (async)

22:19:42 executing program 1:
r0 = socket(0x11, 0x0, 0x6)
ioctl$int_out(r0, 0x5460, &(0x7f00000001c0))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xe)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000070700000000000000c487a7884b0281152d8ce9a5e1869c9930251887b18733ab8599eb34565c370e8b52ae481c04f8e10e4c08000000e4e3a4", @ANYRES16=r4, @ANYBLOB="200025bd7000fedbdf250a00000005003300010000000500300001000000080034000000008005002d00010000000500370001000000050035000500000005003800010000000500370000000000050035000600000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x81)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:19:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=@ipv6_newnexthop={0x474, 0x68, 0x4, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x0, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x438, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x434, 0x1, {{0x2, {0xfa0e187e7cedcce4, 0x2, 0x4, 0x1, 0x8, 0x14, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1, @loopback, @private2, @loopback, @private2, @remote, @mcast2, @loopback, @private1, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @empty, @local, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}]}, 0x474}, 0x1, 0x0, 0x0, 0x10000400}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x0, @multicast2}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000010055ab490c0000000000000004004e542daa4ff9ffefd156fe992c010f4f649260df1651f648cba27bf65a85ceea94d219fb99dd4299e02fcb4ecfe1b5d3af694eb9c13b7d7c0d9d878a85e85aeba974f63dd24adae579c0780e910b3a41d3b19475", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={<r5=>0x0, @rand_addr, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delchain={0xbc, 0x65, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x1c}, {0xfff3, 0x1}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_rsvp={{0x9}, {0x7c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_POLICE={0x60, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x372, 0x10000000, 0x2, 0x82b, 0xddd, {0xcf, 0x1, 0x1f, 0xb54f, 0x0, 0x3}, {0x9, 0x0, 0xa1, 0x8000, 0xff, 0xfffffff8}, 0x80, 0x5, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xefb8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8a}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000)

22:19:42 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x1)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)

[ 2271.343588][   T28] audit: type=1804 audit(1696025982.670:10692): pid=1717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3323/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0
[ 2271.350661][ T1717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2271.417643][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2271.455906][   T28] audit: type=1804 audit(1696025982.730:10693): pid=1718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3053/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
22:19:42 executing program 1:
r0 = socket(0x11, 0x0, 0x6)
ioctl$int_out(r0, 0x5460, &(0x7f00000001c0))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xe) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000070700000000000000c487a7884b0281152d8ce9a5e1869c9930251887b18733ab8599eb34565c370e8b52ae481c04f8e10e4c08000000e4e3a4", @ANYRES16=r4, @ANYBLOB="200025bd7000fedbdf250a00000005003300010000000500300001000000080034000000008005002d00010000000500370001000000050035000500000005003800010000000500370000000000050035000600000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x81)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:19:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=@ipv6_newnexthop={0x474, 0x68, 0x4, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x0, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x438, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x434, 0x1, {{0x2, {0xfa0e187e7cedcce4, 0x2, 0x4, 0x1, 0x8, 0x14, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1, @loopback, @private2, @loopback, @private2, @remote, @mcast2, @loopback, @private1, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @empty, @local, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}]}, 0x474}, 0x1, 0x0, 0x0, 0x10000400}, 0x80)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x0, @multicast2}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000010055ab490c0000000000000004004e542daa4ff9ffefd156fe992c010f4f649260df1651f648cba27bf65a85ceea94d219fb99dd4299e02fcb4ecfe1b5d3af694eb9c13b7d7c0d9d878a85e85aeba974f63dd24adae579c0780e910b3a41d3b19475", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={<r5=>0x0, @rand_addr, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delchain={0xbc, 0x65, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x1c}, {0xfff3, 0x1}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_rsvp={{0x9}, {0x7c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_POLICE={0x60, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x372, 0x10000000, 0x2, 0x82b, 0xddd, {0xcf, 0x1, 0x1f, 0xb54f, 0x0, 0x3}, {0x9, 0x0, 0xa1, 0x8000, 0xff, 0xfffffff8}, 0x80, 0x5, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xefb8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8a}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=@ipv6_newnexthop={0x474, 0x68, 0x4, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x0, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x438, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x434, 0x1, {{0x2, {0xfa0e187e7cedcce4, 0x2, 0x4, 0x1, 0x8, 0x14, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1, @loopback, @private2, @loopback, @private2, @remote, @mcast2, @loopback, @private1, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @empty, @local, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}]}, 0x474}, 0x1, 0x0, 0x0, 0x10000400}, 0x80) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x0, @multicast2}}) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000010055ab490c0000000000000004004e542daa4ff9ffefd156fe992c010f4f649260df1651f648cba27bf65a85ceea94d219fb99dd4299e02fcb4ecfe1b5d3af694eb9c13b7d7c0d9d878a85e85aeba974f63dd24adae579c0780e910b3a41d3b19475", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x8) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @local}, &(0x7f0000000240)=0xc) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delchain={0xbc, 0x65, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x1c}, {0xfff3, 0x1}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_rsvp={{0x9}, {0x7c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_POLICE={0x60, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x372, 0x10000000, 0x2, 0x82b, 0xddd, {0xcf, 0x1, 0x1f, 0xb54f, 0x0, 0x3}, {0x9, 0x0, 0xa1, 0x8000, 0xff, 0xfffffff8}, 0x80, 0x5, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xefb8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8a}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) (async)

[ 2271.517696][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2271.546454][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:42 executing program 5:
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000100)={@multicast1, @remote, 0x1, "ab279b1b33760a83a9d70f2fbafcc921593104408cae257c3357443a3813a72c", 0x8, 0xffffffff, 0xfffffc00, 0x8}, 0x3c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200))
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r6, 0x0, 0x100000002)

[ 2271.596218][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2271.660677][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2271.809137][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:19:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=@ipv6_newnexthop={0x474, 0x68, 0x4, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x10}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x3}, {0x2, 0x1}, {0x0, 0x2}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x438, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x434, 0x1, {{0x2, {0xfa0e187e7cedcce4, 0x2, 0x4, 0x1, 0x8, 0x14, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1, @loopback, @private2, @loopback, @private2, @remote, @mcast2, @loopback, @private1, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @empty}, @local, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @remote, @empty, @local, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}}}]}, 0x474}, 0x1, 0x0, 0x0, 0x10000400}, 0x80) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x0, @multicast2}})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000010055ab490c0000000000000004004e542daa4ff9ffefd156fe992c010f4f649260df1651f648cba27bf65a85ceea94d219fb99dd4299e02fcb4ecfe1b5d3af694eb9c13b7d7c0d9d878a85e85aeba974f63dd24adae579c0780e910b3a41d3b19475", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x34}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x8)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={<r5=>0x0, @rand_addr, @local}, &(0x7f0000000240)=0xc)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delchain={0xbc, 0x65, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x1c}, {0xfff3, 0x1}, {0xf, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_rsvp={{0x9}, {0x7c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_POLICE={0x60, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x372, 0x10000000, 0x2, 0x82b, 0xddd, {0xcf, 0x1, 0x1f, 0xb54f, 0x0, 0x3}, {0x9, 0x0, 0xa1, 0x8000, 0xff, 0xfffffff8}, 0x80, 0x5, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xefb8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8a}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000)

22:19:43 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100)

22:19:43 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))

22:19:43 executing program 1:
r0 = socket(0x11, 0x0, 0x6)
ioctl$int_out(r0, 0x5460, &(0x7f00000001c0))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xe)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000070700000000000000c487a7884b0281152d8ce9a5e1869c9930251887b18733ab8599eb34565c370e8b52ae481c04f8e10e4c08000000e4e3a4", @ANYRES16=r4, @ANYBLOB="200025bd7000fedbdf250a00000005003300010000000500300001000000080034000000008005002d00010000000500370001000000050035000500000005003800010000000500370000000000050035000600000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x81)
r5 = socket(0x22, 0x2, 0x4)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
socket(0x11, 0x0, 0x6) (async)
ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0xe) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) (async)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000070700000000000000c487a7884b0281152d8ce9a5e1869c9930251887b18733ab8599eb34565c370e8b52ae481c04f8e10e4c08000000e4e3a4", @ANYRES16=r4, @ANYBLOB="200025bd7000fedbdf250a00000005003300010000000500300001000000080034000000008005002d00010000000500370001000000050035000500000005003800010000000500370000000000050035000600000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x81) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r5, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
connect$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)

[ 2271.933853][   T28] audit: type=1804 audit(1696025983.260:10694): pid=1742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3324/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0
22:19:43 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))

22:19:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)

22:19:43 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async, rerun: 32)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) (rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100)

22:19:43 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

[ 2272.406109][   T28] audit: type=1804 audit(1696025983.720:10695): pid=1761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3054/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
22:19:43 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

22:19:43 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))

22:19:44 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:19:44 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:44 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000100)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x6c}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) (async)

22:19:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)

22:19:44 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)

22:19:44 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028fe6f00fcdbdf253b00000008000300f0b230ed77bd0fc977debcd5c3", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000100))
sendfile(r6, r5, 0x0, 0x100000002)

22:19:44 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)

22:19:44 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x62, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x40, 0x4, [0x4, 0x6, 0x1ff, 0x6, 0x80000001, 0x7fff, 0xffff, 0x79b]}}, @enc_lim={0x4, 0x1, 0x5}]}, 0x60)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000000)="d220478bc07f8d1ab2244e8e0d6a91390c44bef493c00701cc150e50de41ae5299489465448a4b23f7e05f9aa8014014ca223c67a77a9c0ec1329820d673b539e426bcd43b8ba2c9be24d901e2d18171fee412e09cca1b84068bc1b770107613a6c0f1bd90d2e879bb2c3bec880b18ff9f8160d3207249c79ddef2fa9f62ef04e50da2b3658d86a525a454e7d2246b626b8ad3a8aa72b51bdc93e5389e34acf7c6465aa1258287d9c01e17ba26d86a987c9064bfb7932d403fd889c1270be615206f", &(0x7f0000000100)=""/119, &(0x7f0000000180)="31cb4fa5fc9e5c14ec52211d593ae21d338c64034c8999e8c5c48c81e770fc7db89b9df1bddaa7daf27209963f6e2a4487d1ccfbb0b67224566dc5ce190fc6479a07d0cb47f0daad977361f0d06f5466cfa6bd19d42d2fc50353f34473f7ad74d71d84ba2ba123541532e0424152d202fa1dcf748f4fad9c44340245c91bdc2e74e03966fec0d35c7ea71b67c946791466e431c091ac46c118c63b94405230ea3795cb993e9af6674b6f4e2e86", &(0x7f0000000240)="a5e70b7d1c1c1b26332a79", 0x80000000, 0x1, 0x4}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r4}]}}}]}, 0x3c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={<r5=>r0, 0x5, 0x3, 0x80000001})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x7, 0x1c000000, 0x400, 0x1, 0x5, '\x00', r4, r5, 0x4, 0x4, 0x3, 0xc}, 0x48)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r6, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff})
bind$bt_sco(r7, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

22:19:44 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
shutdown(r0, 0x0)
socket(0x22, 0x2, 0x4) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:19:44 executing program 4:
r0 = socket(0x22, 0x2, 0x4)
getsockopt(r0, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2}, 0x2000)

22:19:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getrule={0x14, 0x22, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[ 2273.315294][   T28] audit: type=1804 audit(1696025984.640:10696): pid=1811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3325/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0
[ 2273.332059][ T1813] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:44 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
shutdown(r0, 0x0)

[ 2273.400622][   T28] audit: type=1804 audit(1696025984.690:10697): pid=1810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3055/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0
22:19:44 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x62, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x40, 0x4, [0x4, 0x6, 0x1ff, 0x6, 0x80000001, 0x7fff, 0xffff, 0x79b]}}, @enc_lim={0x4, 0x1, 0x5}]}, 0x60) (async)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x62, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x40, 0x4, [0x4, 0x6, 0x1ff, 0x6, 0x80000001, 0x7fff, 0xffff, 0x79b]}}, @enc_lim={0x4, 0x1, 0x5}]}, 0x60)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000000)="d220478bc07f8d1ab2244e8e0d6a91390c44bef493c00701cc150e50de41ae5299489465448a4b23f7e05f9aa8014014ca223c67a77a9c0ec1329820d673b539e426bcd43b8ba2c9be24d901e2d18171fee412e09cca1b84068bc1b770107613a6c0f1bd90d2e879bb2c3bec880b18ff9f8160d3207249c79ddef2fa9f62ef04e50da2b3658d86a525a454e7d2246b626b8ad3a8aa72b51bdc93e5389e34acf7c6465aa1258287d9c01e17ba26d86a987c9064bfb7932d403fd889c1270be615206f", &(0x7f0000000100)=""/119, &(0x7f0000000180)="31cb4fa5fc9e5c14ec52211d593ae21d338c64034c8999e8c5c48c81e770fc7db89b9df1bddaa7daf27209963f6e2a4487d1ccfbb0b67224566dc5ce190fc6479a07d0cb47f0daad977361f0d06f5466cfa6bd19d42d2fc50353f34473f7ad74d71d84ba2ba123541532e0424152d202fa1dcf748f4fad9c44340245c91bdc2e74e03966fec0d35c7ea71b67c946791466e431c091ac46c118c63b94405230ea3795cb993e9af6674b6f4e2e86", &(0x7f0000000240)="a5e70b7d1c1c1b26332a79", 0x80000000, 0x1, 0x4}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r4}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r4}]}}}]}, 0x3c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={<r5=>r0, 0x5, 0x3, 0x80000001})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x7, 0x1c000000, 0x400, 0x1, 0x5, '\x00', r4, r5, 0x4, 0x4, 0x3, 0xc}, 0x48)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r6, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff})
bind$bt_sco(r7, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
bind$bt_sco(r7, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[ 2273.733737][ T1828] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2273.744298][ T1829] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028fe6f00fcdbdf253b00000008000300f0b230ed77bd0fc977debcd5c3", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000100)) (async, rerun: 64)
sendfile(r6, r5, 0x0, 0x100000002) (rerun: 64)

