0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xa}, 0xc0, 0xfffe00000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0x0, 0x8, 0x0, 0xe2f}, 0xffffffffffffffff, 0x5, r0, 0x2) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 1468.760237][T13339] vhci_hcd: connection closed [ 1468.761326][T18776] vhci_hcd: stop threads [ 1468.770614][T18776] vhci_hcd: release socket [ 1468.775530][T18776] vhci_hcd: disconnect device [ 1468.929996][T13351] loop0: detected capacity change from 0 to 1024 [ 1469.052366][T13351] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1469.097817][T13351] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1469.104511][T13351] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz-executor.0: bad orphan inode 33554432 11:03:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10b200, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x309, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000009}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r1, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x48}}, 0x4800) [ 1469.140930][T13361] overlayfs: failed to clone lowerpath [ 1469.170540][T13351] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 11:03:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) r4 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000001440)="4ebfa00a157b34efbd9982793d5d97aec4144c5ea537ccdf0c2e4318f6f325db77a768d39d142aca85c12a3a0e2950c9997b47843bb59ff7c2191c83d3738351e93196b1a15a5a157b9cfc40848f3995eceb6f70a8d58b914249abd5e8f257197aa02284a60f2d92670d714b2d6ac26c64cd83ac9c3d28d97c466f5b6b5d8a4be13a5dd71fcd9a785d19132e637755593c86d99784f061cf8925ce261d6e1a6a35dfa4d4f18e15b7761d365e379eed1876102f405767f2c55a46", 0xba, 0xfffffffffffffffe) r5 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "52e13e82a4cccc402d57e12f0652638b1de89d0c74669c95f0b93537c6d7fa80fb1690b8f535ac48fe2ba0dae1b1d9959099b5d56788cf09e506c8d6ffc499b2", 0x13}, 0x48, r4) add_key(0x0, 0x0, &(0x7f0000001500)="e189ba747008bc411a846f4b2d0221d64adc17908e6d1c5d12b7dab70301a02a573c1be1f6825f4a6a7019f32c1a024214de65cc91c97127c2306879d6aacc6d83677b0c78ad466d81aee6aeb6d4293611d164ea02009eec0046c65ea4240c79aced23a6f5f7b3f2ce48f3b0dd15e9fd6b54964c0b5f6ba2ae8b519a28cf5ebd50f70618142bfe7d4bab9c05ff38ce54f6445568f7c530cc1e36864176db0bd2c444c2f42d7be0", 0xa7, r4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000012c0)={@desc={0x1, 0x0, @desc2}, 0x40, r5, '\x00', @b}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:08 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x477da178}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x3b0a9000) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000002c0)='-@\x00'], &(0x7f0000000980)=[&(0x7f0000000480)='-@\x00', &(0x7f0000000840)='*+$\x00', &(0x7f0000000880)='/\x00', &(0x7f00000008c0)='syztnl1\x00', &(0x7f0000000900)='}{+%\xe1\x00', &(0x7f0000000300)='\x00^\xff\x93\x9dRQe\x88,\xca\x17!/\x9c%\x9c9)\nv\x91\xca\x9d\x99!\x03\x8e\f\xb8\xe7|\x96%\'9\xb7\x19\xe7\xeaJ2\x99\xce\xb6[O\xee\xb6\x7f\x8c\\ \xd5\xc1\xb1\xf8I@\xa3~v\x1e\xd6\xa8M{\x1d\x04)O\xd9\x99%\xfd\\\x8ft\x1dZRv*O']) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r3, 0x0, 0x0, 0x26048f38, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e23, @remote}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x141) clone(0x55100980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="73ab7abba80cf17177561bf77d07389d53902bc4b89fc8e3a12d190fbf90b12a2cbb50be7b00000003619912751f2aa6fb07dfff12aaff224cabf0660000000000000000324d61d35c4e8de21cde2900004b35578189052545682196ac00214baf7cb1aeced35c33fe54a716a444a56ae21ed3f738cdefcebbcef864d684331bde3a03f03ca77818d14c1d94e9c207f1f8503ef5fc197ae74f5470b43fdf1aba59c4fe92b047a2ac26785b48ea889ddf8296981af30dc1003b02077a057ab38919020398117a724ddaaf4d772cbd21267881a033d2a91cc6ea8ddfa464d087627328cdacdd133d11f95f7905190efc2bb98ae99685bc4823f0b027a48f7c5a260e677e9ea5116f78a7e0ebecdaffc6020a92ef77f091131f1ea85142eca62f2b9aee27218f7f928324d7a853adcf53a9943d75c2f6bc6daf4065a9bd4d807a079b5d922f4adb1c5a69ff588a272ea166e8e69762a38c197e088c780902f757594df48fd62acdb763f5a22fe0485de8dac02d61b8b4968efe32598893cb60c72c957db27e332f1fb278463df359777eaaa517f9204f1560b8373ac622e596389028180ab51f2e56f6eefeff53d04cd2638a8fab2bde07477b5179dd79a42b277baaa4e63b6ea41715bcda36a99ba6d513cdaeff04d7dc713f26d1e613235537f929607757423c7d59c72f0c53a43179e6a0988cafae4b40745071e4de75c6e881d09dd9946b9ef97225fe7da5c4d1c2c33eb3d5693a491d2ff2eadb83eadc8affec216dcf54f700d3b4acc09864b222e7cba043f741eaef1cf96743b1df5245128b90921c1b89cc3113aabb325cd33fe846a6fc56a4d76f9c3396e46dc1e1c881dace784bc093156c66bf9cfd2865f75b0328e515d69090942b4b963fff58d51f2d34ba29", @ANYRES32=0x0, @ANYBLOB="070000010000000900000000401700400067000002049078860dca5d45012c0325a9e0000002ac1414aa4420adf08000000500000001000000ac19159d99a158ebed7ddfca518b0c00070012"]}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@empty, @private=0xa010101}, 0xc) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000003c0)) rt_sigqueueinfo(r0, 0x9, &(0x7f00000001c0)={0x36, 0x1ff, 0x1}) [ 1469.358750][T13361] overlayfs: failed to clone upperpath 11:03:08 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"]) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) getpeername(r1, &(0x7f0000000580)=@nl, &(0x7f00000002c0)=0x80) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [], {}, [{0x8, 0x3}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x4}}, 0x3c, 0x0) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x9, 0x7f, 0x3, 0x9, 0x0, 0x401, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xa}, 0xc0, 0xfffe00000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0x0, 0x8, 0x0, 0xe2f}, 0xffffffffffffffff, 0x5, r0, 0x2) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 11:03:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10b200, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x309, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x40}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000009}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r1, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x48}}, 0x4800) [ 1469.640248][T13375] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1469.646795][T13375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1469.654512][T13375] vhci_hcd vhci_hcd.0: Device attached 11:03:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fl=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_=\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2001, 0xd2710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe70, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb0, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8b1d4c869cb5b5c1173df0ff1604b93d560ba59f36c9475bdd736743f93114a33e"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "02c33830f323d21748de2dbaac0dfd6fd53334f3e3ca"}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) r4 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r4, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0x200017ec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0x200017ec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0), 0x2000, 0x0) [ 1469.807046][T13378] vhci_hcd: connection closed [ 1469.807341][T18769] vhci_hcd: stop threads [ 1469.816708][T18769] vhci_hcd: release socket [ 1469.821188][T18769] vhci_hcd: disconnect device [ 1469.861144][ T5875] vhci_hcd: vhci_device speed not set [ 1469.873524][T13377] vxcan1 speed is unknown, defaulting to 1000 11:03:08 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0xbc203000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mounts\x00') setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x10, 0x9}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddrlabel={0xb4, 0x48, 0x2, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) dup2(r1, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') dup2(r3, r4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) [ 