22:19:45 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async, rerun: 64)
connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async, rerun: 64)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
shutdown(r0, 0x0)

22:19:45 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)={0x62, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x40, 0x4, [0x4, 0x6, 0x1ff, 0x6, 0x80000001, 0x7fff, 0xffff, 0x79b]}}, @enc_lim={0x4, 0x1, 0x5}]}, 0x60) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000000)="d220478bc07f8d1ab2244e8e0d6a91390c44bef493c00701cc150e50de41ae5299489465448a4b23f7e05f9aa8014014ca223c67a77a9c0ec1329820d673b539e426bcd43b8ba2c9be24d901e2d18171fee412e09cca1b84068bc1b770107613a6c0f1bd90d2e879bb2c3bec880b18ff9f8160d3207249c79ddef2fa9f62ef04e50da2b3658d86a525a454e7d2246b626b8ad3a8aa72b51bdc93e5389e34acf7c6465aa1258287d9c01e17ba26d86a987c9064bfb7932d403fd889c1270be615206f", &(0x7f0000000100)=""/119, &(0x7f0000000180)="31cb4fa5fc9e5c14ec52211d593ae21d338c64034c8999e8c5c48c81e770fc7db89b9df1bddaa7daf27209963f6e2a4487d1ccfbb0b67224566dc5ce190fc6479a07d0cb47f0daad977361f0d06f5466cfa6bd19d42d2fc50353f34473f7ad74d71d84ba2ba123541532e0424152d202fa1dcf748f4fad9c44340245c91bdc2e74e03966fec0d35c7ea71b67c946791466e431c091ac46c118c63b94405230ea3795cb993e9af6674b6f4e2e86", &(0x7f0000000240)="a5e70b7d1c1c1b26332a79", 0x80000000, 0x1, 0x4}, 0x38) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r4}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={<r5=>r0, 0x5, 0x3, 0x80000001}) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x7, 0x1c000000, 0x400, 0x1, 0x5, '\x00', r4, r5, 0x4, 0x4, 0x3, 0xc}, 0x48) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r6, 0x0, 0x0, 0x0) (async, rerun: 32)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff}) (rerun: 32)
bind$bt_sco(r7, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[ 2273.892320][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:19:45 executing program 4:
r0 = socket(0x22, 0x2, 0x4)
getsockopt(r0, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2}, 0x2000)

22:19:45 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010410dcac24802dd3283f844079", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8b51ee42e89351ebdc76b1703d57767c0bcf306083de94231b0bb1aff1b5eff1ba9b6106000000d5edf106b3afc89f26be0e65bd0034fe9523b018507986a35d342384d7095c004092accefb3fa7903b877272c871798fe357eb7520b032be33de43459216"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:45 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
shutdown(r0, 0x0)

22:19:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010410dcac24802dd3283f844079", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8b51ee42e89351ebdc76b1703d57767c0bcf306083de94231b0bb1aff1b5eff1ba9b6106000000d5edf106b3afc89f26be0e65bd0034fe9523b018507986a35d342384d7095c004092accefb3fa7903b877272c871798fe357eb7520b032be33de43459216"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2274.130676][ T1843] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:19:45 executing program 4:
r0 = socket(0x22, 0x2, 0x4)
getsockopt(r0, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(0xffffffffffffffff, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async, rerun: 32)
recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2}, 0x2000) (rerun: 32)

22:19:45 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)

22:19:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010410dcac24802dd3283f844079", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8b51ee42e89351ebdc76b1703d57767c0bcf306083de94231b0bb1aff1b5eff1ba9b6106000000d5edf106b3afc89f26be0e65bd0034fe9523b018507986a35d342384d7095c004092accefb3fa7903b877272c871798fe357eb7520b032be33de43459216"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2274.368527][   T28] audit: type=1804 audit(1696025985.690:10698): pid=1853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3056/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0
22:19:45 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="4b2d4ebb623ae09e4b099e6a4a6bffffef4c2f615e93f8fdc6708d23ae28c2d73c603cf5b363da5cdea44657231fcea96ab881aa90da", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES8=r3], 0x448}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x0, &(0x7f0000000300))
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r6, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r7, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r8=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r7, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={r7, 0x3, 0x0, [0x0, 0x6, 0x0, 0x7fffffffffffffff, 0x8], [0x401, 0x9e, 0x6, 0x4, 0x401, 0x4, 0x7f45, 0x5, 0x200, 0x6, 0x7, 0xde6c, 0xfffffffffffffff8, 0x0, 0x100000001, 0x2, 0xfff, 0x5e, 0x6, 0x3, 0x1ff, 0xffff, 0x101, 0x400, 0x7, 0x4, 0xfff, 0x7ff, 0x80000000, 0x5, 0xb70, 0x80, 0x9, 0xf1, 0x8000000000000000, 0x7fffffff, 0x8, 0x1000, 0x4, 0x3, 0x7, 0x101, 0xce9, 0x4, 0xd4, 0x5e4, 0x5, 0x5, 0xd623, 0x7fff, 0x5, 0x7fffffffffffffff, 0x16, 0x3, 0x5, 0x2, 0x3f, 0xf1a1, 0x8, 0x7, 0x1, 0xfff, 0xdf0, 0x1ff, 0x0, 0x3, 0x9, 0x9, 0xffff, 0x6, 0x7fff, 0x400, 0x800, 0x7, 0x3, 0x9, 0x7fffffffffffffff, 0x400, 0x4, 0x6, 0x100000000, 0x7fffffffffffffff, 0x8, 0xfffffffffffffffd, 0x2, 0x81, 0x1, 0x8a05, 0x1, 0x0, 0x0, 0x0, 0x5b, 0x7, 0x5, 0x2, 0xfffffffffffffffb, 0x2321, 0x1000, 0x8000, 0x2, 0x8, 0x79c0366c, 0x1ff, 0x80000001, 0x3ff, 0x1, 0xffffffff, 0x8, 0x1, 0x94d, 0x1, 0x7, 0x7, 0x101, 0x1, 0x5, 0x4, 0x6, 0x8, 0x8001]})

22:19:45 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)

22:19:45 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 32)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028fe6f00fcdbdf253b00000008000300f0b230ed77bd0fc977debcd5c3", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000100)) (async)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:45 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0x8)
shutdown(r0, 0x0)

22:19:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000010000c96d551337ba88eb840000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:46 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) (async)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)

22:19:46 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000826bd700000000000890000000c009900e1ffffff0000000038001d803400008005000b00010000000500090000000000040004000c000300f30000000000000005000a000000000005000b0000000000f0001d80300000800c000200000400000000000005000900000000000c00020048160000000000000400040005000c0001000000a800008005000800f700000090000d80340003801400030006000300020006000180400008000002050004000200000014000300000004007678fbfffe01000027000000280000801400030000000100f9ffd702000000000000f8000500040001000000050004000000000005000400000000001c0003800500060002000000050004000100000005000400010000000400040005000c0000000000140000800500080018000000050007000000000024001d8020000080060005008f0000000c000200020000000000000005000b0000000000a70a9d466677059b15c246e6e24376a795f4ebce749bc94af4c41acc6fb6f9251ee3b180e207c82b73656a6d2f7afc3471c626eab34815ed0f1dc86c43a9774b796015029fc1431191aaeaedaf35021cac59706ddadf9dc5f7b226b7972851242c24a85bcc93a19e985241d183bd7c3d289964e3693d9f3cdc6104be7df30560d97869f5437f9d62304afe97cd68f0d5515e1041b88d84a48da7ccf3454a8af801a0a847ce15e80934816aa99294bc8bc928dcb418205d4ee6bc05db0bd7b96096e71d0483deabbd6010e398b2ab52beb47d17651dbc949cbc52c88609eb0050b748c21867a133ed4cd542a253a44059cc6ac8918b933566abff2b029334046e20264e8bc40157fe681c89ff6bfe9c49e7b61146cdac38c73245e5c7994981851c428814b6e1bc5816e8594b0f4d79bd74837801280d4d0b25b99c69a1eab0"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:46 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000010000c96d551337ba88eb840000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:46 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0x8)
shutdown(r0, 0x0)

22:19:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES16=r1], 0x398}}, 0x20040080)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3544}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, r8}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x1178, r11, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x5d}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "02251a35267edfb2bce4ce988c957d8f847fde4a29f9150c93dd1dbc47fed230ce3a95c2e27796291f44ebcc9f16546f69e7749c6c59ccaadd19c86e0661fe3b7a321e05805af6b2b6ce2ef26bd37e8cbd5a44ae8440b99aadec6717ab0e847111a2f2c09f581b"}, @NL80211_ATTR_TESTDATA={0xde, 0x45, "f252e8291d2d904fa1195e6127e1ad2a1c2d9f23b377e7ae53fa3ca13016bcfad1dfd33de507857d8fa7fa6f7c929a25cf4d6f95db83881956b4d49c355e028d88f5d2e2574ecb78205a59d5b8cff406ca03ffaa75a608f709660675964368cd3d82d7a530e04948494f9e08ca5b42de5cf8db9339857794e56ab23b3bcbb9ec89448d06bea9564bfdf98843bb306636e0f2f55c67cd8bea302362ee0e831100090067a0c1c1fe044d1efb51c22489e0c2bc51919e9b13db100e176b29da7648be83830ae737d60613b21090a21f1c14aeaefae19b63538289c8"}]}, 0x1178}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, r10, 0x880ca000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r12, r9, 0x0, 0x100000002)

22:19:46 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000280)={0x0, "52a26dc9a962d21db155fa6db8f2a132"})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x2, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9cfcffff21000100000000100000000000000000d67c08000e0000000000000000000000f93ca312965ce8d480586b6f42b47adb04c0734588464b53c02cbbcc6c02919c431c93ee352d9653bc0b8d01f5c16d7cad457868d1785b63fc18b3ccc38b4853b411336776648be231f68803bf76928b6a979f0799a175baa920c1e1c06f57d38fc33eba1ac1af23f4a3"], 0x24}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x22, 0x2, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x0, &(0x7f0000000300))
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r5, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0}})
ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r6, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r6, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r7=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r6, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r7, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r6, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001280)={r6, 0x45, 0xe65})
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000040)=0x5, 0x4)
accept4(r2, 0x0, 0x0, 0x80000)

22:19:46 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000010000c96d551337ba88eb840000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2275.347229][   T28] audit: type=1804 audit(1696025986.670:10699): pid=1898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3057/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
22:19:46 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0x8) (async)
shutdown(r0, 0x0)

22:19:46 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
shutdown(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="4b2d4ebb623ae09e4b099e6a4a6bffffef4c2f615e93f8fdc6708d23ae28c2d73c603cf5b363da5cdea44657231fcea96ab881aa90da", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES8=r3], 0x448}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x0, &(0x7f0000000300)) (async)
ioctl$int_in(r6, 0x0, &(0x7f0000000300))
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r6, 0x1) (async)
shutdown(r6, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r7, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r8=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r7, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={r7, 0x3, 0x0, [0x0, 0x6, 0x0, 0x7fffffffffffffff, 0x8], [0x401, 0x9e, 0x6, 0x4, 0x401, 0x4, 0x7f45, 0x5, 0x200, 0x6, 0x7, 0xde6c, 0xfffffffffffffff8, 0x0, 0x100000001, 0x2, 0xfff, 0x5e, 0x6, 0x3, 0x1ff, 0xffff, 0x101, 0x400, 0x7, 0x4, 0xfff, 0x7ff, 0x80000000, 0x5, 0xb70, 0x80, 0x9, 0xf1, 0x8000000000000000, 0x7fffffff, 0x8, 0x1000, 0x4, 0x3, 0x7, 0x101, 0xce9, 0x4, 0xd4, 0x5e4, 0x5, 0x5, 0xd623, 0x7fff, 0x5, 0x7fffffffffffffff, 0x16, 0x3, 0x5, 0x2, 0x3f, 0xf1a1, 0x8, 0x7, 0x1, 0xfff, 0xdf0, 0x1ff, 0x0, 0x3, 0x9, 0x9, 0xffff, 0x6, 0x7fff, 0x400, 0x800, 0x7, 0x3, 0x9, 0x7fffffffffffffff, 0x400, 0x4, 0x6, 0x100000000, 0x7fffffffffffffff, 0x8, 0xfffffffffffffffd, 0x2, 0x81, 0x1, 0x8a05, 0x1, 0x0, 0x0, 0x0, 0x5b, 0x7, 0x5, 0x2, 0xfffffffffffffffb, 0x2321, 0x1000, 0x8000, 0x2, 0x8, 0x79c0366c, 0x1ff, 0x80000001, 0x3ff, 0x1, 0xffffffff, 0x8, 0x1, 0x94d, 0x1, 0x7, 0x7, 0x101, 0x1, 0x5, 0x4, 0x6, 0x8, 0x8001]})

22:19:46 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x28}}, 0x4000000)