1470.246157][T13380] overlayfs: failed to clone upperpath 11:03:09 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000040)={0x1, 0x488, 0x5, 0xdededede}) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="2854f5664dcdd0fffaf62085bbfd4c139cee8cff53435dcf813612a894fd06f2ff6c2ddb13930fc18daf63508d2ad72ace9d04930af596db02e117db62c2dea8e79022e9fd69ad066f378eb2c2536880d29d544b8979c0eaefa5ff6355786f69715fea3256fae461422b13", 0x6b, 0xfff}, {&(0x7f0000000140)="3b3bf65e235aef4d4c25e08c3678f74a9c98270237a3fac45fca375d52b9dde8738d553269df883a8a4f308fa2807118a100c1d42f340e3f89ba77497112a3543e0d1f104bebc6c53d0acfdefa919b779339023c61b9dba95774be644e9f5ec182fb66819d2a5bfabd1325498eeb7d149d5209925fda4fd6", 0x78, 0x58e4}, {&(0x7f00000001c0)="f6f09e2d5c0a85c013c4e449568f88b79f28ff", 0x13, 0x8}], 0x280000, &(0x7f0000000180)=ANY=[]) r1 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='autofs\x00', 0x1020080, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0xce, 0xef, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3d, 0xa, 0x4b}}]}}]}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000480)={0x9, 0x1f, 0xa7}) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x20, 0x6, 0x7f, 0x7, 0x0, 0xe8, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0), 0x11}, 0x10000, 0x0, 0x3, 0x0, 0x2, 0x401, 0x101, 0x0, 0x1f, 0x0, 0x7}, r3, 0x6, r2, 0xdd15d137cc505449) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000004c0)=0x101) 11:03:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) syz_io_uring_setup(0x3260, &(0x7f0000000180)={0x0, 0x7376, 0x8, 0x1, 0x1d4, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) writev(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) open(0x0, 0x0, 0x0) gettid() io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) 11:03:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) r3 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000001440)="4ebfa00a157b34efbd9982793d5d97aec4144c5ea537ccdf0c2e4318f6f325db77a768d39d142aca85c12a3a0e2950c9997b47843bb59ff7c2191c83d3738351e93196b1a15a5a157b9cfc40848f3995eceb6f70a8d58b914249abd5e8f257197aa02284a60f2d92670d714b2d6ac26c64cd83ac9c3d28d97c466f5b6b5d8a4be13a5dd71fcd9a785d19132e637755593c86d99784f061cf8925ce261d6e1a6a35dfa4d4f18e15b7761d365e379eed1876102f405767f2c55a46", 0xba, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "52e13e82a4cccc402d57e12f0652638b1de89d0c74669c95f0b93537c6d7fa80fb1690b8f535ac48fe2ba0dae1b1d9959099b5d56788cf09e506c8d6ffc499b2", 0x13}, 0x48, r3) add_key(0x0, 0x0, &(0x7f0000001500)="e189ba747008bc411a846f4b2d0221d64adc17908e6d1c5d12b7dab70301a02a573c1be1f6825f4a6a7019f32c1a024214de65cc91c97127c2306879d6aacc6d83677b0c78ad466d81aee6aeb6d4293611d164ea02009eec0046c65ea4240c79aced23a6f5f7b3f2ce48f3b0dd15e9fd6b54964c0b5f6ba2ae8b519a28cf5ebd50f70618142bfe7d4bab9c05ff38ce54f6445568f7c530cc1e36864176db0bd2c444c2f42d7be0", 0xa7, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r5], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:09 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/5, 0x110000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x25, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_usbip_server_init(0x4) sendfile(r4, r3, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) bind$xdp(r0, &(0x7f0000000340)={0x2c, 0x1, r2}, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r6 = dup3(r0, r0, 0x80000) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0xd, r5, 0x6, r6}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x110, 0x4) [ 1470.693290][T13405] loop2: detected capacity change from 0 to 88 11:03:10 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='\x15\xf7^\xf9\x12\x0f\xbd+\xa7\xce\xfa%\x98\xc6\x1e\x1e\xf8\x0213\xce\x89x\xb6\x9b\xfbp\x9f\xd5\x9d\b\xb7\x1b\xcc\x91\xc9\x12\xb01\xa8\x1e\xdb\xea+\xfd\x8d\xe7\xdc\x90\x90\xa8\x1a\xa6%\xc2\x85d?\x15W\xc0\xb9\xfb\x01&\xbb\xce6\xe7\x96\xf2\xf5\n!\xc5\xe2\xef\xce\xff\xec\xac9\x98\xb4<\xc5|\x0e\xae', 0x0) mmap(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6d, 0xc0, 0x2, 0x5, 0x0, 0x4a73, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x404d0, 0xffffffffffffff47, 0xfff, 0x0, 0x7fff, 0x5, 0x1, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) ftruncate(r0, 0x8007999) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1471.369479][T13415] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1471.376027][T13415] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1471.383842][T13415] vhci_hcd vhci_hcd.0: Device attached [ 1471.404299][T13416] vhci_hcd: connection closed [ 1471.420115][T18807] vhci_hcd: stop threads [ 1471.424515][T18807] vhci_hcd: release socket [ 1471.429140][T18807] vhci_hcd: disconnect device 11:03:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x374, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = syz_io_uring_setup(0x550, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r5 = openat(r4, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r5, &(0x7f0000004200)='t', 0xfff4) syz_io_uring_setup(0x3260, &(0x7f0000000180)={0x0, 0x7376, 0x8, 0x1, 0x1d4, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) writev(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) open(0x0, 0x0, 0x0) gettid() io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) [ 1471.480899][ T5874] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1471.604479][T13388] vxcan1 speed is unknown, defaulting to 1000 11:03:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) r3 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000001440)="4ebfa00a157b34efbd9982793d5d97aec4144c5ea537ccdf0c2e4318f6f325db77a768d39d142aca85c12a3a0e2950c9997b47843bb59ff7c2191c83d3738351e93196b1a15a5a157b9cfc40848f3995eceb6f70a8d58b914249abd5e8f257197aa02284a60f2d92670d714b2d6ac26c64cd83ac9c3d28d97c466f5b6b5d8a4be13a5dd71fcd9a785d19132e637755593c86d99784f061cf8925ce261d6e1a6a35dfa4d4f18e15b7761d365e379eed1876102f405767f2c55a46", 0xba, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "52e13e82a4cccc402d57e12f0652638b1de89d0c74669c95f0b93537c6d7fa80fb1690b8f535ac48fe2ba0dae1b1d9959099b5d56788cf09e506c8d6ffc499b2", 0x13}, 0x48, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r5], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1472.951005][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 1473.193294][T13447] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1473.199845][T13447] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1473.207537][T13447] vhci_hcd vhci_hcd.0: Device attached [ 1473.263208][T13460] vhci_hcd: connection closed [ 1473.264045][T18957] vhci_hcd: stop threads [ 1473.273435][T18957] vhci_hcd: release socket [ 1473.277901][T18957] vhci_hcd: disconnect device [ 1473.431502][ T5874] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 1473.440922][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.448917][ T5874] usb 3-1: Product: syz [ 1473.453165][ T5874] usb 3-1: Manufacturer: syz [ 1473.457763][ T5874] usb 3-1: SerialNumber: syz [ 1473.528231][ T5874] usb 3-1: config 0 descriptor?? 11:03:12 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x477da178}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x3b0a9000) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000002c0)='-@\x00'], &(0x7f0000000980)=[&(0x7f0000000480)='-@\x00', &(0x7f0000000840)='*+$\x00', &(0x7f0000000880)='/\x00', &(0x7f00000008c0)='syztnl1\x00', &(0x7f0000000900)='}{+%\xe1\x00', &(0x7f0000000300)='\x00^\xff\x93\x9dRQe\x88,\xca\x17!/\x9c%\x9c9)\nv\x91\xca\x9d\x99!