22:19:46 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000280)={0x0, "52a26dc9a962d21db155fa6db8f2a132"})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
syz_init_net_socket$ax25(0x3, 0x2, 0x4) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9cfcffff21000100000000100000000000000000d67c08000e0000000000000000000000f93ca312965ce8d480586b6f42b47adb04c0734588464b53c02cbbcc6c02919c431c93ee352d9653bc0b8d01f5c16d7cad457868d1785b63fc18b3ccc38b4853b411336776648be231f68803bf76928b6a979f0799a175baa920c1e1c06f57d38fc33eba1ac1af23f4a3"], 0x24}}, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket(0x22, 0x2, 0x4) (async)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x0, &(0x7f0000000300)) (async)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) (async)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r5, 0x1) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0}})
ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001980)) (async)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r6, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) (async, rerun: 64)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r6, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}}) (async, rerun: 64)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r7=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r6, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r7, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r6, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001280)={r6, 0x45, 0xe65}) (async, rerun: 32)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async, rerun: 32)
setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000040)=0x5, 0x4)
accept4(r2, 0x0, 0x0, 0x80000)

22:19:46 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0})
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r2 = accept4$ax25(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @remote, @netrom, @bcast, @null, @remote, @rose, @null]}, &(0x7f0000000080)=0x48, 0x800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'})
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:47 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000280)={0x0, "52a26dc9a962d21db155fa6db8f2a132"})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x2, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9cfcffff21000100000000100000000000000000d67c08000e0000000000000000000000f93ca312965ce8d480586b6f42b47adb04c0734588464b53c02cbbcc6c02919c431c93ee352d9653bc0b8d01f5c16d7cad457868d1785b63fc18b3ccc38b4853b411336776648be231f68803bf76928b6a979f0799a175baa920c1e1c06f57d38fc33eba1ac1af23f4a3"], 0x24}}, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket(0x22, 0x2, 0x4)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r5, 0x0, &(0x7f0000000300)) (async)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) (async)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r5, 0x1) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0}}) (async)
ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r6, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) (async)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r6, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}}) (async)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r7=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r6, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r7, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r6, 0x81, 0x1000, 0x1}) (async)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001280)={r6, 0x45, 0xe65}) (async)
getsockopt(r3, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000040)=0x5, 0x4) (async)
accept4(r2, 0x0, 0x0, 0x80000)

[ 2275.690462][ T1908] gretap2555: entered promiscuous mode
[ 2275.721409][ T1898] __nla_validate_parse: 161 callbacks suppressed
[ 2275.721437][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2275.789310][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2275.834965][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2275.854856][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2275.882993][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2275.926942][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2275.969228][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:19:47 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:47 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x28}}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x28}}, 0x4000000) (async)

22:19:47 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0})
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
accept4$ax25(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @remote, @netrom, @bcast, @null, @remote, @rose, @null]}, &(0x7f0000000080)=0x48, 0x800) (async)
r2 = accept4$ax25(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @remote, @netrom, @bcast, @null, @remote, @rose, @null]}, &(0x7f0000000080)=0x48, 0x800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'})
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

[ 2276.176753][ T1931] gretap2556: entered promiscuous mode
22:19:47 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, r0, 0x0) (async, rerun: 64)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES16=r1], 0x398}}, 0x20040080) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3544}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, r8}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async)
r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008000e00000000002d1bde55798b3f4cce2742625cb9a77e025503ec1edc5d8f1d6cfa7826524a02023c7817cf86fb90fb004c7dac855ad722bde141a1b85c96ccb155315bd92cc8283d842f5b427376e94eaee21eaf379ac263b5b67a4b30a028e813c10373f702d3fbb8feacb1dece504a24ce7d75d782db4e661fc4b1e4b1e464012150b526edf6c7f260cf829d9fe1f2da550d9b8f3b5eac8acb9486529b2bd5fce76346a4eb70a510bfb3090ef23339708ed029b40e7b495f1f31d38c3703dd9b682be48e3a20c013d4758e2d7bcf3a3dd546b637b543f5ca6a6b0d4f4ccfb8f1f992ef0420f7fea2c9ed9fadb2a34e659586d1c45ba7cdbd6a293723ccb109b6b2137b9b1b826d52df50785db3e10e71a85bc476"], 0x24}}, 0x0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x1178, r11, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x5d}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "02251a35267edfb2bce4ce988c957d8f847fde4a29f9150c93dd1dbc47fed230ce3a95c2e27796291f44ebcc9f16546f69e7749c6c59ccaadd19c86e0661fe3b7a321e05805af6b2b6ce2ef26bd37e8cbd5a44ae8440b99aadec6717ab0e847111a2f2c09f581b"}, @NL80211_ATTR_TESTDATA={0xde, 0x45, "f252e8291d2d904fa1195e6127e1ad2a1c2d9f23b377e7ae53fa3ca13016bcfad1dfd33de507857d8fa7fa6f7c929a25cf4d6f95db83881956b4d49c355e028d88f5d2e2574ecb78205a59d5b8cff406ca03ffaa75a608f709660675964368cd3d82d7a530e04948494f9e08ca5b42de5cf8db9339857794e56ab23b3bcbb9ec89448d06bea9564bfdf98843bb306636e0f2f55c67cd8bea302362ee0e831100090067a0c1c1fe044d1efb51c22489e0c2bc51919e9b13db100e176b29da7648be83830ae737d60613b21090a21f1c14aeaefae19b63538289c8"}]}, 0x1178}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, r10, 0x880ca000) (async, rerun: 32)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendfile(r12, r9, 0x0, 0x100000002)

22:19:47 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

22:19:47 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0})
socket(0x22, 0x2, 0x4) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r2 = accept4$ax25(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @remote, @netrom, @bcast, @null, @remote, @rose, @null]}, &(0x7f0000000080)=0x48, 0x800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00'})
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:47 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x28}}, 0x4000000)

[ 2276.316636][   T28] audit: type=1804 audit(1696025987.640:10700): pid=1932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3058/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0
[ 2276.317489][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2276.390709][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:47 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0}) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="4b2d4ebb623ae09e4b099e6a4a6bffffef4c2f615e93f8fdc6708d23ae28c2d73c603cf5b363da5cdea44657231fcea96ab881aa90da", @ANYRES16=r4, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES8=r3], 0x448}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="a2aacbe1f2aa1cb68a969ab38cac000009000000eba0557331fd03ed6e6af8d48c2472a982415c213945d59261226d41b813d02bdb60dbcab0f1437f1615a8d195ed04000000000000004374bb9ed054d08003554409159fabaa09c66a9958ded54a4fdbc359849ec24c08865fbd2f581251eb3c7f6e47ba9a837c619914599823bb", @ANYRES16=r4, @ANYBLOB="00042cbd7000fddbdf256e00000008002700020000000800a000ff0700000800a0002400000005001801330000000800a100600e00000800260094090000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000) (async, rerun: 32)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x0, &(0x7f0000000300))
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32)
sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0) (rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(r6, 0x1) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000001980)) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r7, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) (async, rerun: 32)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r7, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}}) (rerun: 32)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r8=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r7, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r8, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r7, 0x81, 0x1000, 0x1}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={r7, 0x3, 0x0, [0x0, 0x6, 0x0, 0x7fffffffffffffff, 0x8], [0x401, 0x9e, 0x6, 0x4, 0x401, 0x4, 0x7f45, 0x5, 0x200, 0x6, 0x7, 0xde6c, 0xfffffffffffffff8, 0x0, 0x100000001, 0x2, 0xfff, 0x5e, 0x6, 0x3, 0x1ff, 0xffff, 0x101, 0x400, 0x7, 0x4, 0xfff, 0x7ff, 0x80000000, 0x5, 0xb70, 0x80, 0x9, 0xf1, 0x8000000000000000, 0x7fffffff, 0x8, 0x1000, 0x4, 0x3, 0x7, 0x101, 0xce9, 0x4, 0xd4, 0x5e4, 0x5, 0x5, 0xd623, 0x7fff, 0x5, 0x7fffffffffffffff, 0x16, 0x3, 0x5, 0x2, 0x3f, 0xf1a1, 0x8, 0x7, 0x1, 0xfff, 0xdf0, 0x1ff, 0x0, 0x3, 0x9, 0x9, 0xffff, 0x6, 0x7fff, 0x400, 0x800, 0x7, 0x3, 0x9, 0x7fffffffffffffff, 0x400, 0x4, 0x6, 0x100000000, 0x7fffffffffffffff, 0x8, 0xfffffffffffffffd, 0x2, 0x81, 0x1, 0x8a05, 0x1, 0x0, 0x0, 0x0, 0x5b, 0x7, 0x5, 0x2, 0xfffffffffffffffb, 0x2321, 0x1000, 0x8000, 0x2, 0x8, 0x79c0366c, 0x1ff, 0x80000001, 0x3ff, 0x1, 0xffffffff, 0x8, 0x1, 0x94d, 0x1, 0x7, 0x7, 0x101, 0x1, 0x5, 0x4, 0x6, 0x8, 0x8001]})

[ 2276.453208][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:47 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2000)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

22:19:47 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

[ 2276.495961][ T1932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x2b4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x294, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @random="52df9d8d79a2"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x638, 0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x7f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5cf7800}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @random="0f93122b9be3"}}, @IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x40, 0x17adb8ec}}, @IFLA_VF_MAC={0x28, 0x1, {0x1f, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x3}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x1d2, 0x46, 0x8100}}, {0x14, 0x1, {0x2, 0x9d, 0x81, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x100000000}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x200}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3108}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000000, 0xd081, 0xd5}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @multicast}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xfffffffc, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0xffffffffffffff80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x34, 0x8001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0x7}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x10000, 0xffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x4b4, 0x101, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0xdeb, 0x6}}]}, {0x4}]}]}, 0x2b4}}, 0x0)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:48 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2000) (async)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

22:19:48 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:48 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

22:19:48 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r1, 0x0)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

22:19:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES16=r1], 0x398}}, 0x20040080) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3544}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000140)=ANY=[], 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, r8}, 0x48) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async)
r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0xb00000000065808, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)={0x1178, r11, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x5d}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "02251a35267edfb2bce4ce988c957d8f847fde4a29f9150c93dd1dbc47fed230ce3a95c2e27796291f44ebcc9f16546f69e7749c6c59ccaadd19c86e0661fe3b7a321e05805af6b2b6ce2ef26bd37e8cbd5a44ae8440b99aadec6717ab0e847111a2f2c09f581b"}, @NL80211_ATTR_TESTDATA={0xde, 0x45, "f252e8291d2d904fa1195e6127e1ad2a1c2d9f23b377e7ae53fa3ca13016bcfad1dfd33de507857d8fa7fa6f7c929a25cf4d6f95db83881956b4d49c355e028d88f5d2e2574ecb78205a59d5b8cff406ca03ffaa75a608f709660675964368cd3d82d7a530e04948494f9e08ca5b42de5cf8db9339857794e56ab23b3bcbb9ec89448d06bea9564bfdf98843bb306636e0f2f55c67cd8bea302362ee0e831100090067a0c1c1fe044d1efb51c22489e0c2bc51919e9b13db100e176b29da7648be83830ae737d60613b21090a21f1c14aeaefae19b63538289c8"}]}, 0x1178}, 0x1, 0x0, 0x0, 0x80}, 0x4000001)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, r10, 0x880ca000) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r12, r9, 0x0, 0x100000002)

22:19:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x2b4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x294, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @random="52df9d8d79a2"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x638, 0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x7f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5cf7800}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @random="0f93122b9be3"}}, @IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x40, 0x17adb8ec}}, @IFLA_VF_MAC={0x28, 0x1, {0x1f, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x3}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x1d2, 0x46, 0x8100}}, {0x14, 0x1, {0x2, 0x9d, 0x81, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x100000000}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x200}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3108}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000000, 0xd081, 0xd5}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @multicast}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xfffffffc, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0xffffffffffffff80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x34, 0x8001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0x7}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x10000, 0xffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x4b4, 0x101, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0xdeb, 0x6}}]}, {0x4}]}]}, 0x2b4}}, 0x0)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:48 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
accept4(r0, 0x0, 0x0, 0x800)

22:19:48 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x2000)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

22:19:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x2b4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x294, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @random="52df9d8d79a2"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x638, 0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x7f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5cf7800}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @random="0f93122b9be3"}}, @IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x40, 0x17adb8ec}}, @IFLA_VF_MAC={0x28, 0x1, {0x1f, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x3}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x1d2, 0x46, 0x8100}}, {0x14, 0x1, {0x2, 0x9d, 0x81, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x100000000}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x200}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3108}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000000, 0xd081, 0xd5}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @multicast}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xfffffffc, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0xffffffffffffff80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x34, 0x8001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0x7}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x10000, 0xffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x4b4, 0x101, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0xdeb, 0x6}}]}, {0x4}]}]}, 0x2b4}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x2b4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0x294, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @random="52df9d8d79a2"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x638, 0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x7f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5cf7800}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @random="0f93122b9be3"}}, @IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x40, 0x17adb8ec}}, @IFLA_VF_MAC={0x28, 0x1, {0x1f, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x3}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x1d2, 0x46, 0x8100}}, {0x14, 0x1, {0x2, 0x9d, 0x81, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x100000000}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000000, 0x200}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3108}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000000, 0xd081, 0xd5}}, @IFLA_VF_MAC={0x28, 0x1, {0x101, @multicast}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xfffffffc, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0xffffffffffffff80}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x34, 0x8001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0x7}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8001, 0x10000, 0xffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x4b4, 0x101, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffff, 0xdeb, 0x6}}]}, {0x4}]}]}, 0x2b4}}, 0x0)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:48 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
accept4(r0, 0x0, 0x0, 0x800)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)

22:19:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r4 = accept$packet(r0, 0x0, &(0x7f0000000100))
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, 0x8, 0x10001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = socket(0x22, 0x2, 0x4)
getsockopt(r6, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x17c, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1052870ca943e8301ef1271b97f9b645bee68147d4c663c7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "764a58181a991adba6e4229105b18a504f3149148b22dbcc"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x17c}, 0x1, 0x0, 0x0, 0x15}, 0x4801)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x100000002)

22:19:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0004000000fb73df2500000000", @ANYRES32=r8, @ANYBLOB="070000001000e0ff0f00010008000b009d9a000006000500024b0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000004)

22:19:48 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x5, 0x8, 0x4})
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080))
connect$bt_sco(r0, &(0x7f0000000100), 0x3c)
shutdown(0xffffffffffffffff, 0x0)
shutdown(r0, 0x0)
socket(0x18, 0x4, 0x4265c98d)

[ 2277.511475][   T28] audit: type=1804 audit(1696025988.840:10701): pid=1991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3059/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[ 2277.704398][   T28] audit: type=1804 audit(1696025989.030:10702): pid=2006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3331/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
[ 2278.049024][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:19:49 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1)
accept4(r0, 0x0, 0x0, 0x800)

22:19:49 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x5, 0x8, 0x4})
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080))
connect$bt_sco(r0, &(0x7f0000000100), 0x3c)
shutdown(0xffffffffffffffff, 0x0)
shutdown(r0, 0x0)
socket(0x18, 0x4, 0x4265c98d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x8, 0x4}) (async)
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)) (async)
connect$bt_sco(r0, &(0x7f0000000100), 0x3c) (async)
shutdown(0xffffffffffffffff, 0x0) (async)
shutdown(r0, 0x0) (async)
socket(0x18, 0x4, 0x4265c98d) (async)

22:19:49 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r8}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0004000000fb73df2500000000", @ANYRES32=r8, @ANYBLOB="070000001000e0ff0f00010008000b009d9a000006000500024b0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000004)

22:19:49 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r1, 0x0)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

22:19:49 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c01", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:49 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/137, &(0x7f0000000140)=0x89)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

22:19:49 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x5, 0x8, 0x4})
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080))
connect$bt_sco(r0, &(0x7f0000000100), 0x3c)
shutdown(0xffffffffffffffff, 0x0)
shutdown(r0, 0x0)
socket(0x18, 0x4, 0x4265c98d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x8, 0x4}) (async)
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)) (async)
connect$bt_sco(r0, &(0x7f0000000100), 0x3c) (async)
shutdown(0xffffffffffffffff, 0x0) (async)
shutdown(r0, 0x0) (async)
socket(0x18, 0x4, 0x4265c98d) (async)

22:19:49 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r8}]}}}]}, 0x3c}}, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0004000000fb73df2500000000", @ANYRES32=r8, @ANYBLOB="070000001000e0ff0f00010008000b009d9a000006000500024b0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000004)

22:19:49 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r4 = accept$packet(r0, 0x0, &(0x7f0000000100))
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, 0x8, 0x10001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r6 = socket(0x22, 0x2, 0x4)
getsockopt(r6, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x17c, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1052870ca943e8301ef1271b97f9b645bee68147d4c663c7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "764a58181a991adba6e4229105b18a504f3149148b22dbcc"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x17c}, 0x1, 0x0, 0x0, 0x15}, 0x4801)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r9, r8, 0x0, 0x100000002)

22:19:49 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/137, &(0x7f0000000140)=0x89)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

22:19:49 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r1, 0x0)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
shutdown(r1, 0x0) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)

22:19:49 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800)
r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
r2 = socket(0x22, 0x2, 0x4) (rerun: 64)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/137, &(0x7f0000000140)=0x89) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)

22:19:49 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000180), 0xfffffe7e)
shutdown(r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x3, 0x6, 0x10000})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10)

22:19:50 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bind$x25(r4, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2278.741574][   T28] audit: type=1804 audit(1696025990.070:10703): pid=2033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3060/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
22:19:50 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c01", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

[ 2278.831117][   T28] audit: type=1804 audit(1696025990.130:10704): pid=2057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3332/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0
22:19:50 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000180), 0xfffffe7e)
shutdown(r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x3, 0x6, 0x10000})
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10)

22:19:50 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000000)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:50 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
accept4(r1, 0x0, 0x0, 0x0)

22:19:50 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bind$x25(r4, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:50 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000180), 0xfffffe7e) (async)
shutdown(r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x3, 0x6, 0x10000}) (async, rerun: 64)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0}) (rerun: 32)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) (rerun: 64)

[ 2279.401264][   T28] audit: type=1804 audit(1696025990.730:10705): pid=2088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3061/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
22:19:50 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 32)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r4 = accept$packet(r0, 0x0, &(0x7f0000000100))
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, 0x8, 0x10001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async, rerun: 32)
r6 = socket(0x22, 0x2, 0x4) (rerun: 32)
getsockopt(r6, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x17c, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1052870ca943e8301ef1271b97f9b645bee68147d4c663c7"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "764a58181a991adba6e4229105b18a504f3149148b22dbcc"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x17c}, 0x1, 0x0, 0x0, 0x15}, 0x4801)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendfile(r9, r8, 0x0, 0x100000002)

22:19:50 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000000)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000000) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)

22:19:50 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
bind$x25(r4, &(0x7f0000000240)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (rerun: 64)

22:19:50 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
accept4(r1, 0x0, 0x0, 0x0)

22:19:50 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1d)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
shutdown(r0, 0x0)

22:19:51 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
accept4(r1, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)

22:19:51 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000000)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:51 executing program 4:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1d) (async)
bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1d)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
shutdown(r0, 0x0)

22:19:51 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8c6ff7a6fd8f049e95b78570d11bcb9d0b06e424bff38aa91b501e92"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:51 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x2a, 0xa, 0x200)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xa9, &(0x7f00000000c0)=0x2)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f0000000000), 0x8)
accept4(r0, 0x0, 0x0, 0x0)

22:19:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="0100280501000000000000faff0008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c01", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:51 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1d) (async)
connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async)
shutdown(r0, 0x0)

[ 2280.139640][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:19:51 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x2a, 0xa, 0x200)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xa9, &(0x7f00000000c0)=0x2)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f0000000000), 0x8)
accept4(r0, 0x0, 0x0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0)

22:19:51 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:51 executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8c6ff7a6fd8f049e95b78570d11bcb9d0b06e424bff38aa91b501e92"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:51 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r1, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r2 = socket(0x22, 0x2, 0x4)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f0000000280)=0xad)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3c, 0xa, 0x2, 0x7, 0x0, [@local, @private1, @local, @local, @local]}, 0x58)
bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @none}, 0x8)

[ 2280.424090][   T28] audit: type=1804 audit(1696025991.730:10706): pid=2145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3334/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0
22:19:51 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0x2a, 0xa, 0x200)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0xa9, &(0x7f00000000c0)=0x2)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f0000000000), 0x8)
accept4(r0, 0x0, 0x0, 0x0)

22:19:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="0100280501000000000000faff0008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:52 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async, rerun: 32)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async, rerun: 32)
connect$bt_sco(r1, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x0) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
r2 = socket(0x22, 0x2, 0x4)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f0000000280)=0xad) (async)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async, rerun: 64)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3c, 0xa, 0x2, 0x7, 0x0, [@local, @private1, @local, @local, @local]}, 0x58) (async, rerun: 64)
bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @none}, 0x8)

22:19:52 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

[ 2280.622240][   T28] audit: type=1804 audit(1696025991.940:10707): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3062/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0
22:19:52 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0))
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0xfffffffffffffe50)

22:19:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8c6ff7a6fd8f049e95b78570d11bcb9d0b06e424bff38aa91b501e92"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r3, @ANYBLOB="8c6ff7a6fd8f049e95b78570d11bcb9d0b06e424bff38aa91b501e92"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async)

[ 2280.734907][ T2156] __nla_validate_parse: 168 callbacks suppressed
[ 2280.734934][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2280.807675][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2280.861680][   T28] audit: type=1804 audit(1696025992.190:10708): pid=2183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3335/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[ 2280.875037][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2280.999688][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2281.054537][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2281.081544][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2281.096912][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2281.110459][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2281.124126][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2281.137382][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:19:52 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0))
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0xfffffffffffffe50)

22:19:52 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:19:52 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r1, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
shutdown(r0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r2 = socket(0x22, 0x2, 0x4)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f0000000280)=0xad)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3c, 0xa, 0x2, 0x7, 0x0, [@local, @private1, @local, @local, @local]}, 0x58)
bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r1, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
shutdown(r0, 0x0) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/173, &(0x7f0000000280)=0xad) (async)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)={0x3c, 0xa, 0x2, 0x7, 0x0, [@local, @private1, @local, @local, @local]}, 0x58) (async)
bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @none}, 0x8) (async)

22:19:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="0100280501000000000000faff0008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:19:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
socketpair(0x28, 0x4, 0x10000000, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x6c, 0x28, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x9, 0xfff3}, {0xfff4, 0xf}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2d, 0x81}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000300))
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:52 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)

22:19:52 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0x8)
shutdown(r0, 0x0)
r1 = socket(0x28, 0x6, 0xfffffffa)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))

22:19:52 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
accept4(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0)) (async)
pipe(&(0x7f00000000c0))
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0xfffffffffffffe50)

22:19:52 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)

22:19:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
socketpair(0x28, 0x4, 0x10000000, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x6c, 0x28, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x9, 0xfff3}, {0xfff4, 0xf}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2d, 0x81}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000300))
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

[ 2281.500346][   T28] audit: type=1804 audit(1696025992.820:10709): pid=2218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3336/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
22:19:52 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x60, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}}, 0x0)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x5)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00'})

22:19:53 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0x8) (async)
shutdown(r0, 0x0)
r1 = socket(0x28, 0x6, 0xfffffffa)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))

22:19:53 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)

[ 2281.783528][   T28] audit: type=1804 audit(1696025993.110:10710): pid=2224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3063/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0
22:19:53 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
socketpair(0x28, 0x4, 0x10000000, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x6c, 0x28, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0x9, 0xfff3}, {0xfff4, 0xf}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2d, 0x81}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000300)) (async)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

22:19:53 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880)={0x1f, @none}, 0x8) (async)
shutdown(r0, 0x0)
r1 = socket(0x28, 0x6, 0xfffffffa)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))

22:19:53 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r4=>0x0}})
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r4, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r4, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r5=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r4, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r5, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r4, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000008c0)={r4, "825f2f79949767e5474989fe9692e1ae"})
write$cgroup_pid(r3, &(0x7f0000000240), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r2, &(0x7f0000000280)=0x4bc, 0x100000000)
r7 = socket(0x22, 0x2, 0x4)
getsockopt(r7, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

[ 2282.208832][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:19:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:53 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2421dfd17c"], 0x24}}, 0x10000000)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)
r7 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80000)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000480)={0x2, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x4}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x5}}}, 0x108)

22:19:53 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r2=>0x0}) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x60, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}}, 0x0)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x5) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r5, 0x0, 0x0, 0x0) (async)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00'})

22:19:53 executing program 0:
bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
shutdown(r0, 0x1)

22:19:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c01", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:19:53 executing program 0:
bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async, rerun: 32)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
shutdown(r0, 0x1)

[ 2282.585983][   T28] audit: type=1804 audit(1696025993.910:10711): pid=2272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3337/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
22:19:54 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x60, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}}, 0x0) (async)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x5)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r5, 0x0, 0x0, 0x0) (async)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00'})

[ 2282.822864][   T28] audit: type=1804 audit(1696025994.150:10712): pid=2285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3064/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0
22:19:54 executing program 0:
bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
shutdown(r0, 0x1)
bind$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
shutdown(r0, 0x1) (async)

[ 2282.893445][   T28] audit: type=1804 audit(1696025994.200:10713): pid=2286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1217437497/syzkaller.2A962Q/3708/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0
22:19:54 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
shutdown(r0, 0x0)

22:19:54 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2421dfd17c"], 0x24}}, 0x10000000) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002) (async)
r7 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80000)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000480)={0x2, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x4}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x5}}}, 0x108)

22:19:54 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000000)=[{r1, 0x4002}], 0x1, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)={[0x59076f1b]}, 0x8)

[ 2283.517697][   T28] audit: type=1804 audit(1696025994.840:10714): pid=2320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3338/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0
[ 2284.288908][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2286.368952][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2288.448851][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2290.529381][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2292.609328][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2294.699063][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2296.769283][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2298.849017][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2300.928772][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2303.008847][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2305.089038][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2307.178851][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2309.248726][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2311.328778][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2313.408961][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2315.489322][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2317.568807][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2319.648837][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2321.728882][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2323.809483][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2325.889250][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2327.968740][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2330.048781][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2332.139065][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2334.208861][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2336.288737][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:20:48 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2421dfd17c"], 0x24}}, 0x10000000)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)
r7 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80000)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000480)={0x2, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x4}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x5}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000480)={0x2, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x4}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x5}}}, 0x108)

22:20:48 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:20:48 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async)
r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3)
shutdown(0xffffffffffffffff, 0x1) (async)
shutdown(0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r4=>0x0}})
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980)) (async)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r4, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r4, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={0x0, "02c8305d689e455364f00ddb8f12e573"}) (async)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r5=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r4, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r5, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r4, 0x81, 0x1000, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000008c0)={r4, "825f2f79949767e5474989fe9692e1ae"}) (async)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000008c0)={r4, "825f2f79949767e5474989fe9692e1ae"})
write$cgroup_pid(r3, &(0x7f0000000240), 0x12) (async)
write$cgroup_pid(r3, &(0x7f0000000240), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r2, &(0x7f0000000280)=0x4bc, 0x100000000)
r7 = socket(0x22, 0x2, 0x4)
getsockopt(r7, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:20:48 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000000)=[{r1, 0x4002}], 0x1, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)={[0x59076f1b]}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) (async)
clock_gettime(0x0, &(0x7f0000000040)) (async)
ppoll(&(0x7f0000000000)=[{r1, 0x4002}], 0x1, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)={[0x59076f1b]}, 0x8) (async)

22:20:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2421dfd17c"], 0x24}}, 0x10000000)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)
r7 = accept4$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80000)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000480)={0x2, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x4}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x5}}}, 0x108)

22:20:48 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)
shutdown(r0, 0x0)

22:20:48 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000000)=[{r1, 0x4002}], 0x1, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)={[0x59076f1b]}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) (async)
clock_gettime(0x0, &(0x7f0000000040)) (async)
ppoll(&(0x7f0000000000)=[{r1, 0x4002}], 0x1, &(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)={[0x59076f1b]}, 0x8) (async)

[ 2337.599215][   T28] audit: type=1804 audit(1696026048.920:10715): pid=2367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3339/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0
22:20:49 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = socket(0xa, 0x0, 0xe1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@mpls_getnetconf={0x24, 0x52, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x1d0, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "696ac84e0960df6fe345ff1af09badd78e6e797002466ebc"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f43a9220a1f132adcc775113bf4ee5edce5ab99087a1f4f5"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b8978369ad1a88aad0c10bb208d9820593f3ac683daea51"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bdb9642ada1f24757065f3a21ad8101f95df8ea0007e8dc5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "afdefa98f121ab8de46a9a5c52dedda44b45eaf0b7efa057"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4844}, 0x80c1)
sendfile(r8, r7, 0x0, 0x100000002)

[ 2337.689278][   T28] audit: type=1804 audit(1696026049.000:10716): pid=2368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1217437497/syzkaller.2A962Q/3709/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[ 2337.794611][ T2360] __nla_validate_parse: 115 callbacks suppressed
[ 2337.794638][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2337.796711][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2337.813770][   T28] audit: type=1804 audit(1696026049.010:10717): pid=2371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3065/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0
[ 2337.859033][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2337.948926][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2338.001212][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2338.038106][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:20:49 executing program 1:
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

[ 2338.053697][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:20:49 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0x8) (async)
shutdown(r0, 0x0)

22:20:49 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:20:49 executing program 1:
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)

[ 2338.290875][   T28] audit: type=1804 audit(1696026049.620:10718): pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3340/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0
[ 2338.326552][ T2391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
22:20:49 executing program 2:
syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv6}}, 0x0)

[ 2338.380911][T23253] Bluetooth: hci5: command 0x0405 tx timeout
22:20:49 executing program 1:
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0)

[ 2338.804631][   T28] audit: type=1804 audit(1696026050.130:10719): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3066/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0
[ 2340.449268][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2341.276147][T23606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2341.287229][T23606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2341.298783][T23606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2341.306989][T23606] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 2341.315006][T23606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2341.892905][ T2411] chnl_net:caif_netlink_parms(): no params data found
[ 2342.047421][ T2411] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2342.056739][ T2411] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2342.065256][ T2411] bridge_slave_0: entered allmulticast mode
[ 2342.075616][ T2411] bridge_slave_0: entered promiscuous mode
[ 2342.090078][ T2411] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2342.097416][ T2411] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2342.106026][ T2411] bridge_slave_1: entered allmulticast mode
[ 2342.115261][ T2411] bridge_slave_1: entered promiscuous mode
[ 2342.191145][ T2411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2342.214092][ T2411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2342.289278][ T2411] team0: Port device team_slave_0 added
[ 2342.314123][ T2411] team0: Port device team_slave_1 added
[ 2342.376695][ T2411] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2342.384346][ T2411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2342.417073][ T2411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2342.436962][ T2411] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2342.444551][ T2411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2342.471601][ T2411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2342.528798][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2342.581034][ T2411] hsr_slave_0: entered promiscuous mode
[ 2342.589673][ T2411] hsr_slave_1: entered promiscuous mode
[ 2342.597137][ T2411] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2342.608020][ T2411] Cannot create hsr debugfs directory
[ 2342.870899][ T2411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2342.996201][ T2411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2343.111497][ T2411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2343.246915][ T2411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2343.409197][T23253] Bluetooth: hci6: command 0x0409 tx timeout
[ 2343.546914][ T2411] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2343.566484][ T2411] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2343.582650][ T2411] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2343.598994][ T2411] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2343.795043][ T2411] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2343.843573][ T2411] 8021q: adding VLAN 0 to HW filter on device team0
[ 2343.867452][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2343.874833][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2343.903343][ T2328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2343.910632][ T2328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2344.271525][ T2411] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2344.609284][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2344.663838][ T2411] veth0_vlan: entered promiscuous mode
[ 2344.685343][ T2411] veth1_vlan: entered promiscuous mode
[ 2344.755493][ T2411] veth0_macvtap: entered promiscuous mode
[ 2344.773201][ T2411] veth1_macvtap: entered promiscuous mode
[ 2344.814286][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2344.825956][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2344.839728][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2344.851781][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2344.862479][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2344.874806][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2344.885327][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2344.898145][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2344.908875][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2344.919859][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2344.930370][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2344.941143][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2344.957798][ T2411] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2344.992835][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2345.003777][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2345.015856][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2345.026834][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2345.037183][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2345.047821][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2345.057752][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2345.070759][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2345.080874][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2345.091541][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2345.107005][ T2411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2345.117660][ T2411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2345.132012][ T2411] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2345.162198][ T2411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.171963][ T2411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.183980][ T2411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.194555][ T2411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2345.370266][ T5134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2345.378165][ T5134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2345.449977][ T2328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2345.457862][ T2328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2345.488959][T23253] Bluetooth: hci6: command 0x041b tx timeout
[ 2346.693179][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2347.568801][T23606] Bluetooth: hci6: command 0x040f tx timeout
[ 2348.768953][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2349.649004][T23606] Bluetooth: hci6: command 0x0419 tx timeout
[ 2350.848662][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2351.739160][T23606] Bluetooth: hci6: command 0x0405 tx timeout
[ 2352.931032][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2355.018860][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2357.090082][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2359.179022][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2361.248799][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2363.328998][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2365.408900][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2367.498877][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2369.568890][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2371.648799][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2373.734267][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2375.808660][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2377.889073][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2379.968716][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2382.048896][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2384.131330][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2386.219632][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2388.299087][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2390.368924][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2392.459105][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2394.538709][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2396.609028][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2398.689689][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:21:51 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0", 0xbd, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3) (async)
shutdown(0xffffffffffffffff, 0x1) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r4=>0x0}})
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980)) (async)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001bc0)={0x2, 0x1, {0x9, @struct, 0x0, 0x4, 0x5, 0xb8, 0x6, 0x1, 0x4, @struct={0x8, 0x2}, 0x9, 0x1f, [0x27bb, 0xfff, 0x8000, 0x80000000, 0x3, 0x8000000000000001]}, {0x5, @usage=0x9, r4, 0x9, 0x8000000000000001, 0x9, 0x80000000, 0x3, 0x4, @struct={0x1, 0x8}, 0x7, 0xfffffff8, [0x9, 0x5, 0xffffffffffffffff, 0x0, 0xffffffffffff0138, 0x6]}, {0x6, @usage=0x9, 0x0, 0x4, 0x5, 0x5, 0xffff, 0x4, 0x20, @usage=0x70, 0x4, 0x80000001, [0x1ff, 0x800, 0x6, 0x8, 0xf, 0x800]}, {0x8, 0x7fffffffffffffff, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x100, 0x7fd, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) (async, rerun: 64)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000017c0)={0x2, 0x1, {0xb6, @usage=0x4, 0x0, 0x9, 0x1, 0x100000000, 0x7, 0x1000000fc, 0x0, @struct={0x7fffffff}, 0xffffffff, 0x0, [0x7f, 0x7fffffff, 0x3, 0xf1e5, 0x1, 0x40000000]}, {0x8b, @usage=0x5, 0x0, 0xba, 0x9, 0x5, 0x7, 0x200, 0x44f, @usage=0x5d, 0x5, 0x2, [0xffffffffffff8001, 0x2, 0xfffffffffffffffe, 0x8, 0x7]}, {0x0, @struct={0x0, 0x5}, r4, 0x6, 0xe432, 0x6, 0x0, 0x20, 0x24, @usage, 0x5, 0x4, [0x2, 0xffffffff, 0x8000, 0x1f, 0x8000000000000001, 0xc03]}, {0xfffffffffffffffc, 0x401}}) (async, rerun: 64)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000002c0)={<r5=>0x0, "02c8305d689e455364f00ddb8f12e573"})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0x1e, 0x1, {0x9, @usage=0x6, r4, 0x3, 0x0, 0x6, 0xffff, 0x40, 0x0, @usage=0x401, 0x23, 0x8, [0x6, 0x6d56, 0x0, 0x7fff, 0x7c4e, 0x8]}, {0x5, @struct={0x4, 0x2}, 0x0, 0x9, 0x0, 0x100000000, 0x6, 0xfffffffffffffffe, 0x80, @usage=0x2, 0xffffffff, 0x8, [0x5, 0xfffffffffffffff9, 0x6, 0x5564]}, {0xffffffffffffffff, @struct={0x8000}, r5, 0xa644, 0x4, 0x40, 0x0, 0x0, 0x0, @struct={0x0, 0x7e0}, 0x6, 0xc227, [0xb3ea, 0x0, 0x401, 0x2, 0xffffffffffffffff]}, {0xd36, 0x5, 0x1}}) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={r4, 0x81, 0x1000, 0x1}) (async, rerun: 32)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000008c0)={r4, "825f2f79949767e5474989fe9692e1ae"}) (async, rerun: 64)
write$cgroup_pid(r3, &(0x7f0000000240), 0x12) (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r2, &(0x7f0000000280)=0x4bc, 0x100000000)
r7 = socket(0x22, 0x2, 0x4)
getsockopt(r7, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

22:21:51 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

22:21:51 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00e1ff"], 0x1c}}, 0x0)

22:21:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = socket(0xa, 0x0, 0xe1) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@mpls_getnetconf={0x24, 0x52, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x1d0, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "696ac84e0960df6fe345ff1af09badd78e6e797002466ebc"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f43a9220a1f132adcc775113bf4ee5edce5ab99087a1f4f5"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b8978369ad1a88aad0c10bb208d9820593f3ac683daea51"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bdb9642ada1f24757065f3a21ad8101f95df8ea0007e8dc5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "afdefa98f121ab8de46a9a5c52dedda44b45eaf0b7efa057"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4844}, 0x80c1) (async)
sendfile(r8, r7, 0x0, 0x100000002)

22:21:51 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="e31232bff9a06258a465e9e17cf40dff30a78743b3667611d44ddc7514b231523f8b3633ede4495dff48b9452442510c969d4844da2f7a2a8caef9e1584cb1a42abe5d0f7b139ad96619", 0x4a}, {&(0x7f0000000080)="2841ad376643f921f0d52922f98f42b69240aa3d065e6850052a9c247dfc61ccb26196e47b62fd6fe6d2103e79270abbdcc1a1d449f5a011e8d10d75b1711131c91974fef79bdfef7e6e37d2a071650752ec2135536658308c657f7307299516574112cc26527809ceebc28e0a1f90d64c128fb4e86649601a49c297fb7c5337c414091d60412a1c9da9587b43e4df1eed3ce87e0bfc1beafae794170009733c93ca4565f8d21db82e6436a15580969f86096e29d437efb88f9a441b49f7ce97437d164d190ed94728150bbb1ce71724b75b0ca7f0cb", 0xd6}, {&(0x7f0000000180)="7f4d95759140161914b1466573ca6c85f8cb516373058c9a0c632e91f230a91d0053a69e1be4ccca108f2b6e1714a8c537d2aa8b2d9e542fdebceb40f2e3e8d91736e6cce5263619785a5faa10329f6ecacc087a3d8fc4f523a37a", 0x5b}, {&(0x7f0000000200)="c2706a71781ad52e3de43c38b29469aa3e6525", 0x13}], 0x4, 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x40, 0xfe, 0x1, 0x0, 0x0, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

22:21:51 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:21:52 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002400)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000006c00)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_sset_info={0x26}})

22:21:52 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="e31232bff9a06258a465e9e17cf40dff30a78743b3667611d44ddc7514b231523f8b3633ede4495dff48b9452442510c969d4844da2f7a2a8caef9e1584cb1a42abe5d0f7b139ad96619", 0x4a}, {&(0x7f0000000080)="2841ad376643f921f0d52922f98f42b69240aa3d065e6850052a9c247dfc61ccb26196e47b62fd6fe6d2103e79270abbdcc1a1d449f5a011e8d10d75b1711131c91974fef79bdfef7e6e37d2a071650752ec2135536658308c657f7307299516574112cc26527809ceebc28e0a1f90d64c128fb4e86649601a49c297fb7c5337c414091d60412a1c9da9587b43e4df1eed3ce87e0bfc1beafae794170009733c93ca4565f8d21db82e6436a15580969f86096e29d437efb88f9a441b49f7ce97437d164d190ed94728150bbb1ce71724b75b0ca7f0cb", 0xd6}, {&(0x7f0000000180)="7f4d95759140161914b1466573ca6c85f8cb516373058c9a0c632e91f230a91d0053a69e1be4ccca108f2b6e1714a8c537d2aa8b2d9e542fdebceb40f2e3e8d91736e6cce5263619785a5faa10329f6ecacc087a3d8fc4f523a37a", 0x5b}, {&(0x7f0000000200)="c2706a71781ad52e3de43c38b29469aa3e6525", 0x13}], 0x4, 0x8) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x40, 0xfe, 0x1, 0x0, 0x0, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

22:21:52 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

22:21:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = socket(0xa, 0x0, 0xe1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@mpls_getnetconf={0x24, 0x52, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x1d0, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x70}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "696ac84e0960df6fe345ff1af09badd78e6e797002466ebc"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f43a9220a1f132adcc775113bf4ee5edce5ab99087a1f4f5"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b8978369ad1a88aad0c10bb208d9820593f3ac683daea51"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bdb9642ada1f24757065f3a21ad8101f95df8ea0007e8dc5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "afdefa98f121ab8de46a9a5c52dedda44b45eaf0b7efa057"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4844}, 0x80c1) (async)
sendfile(r8, r7, 0x0, 0x100000002)

[ 2400.769211][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2400.905255][   T28] audit: type=1804 audit(1696026112.220:10720): pid=2445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3067/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0
[ 2400.987168][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:21:52 executing program 2:
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000e80), 0xffffffffffffffff)

22:21:52 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="e31232bff9a06258a465e9e17cf40dff30a78743b3667611d44ddc7514b231523f8b3633ede4495dff48b9452442510c969d4844da2f7a2a8caef9e1584cb1a42abe5d0f7b139ad96619", 0x4a}, {&(0x7f0000000080)="2841ad376643f921f0d52922f98f42b69240aa3d065e6850052a9c247dfc61ccb26196e47b62fd6fe6d2103e79270abbdcc1a1d449f5a011e8d10d75b1711131c91974fef79bdfef7e6e37d2a071650752ec2135536658308c657f7307299516574112cc26527809ceebc28e0a1f90d64c128fb4e86649601a49c297fb7c5337c414091d60412a1c9da9587b43e4df1eed3ce87e0bfc1beafae794170009733c93ca4565f8d21db82e6436a15580969f86096e29d437efb88f9a441b49f7ce97437d164d190ed94728150bbb1ce71724b75b0ca7f0cb", 0xd6}, {&(0x7f0000000180)="7f4d95759140161914b1466573ca6c85f8cb516373058c9a0c632e91f230a91d0053a69e1be4ccca108f2b6e1714a8c537d2aa8b2d9e542fdebceb40f2e3e8d91736e6cce5263619785a5faa10329f6ecacc087a3d8fc4f523a37a", 0x5b}, {&(0x7f0000000200)="c2706a71781ad52e3de43c38b29469aa3e6525", 0x13}], 0x4, 0x8) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x40, 0xfe, 0x1, 0x0, 0x0, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

[ 2401.086638][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2401.229477][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2401.246049][   T28] audit: type=1804 audit(1696026112.570:10721): pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3342/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[ 2401.311936][ T2470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2401.332495][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2401.412651][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2402.689214][T23606] Bluetooth: hci6: command 0x0405 tx timeout
[ 2402.853894][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2402.974691][T23253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2402.984216][T23253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2402.998842][T23253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2403.007819][T23253] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 2403.015910][T23253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2403.637250][ T2475] chnl_net:caif_netlink_parms(): no params data found
[ 2403.800085][ T2475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2403.807373][ T2475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2403.817454][ T2475] bridge_slave_0: entered allmulticast mode
[ 2403.828045][ T2475] bridge_slave_0: entered promiscuous mode
[ 2403.842263][ T2475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2403.849705][ T2475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2403.857990][ T2475] bridge_slave_1: entered allmulticast mode
[ 2403.867290][ T2475] bridge_slave_1: entered promiscuous mode
[ 2403.946672][ T2475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2403.966123][ T2475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2404.037023][ T2475] team0: Port device team_slave_0 added
[ 2404.059050][ T2475] team0: Port device team_slave_1 added
[ 2404.119302][ T2475] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2404.126294][ T2475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2404.153809][ T2475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2404.177245][ T2475] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2404.184689][ T2475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2404.212918][ T2475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2404.315422][ T2475] hsr_slave_0: entered promiscuous mode
[ 2404.325090][ T2475] hsr_slave_1: entered promiscuous mode
[ 2404.333209][ T2475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2404.341206][ T2475] Cannot create hsr debugfs directory
[ 2404.630342][ T2475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2404.769587][T23606] Bluetooth: hci6: command 0x0405 tx timeout
[ 2404.786031][ T2475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2404.896766][ T2475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2404.928863][T23606] Bluetooth: hci5: command 0x0405 tx timeout
[ 2404.994872][ T2475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2405.090899][T23606] Bluetooth: hci7: command 0x0409 tx timeout
[ 2405.291319][ T2475] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2405.306806][ T2475] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2405.327031][ T2475] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2405.344299][ T2475] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2405.546657][ T2475] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2405.595186][ T2475] 8021q: adding VLAN 0 to HW filter on device team0
[ 2405.616128][ T2342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2405.623513][ T2342] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2405.661395][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2405.668700][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2406.046364][ T2475] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2406.445690][ T2475] veth0_vlan: entered promiscuous mode
[ 2406.471775][ T2475] veth1_vlan: entered promiscuous mode
[ 2406.546390][ T2475] veth0_macvtap: entered promiscuous mode
[ 2406.565357][ T2475] veth1_macvtap: entered promiscuous mode
[ 2406.605722][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.619228][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.629661][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.640450][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.652745][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.663471][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.673474][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.684062][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.703293][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.715453][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.725475][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.736032][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.746789][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2406.757501][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.773687][ T2475] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2406.804597][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.817169][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.830362][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.841079][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.851535][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.862319][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.872320][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.884834][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.894809][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.905415][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.917079][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.927726][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.938448][ T2475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2406.949140][ T2475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2406.963001][ T2475] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2406.993442][ T2475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2407.002495][ T2475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2407.011592][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2407.024824][ T2475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2407.034193][ T2475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2407.171464][T23253] Bluetooth: hci7: command 0x041b tx timeout
[ 2407.239798][T23390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2407.247679][T23390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2407.326909][ T5136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2407.338818][ T5136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
22:21:58 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
shutdown(r1, 0x0)

22:21:58 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)

22:21:58 executing program 2:
socketpair(0x29, 0x5, 0x8, &(0x7f00000001c0))

22:21:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r1 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @netrom, @rose, @null, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendfile(r0, r1, &(0x7f0000000180)=0xfffffffffffffffa, 0x9)
getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:21:58 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="000826bd700000000000890000000c009900e1ffffff0000000038001d803400008005000b00010000000500090000000000040004000c000300f30000000000000005000a000000000005000b0000000000f0001d80300000800c000200000400000000000005000900000000000c00020048160000000000000400040005000c0001000000a800008005000800f700000090000d80340003801400030006000300020006000180400008000002050004000200000014000300000004007678fbfffe01000027000000280000801400030000000100f9ffd702000000000000f8000500040001000000050004000000000005000400000000001c0003800500060002000000050004000100000005000400010000000400040005000c0000000000140000800500080018000000050007000000000024001d8020000080060005008f0000000c000200020000000000000005000b0000000000a70a9d466677059b15c246e6e24376a795f4ebce749bc94af4c41acc6fb6f9251ee3b180e207c82b73656a6d2f7afc3471c626eab34815ed0f1dc86c43a9774b796015029fc1431191aaeaedaf35021cac59706ddadf9dc5f7b226b7972851242c24a85bcc93a19e985241d183bd7c3d289964e3693d9f3cdc6104be7df30560d97869f5437f9d62304afe97cd68f0d5515e1041b88d84a48da7ccf3454a8af801a0a847ce15e80934816aa99294bc8bc928dcb418205d4ee6bc05db0bd7b96096e71d0483deabbd6010e398b2ab52beb47d17651dbc949cbc52c88609eb0050b748c21867a133ed4cd542a253a44059cc6ac8918b933566abff2b029334046e20264e8bc40157fe681c89ff6bfe9c49e7b61146cdac38c73245e5c7994981851c428814b6e1bc5816e8594b0f4d79bd74837801280d4d0b25b99c69a1eab0"], 0x16c}}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:21:58 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
sendfile(r4, r0, &(0x7f0000000100)=0x7, 0x7)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a34976163780ef6b56e45f102400000071"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000240)='pim6reg\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

22:21:58 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r1 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @netrom, @rose, @null, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendfile(r0, r1, &(0x7f0000000180)=0xfffffffffffffffa, 0x9)
getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)

22:21:58 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8) (async, rerun: 32)
shutdown(r1, 0x0) (rerun: 32)

22:21:59 executing program 2:
socketpair(0x1d, 0x2, 0x2, &(0x7f00000005c0))

22:21:59 executing program 4:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
shutdown(r1, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r1, &(0x7f0000000880), 0x8) (async)
shutdown(r1, 0x0) (async)

22:21:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r1 = accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @netrom, @rose, @null, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendfile(r0, r1, &(0x7f0000000180)=0xfffffffffffffffa, 0x9)
getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async)
accept$ax25(r0, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @netrom, @rose, @null, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48) (async)
sendfile(r0, r1, &(0x7f0000000180)=0xfffffffffffffffa, 0x9) (async)
getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

22:21:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ipvlan1\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x1d}})

[ 2407.872312][   T28] audit: type=1804 audit(1696026119.200:10722): pid=2516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3343/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
22:21:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async, rerun: 64)
r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
sendfile(r4, r0, &(0x7f0000000100)=0x7, 0x7) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a34976163780ef6b56e45f102400000071"], 0x24}}, 0x0) (async)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000240)='pim6reg\x00'}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)

[ 2407.951529][   T28] audit: type=1804 audit(1696026119.280:10723): pid=2515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3068/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
22:21:59 executing program 2:
poll(&(0x7f0000000040)=[{0xffffffffffffff9c}, {}, {}, {}, {}], 0x5, 0x0)

22:21:59 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:21:59 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r2=>r1, 0x4, 0x0, 0x4c4})
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8)
shutdown(r0, 0x0)

22:21:59 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
socket(0x23, 0x80000, 0x8)

22:21:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (rerun: 32)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
sendfile(r4, r0, &(0x7f0000000100)=0x7, 0x7) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a34976163780ef6b56e45f102400000071"], 0x24}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000240)='pim6reg\x00'}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

22:21:59 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r3 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r3, 0x1)
shutdown(r0, 0x0)

22:21:59 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r2=>r1, 0x4, 0x0, 0x4c4})
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x4, 0x0, 0x4c4}) (async)
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8) (async)
shutdown(r0, 0x0) (async)

22:21:59 executing program 2:
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x2, &(0x7f0000000300))

22:22:00 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
socket(0x23, 0x80000, 0x8)

[ 2408.734026][   T28] audit: type=1804 audit(1696026120.060:10724): pid=2542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3069/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[ 2408.774345][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:22:00 executing program 2:
accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2, 0x1812, 0xffffffffffffffff, 0x0)

[ 2408.827076][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:22:00 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r2=>r1, 0x4, 0x0, 0x4c4})
connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8) (async)
shutdown(r0, 0x0)

[ 2408.870086][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2408.916082][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2408.939510][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2408.961856][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2408.984736][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
22:22:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$cgroup_ro(r0, &(0x7f0000000500)='io.stat\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4)
sendfile(r6, r5, 0x0, 0x100000002)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, r8, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1011}, 0x20000000)

22:22:00 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
socket(0x23, 0x80000, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
socket(0x23, 0x80000, 0x8) (async)

[ 2409.029768][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2409.067410][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2409.088866][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2409.112131][ T2542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2409.250705][T23253] Bluetooth: hci7: command 0x040f tx timeout
22:22:00 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x4, 0x7394e672, 0x2})
connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @empty, 0x7b}, 0x20)

22:22:00 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000000)={{r0}, 0x0, 0x2, @unused=[0x6, 0x1, 0x3, 0x275], @subvolid})
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40004)

22:22:00 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0xfffffffffffffffb}, 0x10)

[ 2409.357826][   T28] audit: type=1804 audit(1696026120.680:10725): pid=2573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3346/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0
22:22:00 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="000826bd700000000000890000000c009900e1ffffff0000000038001d803400008005000b00010000000500090000000000040004000c000300f30000000000000005000a000000000005000b0000000000f0001d80300000800c000200000400000000000005000900000000000c00020048160000000000000400040005000c0001000000a800008005000800f700000090000d80340003801400030006000300020006000180400008000002050004000200000014000300000004007678fbfffe01000027000000280000801400030000000100f9ffd702000000000000f8000500040001000000050004000000000005000400000000001c0003800500060002000000050004000100000005000400010000000400040005000c0000000000140000800500080018000000050007000000000024001d8020000080060005008f0000000c000200020000000000000005000b0000000000a70a9d466677059b15c246e6e24376a795f4ebce749bc94af4c41acc6fb6f9251ee3b180e207c82b73656a6d2f7afc3471c626eab34815ed0f1dc86c43a9774b796015029fc1431191aaeaedaf35021cac59706ddadf9dc5f7b226b7972851242c24a85bcc93a19e985241d183bd7c3d289964e3693d9f3cdc6104be7df30560d97869f5437f9d62304afe97cd68f0d5515e1041b88d84a48da7ccf3454a8af801a0a847ce15e80934816aa99294bc8bc928dcb418205d4ee6bc05db0bd7b96096e71d0483deabbd6010e398b2ab52beb47d17651dbc949cbc52c88609eb0050b748c21867a133ed4cd542a253a44059cc6ac8918b933566abff2b029334046e20264e8bc40157fe681c89ff6bfe9c49e7b61146cdac38c73245e5c7994981851c428814b6e1bc5816e8594b0f4d79bd74837801280d4d0b25b99c69a1eab0"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="f303330020b014000802110000000802110000007b46eaf4c74c68000201044004000600ffffffffffff00060202020202020108014802c86ce089922d1a02000b02000000000000000900000010000000000807000000f8dd4e38a258628566c957b6b3695d468a19166d822fdbd08cfe02a9707eb9ae2a1e101f8e4838ba99e8de850308f72eeb433636a6a5d4c20ad875a50a12164f1c91a85904eeeee4aaad67e115446b5ca6dd484a20966c947985ba075d28df67235cb7909e4b25ebed48179e2e025a5ccfe7de30b175a0ff0d9d9e7c11489594c0ca98f47886009a78932bacbc704b48d18775bf6f63d6f4bfdb40dd52d9056f9ec884baf669001652f94ca069c87b89353ba9bbb19b262bbf2b5819e329f9f9cf341b0e781bc22a765f5ee17f5e740e87f776a74584f315f9f59c5664dec564d53dc2588ae51386bf052c78744464dde0958a9e96bec0e907516b73565c6c4d78c2192aa9d56c21b03e52b8a19a6c114ee3b5ccfd14e6d4063b5058310716f873c4c17567f7a2c8527f18c4d7d2402dfbed3d7091beed0d066d52622c810c0af04f25c1f2370a8d4102dc6c127f37539602236974363c86646f98358e80c2b903a79a6d268fa15eec4b9c3eb592794a46622ce46f7f789c5772ec95eee9f941548af8ec4126fd6bbddf26ccef11daabbf5f411a53de41ba45a66446fcfc29f099807d511e8f632ed55f15fb0b079692e1c9d195fa7b43e99f2f9c2e0b85a51081df962eeb6e48a605768fafbb979f824edd13249789a96cf6ffaa3c04fb5ad125ea2af2c671dddfb8ed0e081fef0b1d15416fded0fd330ca9ed6bcb82e7bdbf9aa3c252ad343fd1e63c0bd6b05d2d76b33e1ec82a4a16c033c49bc79afc7ccc9972247e37d1b922180d8a1a33e0f8e736540275a20308d4eea4"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:22:00 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r3 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r3, 0x1)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket(0x22, 0x2, 0x4) (async)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
socket$bt_hidp(0x1f, 0x3, 0x6) (async)
shutdown(r3, 0x1) (async)
shutdown(r0, 0x0) (async)

22:22:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa)

22:22:00 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000000)={{r0}, 0x0, 0x2, @unused=[0x6, 0x1, 0x3, 0x275], @subvolid})
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40004)

22:22:01 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x4, 0x7394e672, 0x2})
connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @empty, 0x7b}, 0x20)

[ 2409.719662][   T28] audit: type=1804 audit(1696026121.030:10726): pid=2585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3070/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0
22:22:01 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
r3 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r3, 0x1) (async)
shutdown(r0, 0x0)

22:22:01 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r3 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r3, 0x1)
shutdown(r0, 0x0)

22:22:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 32)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
openat$cgroup_ro(r0, &(0x7f0000000500)='io.stat\x00', 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x24}}, 0x0) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4) (async)
sendfile(r6, r5, 0x0, 0x100000002) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, r8, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1011}, 0x20000000)

22:22:01 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000000)={{r0}, 0x0, 0x2, @unused=[0x6, 0x1, 0x3, 0x275], @subvolid}) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40004)

22:22:01 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x4, 0x7394e672, 0x2})
connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @empty, 0x7b}, 0x20)

22:22:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:22:01 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r2, &(0x7f0000000000), 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x80, 0x20, 0x0, 0xfd, 0x0, 0x37, 0xb, 0x700}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0x4, r6}}, @RTA_PREF={0x5, 0x14, 0x20}, @RTA_UID={0x8, 0x19, r7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @local}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048010}, 0x20000000)
connect$bt_sco(r0, &(0x7f0000000080), 0x8)
accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380))

[ 2410.306213][ T2620] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:22:01 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r3 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r3, 0x1)
shutdown(r0, 0x0)

22:22:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)

22:22:01 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r2, &(0x7f0000000000), 0x8) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) (rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x80, 0x20, 0x0, 0xfd, 0x0, 0x37, 0xb, 0x700}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0x4, r6}}, @RTA_PREF={0x5, 0x14, 0x20}, @RTA_UID={0x8, 0x19, r7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @local}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048010}, 0x20000000) (async)
connect$bt_sco(r0, &(0x7f0000000080), 0x8)
accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380))

22:22:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:22:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
shutdown(r0, 0x0) (async)

22:22:01 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 64)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32)
openat$cgroup_ro(r0, &(0x7f0000000500)='io.stat\x00', 0x0, 0x0) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x4) (async, rerun: 32)
sendfile(r6, r5, 0x0, 0x100000002) (rerun: 32)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, r8, 0x601, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1011}, 0x20000000)

[ 2410.634596][ T2636] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
22:22:02 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
bind$bt_sco(r2, &(0x7f0000000000), 0x8) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r6}]}}}]}, 0x3c}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_newroute={0x44, 0x18, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x80, 0x20, 0x0, 0xfd, 0x0, 0x37, 0xb, 0x700}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0x4, r6}}, @RTA_PREF={0x5, 0x14, 0x20}, @RTA_UID={0x8, 0x19, r7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @local}}]}, 0x44}, 0x1, 0x0, 0x0, 0x30048010}, 0x20000000) (async)
connect$bt_sco(r0, &(0x7f0000000080), 0x8) (async, rerun: 32)
accept4(r0, 0x0, 0x0, 0x0) (rerun: 32)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380))

22:22:02 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
connect$bt_sco(r1, &(0x7f0000000040), 0x8)
shutdown(r0, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000080), 0x8)

22:22:02 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400d07e12"], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

[ 2410.883619][   T28] audit: type=1804 audit(1696026122.210:10727): pid=2649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3071/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0
[ 2410.961699][ T2651] netlink: 'syz-executor.1': attribute type 14 has an invalid length.
[ 2411.099238][   T28] audit: type=1804 audit(1696026122.420:10728): pid=2657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3349/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0
22:22:02 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1000}}, 0x20}}, 0x20044800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000044}, 0x40008)

22:22:02 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
connect$bt_sco(r1, &(0x7f0000000040), 0x8)
shutdown(r0, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000080), 0x8)

22:22:02 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x3ff, 0xc481}, &(0x7f0000000040)=0x8)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)={0x3, 0x0, 0x5, 0x691c, 0x8, [{0x8, 0x1f, 0x5, '\x00', 0x2}, {0xaa, 0x9, 0x100000001, '\x00', 0xa}, {0xa70f, 0x6, 0x3, '\x00', 0x2000}, {0x5, 0x5, 0x400, '\x00', 0x800}, {0x1f, 0x154f, 0x100000001, '\x00', 0x2002}, {0x10001, 0x7c, 0x6, '\x00', 0x200}, {0x4, 0x2, 0x6, '\x00', 0x2fadfa0cdaafd905}, {0x8000000000000001, 0x5, 0xfffffffffffffffd, '\x00', 0x801}]})
connect$bt_sco(r3, &(0x7f0000000880), 0x8)
shutdown(r3, 0x0)

[ 2411.168916][T23606] Bluetooth: hci5: command 0x0405 tx timeout
22:22:02 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
connect$bt_sco(r1, &(0x7f0000000880), 0x8)
connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async)
shutdown(r0, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000080), 0x8)

22:22:02 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket(0x22, 0x2, 0x4)
getsockopt(r2, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r3 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r3, 0x1)
shutdown(r0, 0x0)

[ 2411.332816][T23253] Bluetooth: hci7: command 0x0419 tx timeout
22:22:02 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1000}}, 0x20}}, 0x20044800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000044}, 0x40008)

22:22:02 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x9a}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xb, 0x0, 0x8, 0x10, 0x4}, @jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0x40, 0x4}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0xb, 0x8, 0x7, 0x18, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x9, 0x8}], 0x10, 0x7fffffff}, 0x90)
ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0x5)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3)

22:22:02 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x3ff, 0xc481}, &(0x7f0000000040)=0x8)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)={0x3, 0x0, 0x5, 0x691c, 0x8, [{0x8, 0x1f, 0x5, '\x00', 0x2}, {0xaa, 0x9, 0x100000001, '\x00', 0xa}, {0xa70f, 0x6, 0x3, '\x00', 0x2000}, {0x5, 0x5, 0x400, '\x00', 0x800}, {0x1f, 0x154f, 0x100000001, '\x00', 0x2002}, {0x10001, 0x7c, 0x6, '\x00', 0x200}, {0x4, 0x2, 0x6, '\x00', 0x2fadfa0cdaafd905}, {0x8000000000000001, 0x5, 0xfffffffffffffffd, '\x00', 0x801}]})
connect$bt_sco(r3, &(0x7f0000000880), 0x8)
shutdown(r3, 0x0)
socket(0xa, 0x1, 0x0) (async)
close(r0) (async)
sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) (async)
socket$inet(0x2, 0x80001, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x3ff, 0xc481}, &(0x7f0000000040)=0x8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$key(0xf, 0x3, 0x2) (async)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)={0x3, 0x0, 0x5, 0x691c, 0x8, [{0x8, 0x1f, 0x5, '\x00', 0x2}, {0xaa, 0x9, 0x100000001, '\x00', 0xa}, {0xa70f, 0x6, 0x3, '\x00', 0x2000}, {0x5, 0x5, 0x400, '\x00', 0x800}, {0x1f, 0x154f, 0x100000001, '\x00', 0x2002}, {0x10001, 0x7c, 0x6, '\x00', 0x200}, {0x4, 0x2, 0x6, '\x00', 0x2fadfa0cdaafd905}, {0x8000000000000001, 0x5, 0xfffffffffffffffd, '\x00', 0x801}]}) (async)
connect$bt_sco(r3, &(0x7f0000000880), 0x8) (async)
shutdown(r3, 0x0) (async)

22:22:02 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

22:22:03 executing program 1:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x36)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x1000}}, 0x20}}, 0x20044800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0xe, r5}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000044}, 0x40008) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000044}, 0x40008)

22:22:03 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000), 0x8) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x9a}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xb, 0x0, 0x8, 0x10, 0x4}, @jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0x40, 0x4}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0xb, 0x8, 0x7, 0x18, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x9, 0x8}], 0x10, 0x7fffffff}, 0x90) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0x5)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3)

22:22:03 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = socket$bt_hidp(0x1f, 0x3, 0x6)
shutdown(r2, 0x1)

22:22:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400d07e12"], 0x24}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)

22:22:03 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
close(r0) (async)
sendmmsg$inet_sctp(r0, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x23, &(0x7f00000000c0)={r2}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x3ff, 0xc481}, &(0x7f0000000040)=0x8)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)={0x3, 0x0, 0x5, 0x691c, 0x8, [{0x8, 0x1f, 0x5, '\x00', 0x2}, {0xaa, 0x9, 0x100000001, '\x00', 0xa}, {0xa70f, 0x6, 0x3, '\x00', 0x2000}, {0x5, 0x5, 0x400, '\x00', 0x800}, {0x1f, 0x154f, 0x100000001, '\x00', 0x2002}, {0x10001, 0x7c, 0x6, '\x00', 0x200}, {0x4, 0x2, 0x6, '\x00', 0x2fadfa0cdaafd905}, {0x8000000000000001, 0x5, 0xfffffffffffffffd, '\x00', 0x801}]})
connect$bt_sco(r3, &(0x7f0000000880), 0x8) (async)
shutdown(r3, 0x0)

22:22:03 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = accept(r1, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80)
recvfrom$unix(r2, &(0x7f0000000140)=""/59, 0x3b, 0x101, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

22:22:03 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1) (async)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x9a}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xb, 0x0, 0x8, 0x10, 0x4}, @jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0x40, 0x4}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0xb, 0x8, 0x7, 0x18, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x7, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x9, 0x8}], 0x10, 0x7fffffff}, 0x90)
ioctl$int_in(r0, 0x5421, &(0x7f0000000400)=0x5)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3) (async)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x3)

[ 2412.088181][   T28] audit: type=1804 audit(1696026123.410:10729): pid=2686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir76149301/syzkaller.jyIuJx/3072/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0
22:22:03 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = accept(r1, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80)
recvfrom$unix(r2, &(0x7f0000000140)=""/59, 0x3b, 0x101, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
accept(r1, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) (async)
recvfrom$unix(r2, &(0x7f0000000140)=""/59, 0x3b, 0x101, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async)

22:22:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400d07e12"], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x100000002)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400d07e12"], 0x24}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendfile(r6, r5, 0x0, 0x100000002) (async)

22:22:03 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

22:22:03 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = accept(r1, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80)
recvfrom$unix(r2, &(0x7f0000000140)=""/59, 0x3b, 0x101, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8)

22:22:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0xffffff28)
shutdown(r0, 0x0)

22:22:04 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket(0x22, 0x2, 0x4)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
socket$bt_hidp(0x1f, 0x3, 0x6)

22:22:04 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x4a4da000)
r1 = socket(0x23, 0x2, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0)
bind$bt_sco(r2, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x100000002)
openat$cgroup_ro(r3, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0)
getsockopt(r1, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
socket(0x2a, 0x2, 0x6)
accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

22:22:04 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async, rerun: 64)
shutdown(r0, 0x0) (async, rerun: 64)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

22:22:04 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x40)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="249d94cfb17766701a1c53d71a92fd3a0000002100010000000000000000000a00000000"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'dvmrp1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x16c}}, 0x8000)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b6651d46f51d4472231698b2b1959a2098b4", @ANYRES16, @ANYBLOB="0000000000000000ccc162d3adaa3b855bab33cccf56af9bed0e04e9d363b0738dc91e18ce68bf89dd5729bdad1e2f14f829b367aa758f4383b056ac07a9b3da60ab5624458b5e91c23d4e4c3f5276ba82c0cb8ade", @ANYRES32=r5, @ANYBLOB="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"], 0x4ac}, 0x1, 0x0, 0x0, 0x2044}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40811)
write$binfmt_script(r6, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)

[ 2412.664519][   T28] audit: type=1804 audit(1696026123.990:10730): pid=2728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3105177355/syzkaller.lSdh61/3351/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0
22:22:04 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
shutdown(r0, 0x0) (async)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

[ 2412.924510][ T2737] ==================================================================
[ 2412.932652][ T2737] BUG: KASAN: slab-use-after-free in __sco_sock_close+0x2bc/0x690
[ 2412.940547][ T2737] Write of size 4 at addr ffff88802bf5e010 by task syz-executor.2/2737
[ 2412.948841][ T2737] 
[ 2412.951196][ T2737] CPU: 1 PID: 2737 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00675-g7c7dd1d64910 #0
[ 2412.961577][ T2737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2412.971677][ T2737] Call Trace:
[ 2412.975017][ T2737]  <TASK>
[ 2412.977990][ T2737]  dump_stack_lvl+0xd9/0x1b0
[ 2412.982647][ T2737]  print_report+0xc4/0x620
[ 2412.987125][ T2737]  ? __virt_addr_valid+0x5e/0x2d0
[ 2412.992210][ T2737]  ? __phys_addr+0xc6/0x140
[ 2412.996779][ T2737]  kasan_report+0xda/0x110
[ 2413.001265][ T2737]  ? __sco_sock_close+0x2bc/0x690
[ 2413.006362][ T2737]  ? __sco_sock_close+0x2bc/0x690
[ 2413.011453][ T2737]  kasan_check_range+0xef/0x190
[ 2413.016361][ T2737]  __sco_sock_close+0x2bc/0x690
[ 2413.021297][ T2737]  sco_sock_release+0x6f/0x2c0
[ 2413.026124][ T2737]  __sock_release+0xae/0x260
[ 2413.030780][ T2737]  ? __sock_release+0x260/0x260
[ 2413.035697][ T2737]  sock_close+0x1c/0x20
[ 2413.039918][ T2737]  __fput+0x3f7/0xa70
[ 2413.043969][ T2737]  __fput_sync+0x47/0x50
[ 2413.048281][ T2737]  __x64_sys_close+0x87/0xf0
[ 2413.052923][ T2737]  do_syscall_64+0x38/0xb0
[ 2413.057399][ T2737]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2413.063349][ T2737] RIP: 0033:0x7f21d4e7b9da
[ 2413.067806][ T2737] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
[ 2413.087469][ T2737] RSP: 002b:00007ffea54a59b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 2413.095941][ T2737] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f21d4e7b9da
[ 2413.103962][ T2737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 2413.111990][ T2737] RBP: 0000000000000032 R08: 0000001b30d20000 R09: 00000000000001fa
22:22:04 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000880), 0x8)
bind$bt_sco(r0, &(0x7f0000000000), 0xffffff28)
shutdown(r0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
connect$bt_sco(r0, &(0x7f0000000880), 0x8) (async)
bind$bt_sco(r0, &(0x7f0000000000), 0xffffff28) (async)
shutdown(r0, 0x0) (async)

[ 2413.120015][ T2737] R10: 0000000081738012 R11: 0000000000000293 R12: 00007f21d4a003c8
[ 2413.128042][ T2737] R13: ffffffffffffffff R14: 00007f21d4a00000 R15: 000000000024d0ed
[ 2413.136076][ T2737]  </TASK>
[ 2413.139128][ T2737] 
[ 2413.141474][ T2737] Allocated by task 2747:
[ 2413.145826][ T2737]  kasan_save_stack+0x33/0x50
[ 2413.150551][ T2737]  kasan_set_track+0x25/0x30
[ 2413.155196][ T2737]  __kasan_kmalloc+0xa2/0xb0
[ 2413.159857][ T2737]  hci_conn_add+0xc2/0x1760
[ 2413.164414][ T2737]  hci_connect_sco+0x3a0/0xf80
[ 2413.169238][ T2737]  sco_sock_connect+0x2c7/0xa50
[ 2413.174143][ T2737]  __sys_connect_file+0x15b/0x1a0
[ 2413.179253][ T2737]  __sys_connect+0x145/0x170
[ 2413.183906][ T2737]  __x64_sys_connect+0x72/0xb0
[ 2413.188735][ T2737]  do_syscall_64+0x38/0xb0
[ 2413.193199][ T2737]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2413.199162][ T2737] 
[ 2413.201513][ T2737] Freed by task 23253:
[ 2413.205606][ T2737]  kasan_save_stack+0x33/0x50
[ 2413.210349][ T2737]  kasan_set_track+0x25/0x30
[ 2413.214977][ T2737]  kasan_save_free_info+0x2b/0x40
[ 2413.220064][ T2737]  ____kasan_slab_free+0x15b/0x1b0
[ 2413.225250][ T2737]  slab_free_freelist_hook+0x114/0x1e0
[ 2413.230784][ T2737]  __kmem_cache_free+0xb8/0x2f0
[ 2413.235705][ T2737]  device_release+0xa1/0x240
[ 2413.240424][ T2737]  kobject_put+0x1d0/0x440
[ 2413.244918][ T2737]  put_device+0x1f/0x30
[ 2413.249137][ T2737]  hci_abort_conn_sync+0xabf/0xe10
[ 2413.249198][T23253] Bluetooth: hci5: command 0x0405 tx timeout
[ 2413.254277][ T2737]  abort_conn_sync+0x187/0x390
[ 2413.254321][ T2737]  hci_cmd_sync_work+0x1a4/0x3c0
[ 2413.270091][ T2737]  process_one_work+0x884/0x15c0
22:22:04 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00q'], 0x24}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x3af4701e)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f00008bf000/0x1000)=nil, 0x1000, 0x1000009, 0x1010, r4, 0x7f5d1000)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0)
sendfile(r7, r6, &(0x7f0000000480)=0x7fc8, 0x201)
r8 = socket(0x22, 0x2, 0x4)
getsockopt(r8, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000040)=0x1)
sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r2, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x61c, 0x41}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40488d0}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r5, 0x0, 0x100000002)

[ 2413.275100][ T2737]  worker_thread+0x8b9/0x1290
[ 2413.279838][ T2737]  kthread+0x33c/0x440
[ 2413.283961][ T2737]  ret_from_fork+0x45/0x80
[ 2413.288426][ T2737]  ret_from_fork_asm+0x11/0x20
[ 2413.293301][ T2737] 
[ 2413.295648][ T2737] The buggy address belongs to the object at ffff88802bf5e000
[ 2413.295648][ T2737]  which belongs to the cache kmalloc-4k of size 4096
[ 2413.309742][ T2737] The buggy address is located 16 bytes inside of
[ 2413.309742][ T2737]  freed 4096-byte region [ffff88802bf5e000, ffff88802bf5f000)
[ 2413.323601][ T2737] 
[ 2413.325956][ T2737] The buggy address belongs to the physical page:
[ 2413.332397][ T2737] page:ffffea0000afd600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bf58
[ 2413.342600][ T2737] head:ffffea0000afd600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2413.351577][ T2737] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 2413.359603][ T2737] page_type: 0xffffffff()
[ 2413.363978][ T2737] raw: 00fff00000000840 ffff888012c42140 dead000000000100 dead000000000122
[ 2413.372694][ T2737] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 2413.381311][ T2737] page dumped because: kasan: bad access detected
[ 2413.387755][ T2737] page_owner tracks the page as allocated
[ 2413.393494][ T2737] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5134, tgid 5134 (kworker/0:5), ts 586575666536, free_ts 586319255294
[ 2413.408894][T23253] Bluetooth: hci7: command 0x0405 tx timeout
[ 2413.415757][ T2737]  post_alloc_hook+0x2cf/0x340
[ 2413.415793][ T2737]  get_page_from_freelist+0xee0/0x2f20
[ 2413.415825][ T2737]  __alloc_pages+0x1d0/0x4a0
[ 2413.415854][ T2737]  alloc_pages+0x1a9/0x270
[ 2413.441117][ T2737]  allocate_slab+0x251/0x380
[ 2413.445772][ T2737]  ___slab_alloc+0x8c7/0x1580
[ 2413.450506][ T2737]  __slab_alloc.constprop.0+0x56/0xa0
[ 2413.455942][ T2737]  __kmem_cache_alloc_node+0x131/0x340
[ 2413.461470][ T2737]  __kmalloc_node_track_caller+0x50/0x100
[ 2413.467234][ T2737]  kmalloc_reserve+0xef/0x260
[ 2413.471972][ T2737]  __alloc_skb+0x12b/0x330
[ 2413.476452][ T2737]  nsim_dev_trap_report_work+0x29e/0xc70
[ 2413.482220][ T2737]  process_one_work+0x884/0x15c0
[ 2413.487217][ T2737]  worker_thread+0x8b9/0x1290
[ 2413.491943][ T2737]  kthread+0x33c/0x440
[ 2413.496068][ T2737]  ret_from_fork+0x45/0x80
[ 2413.500540][ T2737] page last free stack trace:
[ 2413.505239][ T2737]  free_unref_page_prepare+0x476/0xa40
[ 2413.510791][ T2737]  free_unref_page+0x33/0x3b0
[ 2413.515513][ T2737]  qlist_free_all+0x6a/0x170
[ 2413.520160][ T2737]  kasan_quarantine_reduce+0x18e/0x1d0
[ 2413.526111][ T2737]  __kasan_slab_alloc+0x65/0x90
[ 2413.531002][ T2737]  kmem_cache_alloc+0x16c/0x3b0
[ 2413.535921][ T2737]  jbd2__journal_start+0x190/0x690
[ 2413.541120][ T2737]  __ext4_journal_start_sb+0x40f/0x5c0
[ 2413.546642][ T2737]  ext4_evict_inode+0x5c8/0x1a30
[ 2413.551646][ T2737]  evict+0x2ed/0x6b0
[ 2413.555609][ T2737]  iput.part.0+0x55e/0x7a0
[ 2413.560095][ T2737]  iput+0x5c/0x80
[ 2413.563790][ T2737]  do_unlinkat+0x429/0x6d0
[ 2413.568276][ T2737]  __x64_sys_unlink+0xc8/0x110
[ 2413.573106][ T2737]  do_syscall_64+0x38/0xb0
[ 2413.577574][ T2737]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2413.583530][ T2737] 
[ 2413.585885][ T2737] Memory state around the buggy address:
[ 2413.591551][ T2737]  ffff88802bf5df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2413.599656][ T2737]  ffff88802bf5df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2413.607770][ T2737] >ffff88802bf5e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2413.615872][ T2737]                          ^
[ 2413.620502][ T2737]  ffff88802bf5e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2413.628604][ T2737]  ffff88802bf5e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2413.636696][ T2737] ==================================================================
[ 2413.649734][ T2737] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2413.656989][ T2737] CPU: 1 PID: 2737 Comm: syz-executor.2 Not tainted 6.6.0-rc2-syzkaller-00675-g7c7dd1d64910 #0
[ 2413.667361][ T2737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 2413.677576][ T2737] Call Trace:
[ 2413.680896][ T2737]  <TASK>
[ 2413.683868][ T2737]  dump_stack_lvl+0xd9/0x1b0
[ 2413.688520][ T2737]  panic+0x6a6/0x750
[ 2413.692479][ T2737]  ? panic_smp_self_stop+0xa0/0xa0
[ 2413.697658][ T2737]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2413.703890][ T2737]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2413.710128][ T2737]  check_panic_on_warn+0xab/0xb0
[ 2413.715131][ T2737]  end_report+0x108/0x150
[ 2413.719604][ T2737]  kasan_report+0xea/0x110
[ 2413.724072][ T2737]  ? __sco_sock_close+0x2bc/0x690
[ 2413.729165][ T2737]  ? __sco_sock_close+0x2bc/0x690
[ 2413.734249][ T2737]  kasan_check_range+0xef/0x190
[ 2413.739145][ T2737]  __sco_sock_close+0x2bc/0x690
[ 2413.744059][ T2737]  sco_sock_release+0x6f/0x2c0
[ 2413.748884][ T2737]  __sock_release+0xae/0x260
[ 2413.753539][ T2737]  ? __sock_release+0x260/0x260
[ 2413.758424][ T2737]  sock_close+0x1c/0x20
[ 2413.762617][ T2737]  __fput+0x3f7/0xa70
[ 2413.766641][ T2737]  __fput_sync+0x47/0x50
[ 2413.770923][ T2737]  __x64_sys_close+0x87/0xf0
[ 2413.775540][ T2737]  do_syscall_64+0x38/0xb0
[ 2413.779988][ T2737]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2413.785915][ T2737] RIP: 0033:0x7f21d4e7b9da
[ 2413.790349][ T2737] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
[ 2413.809987][ T2737] RSP: 002b:00007ffea54a59b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 2413.818430][ T2737] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f21d4e7b9da
[ 2413.826683][ T2737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 2413.834672][ T2737] RBP: 0000000000000032 R08: 0000001b30d20000 R09: 00000000000001fa
[ 2413.842661][ T2737] R10: 0000000081738012 R11: 0000000000000293 R12: 00007f21d4a003c8
[ 2413.850651][ T2737] R13: ffffffffffffffff R14: 00007f21d4a00000 R15: 000000000024d0ed
[ 2413.858655][ T2737]  </TASK>
[ 2413.861962][ T2737] Kernel Offset: disabled
[ 2413.866330][ T2737] Rebooting in 86400 seconds..