\x03\x8e\f\xb8\xe7|\x96%\'9\xb7\x19\xe7\xeaJ2\x99\xce\xb6[O\xee\xb6\x7f\x8c\\ \xd5\xc1\xb1\xf8I@\xa3~v\x1e\xd6\xa8M{\x1d\x04)O\xd9\x99%\xfd\\\x8ft\x1dZRv*O']) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r3, 0x0, 0x0, 0x26048f38, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e23, @remote}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x141) clone(0x55100980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="070000010000000900000000401700400067000002049078860dca5d45012c0325a9e0000002ac1414aa4420adf08000000500000001000000ac19159d99a158ebed7ddfca518b0c00070012"]}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@empty, @private=0xa010101}, 0xc) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000003c0)) rt_sigqueueinfo(r0, 0x9, &(0x7f00000001c0)={0x36, 0x1ff, 0x1}) 11:03:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r6 = syz_usbip_server_init(0x4) sendfile(r6, r5, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r5, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x559, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4c3e9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x18cc9}, 0x0) syz_open_dev$vcsa(0x0, 0x6, 0x0) socket(0x0, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 11:03:12 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x9, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x7, 0xff, 0x4, 0x0, 0x7f, 0x20180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x86}, 0x4010, 0x9, 0x3, 0x4bed9606c63db1d8, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getpid() socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000018c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b\x198_\xce8!\x12\xbc\xd1}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14\x8c\xa2\x16\xdd[\xb0,q\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6d\x854>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xf6\x19\xe2\x92 \x99\fbqPg\x94\xd5\x18\xfe\x0e\x8f \x01~\x93\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\xa9\xe1\xcc\xe7m\x80\'\xf0\xa5\xed*\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x00\x00\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3\x91\x00\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x98Av\xa5\xb7oc\x99\xba\x97\xaa\x10\xcd\x11\x17\xc3p(\xa9#K(4\xd4\xf0\xe7\x9a\xd9i\xbfZj\xfa\x1fK\xbb\xee \xbb\xbe\x04\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\x14f%\x82\x82\x0f#\x12{c\xdf]QG`zV\xd7\x0f\xaej\xf1\x8b\x10+\xc1\xc6\xff7\x83Ye\xb3\x8b\xdb\xb8\x11\xe1\xef\x9c\v\xe6\xbci\xc9J\b\x93H/\x96\xc5\xb5\xc2TkWO\xd3\xe1\x0e\xe3\xd4\xaa/R\x87\x1f\x8e\x0f\x81j\xb3\x1e\xd6\xb5\x8f\x95\n\xc6Y\xd4\x86\xf8\xc8\x7f\xdc0\a3') ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000780)={{}, 0x0, 0x2, @unused=[0x0, 0x0, 0x6], @devid}) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x7) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000004c0)) socket(0x1, 0x1, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:03:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x80000) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x4, 0xbe0}, {0x1b4, 0xeee0}, {0x2, 0x2}, {0x5, 0x1}, {0x6, 0x6}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2697}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000718000002004900da002001000000f520000000080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000152c000000cdff00000001020014bb000001000000002300000000030005000020000002"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) pipe(0x0) r3 = syz_io_uring_complete(0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x8000) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x4f, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x40003, 0x0) [ 1473.550807][ T5874] usb 3-1: can't set config #0, error -71 [ 1473.561939][ T5874] usb 3-1: USB disconnect, device number 45 11:03:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x80000) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x4, 0xbe0}, {0x1b4, 0xeee0}, {0x2, 0x2}, {0x5, 0x1}, {0x6, 0x6}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2697}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000718000002004900da002001000000f520000000080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000152c000000cdff00000001020014bb000001000000002300000000030005000020000002"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) pipe(0x0) r3 = syz_io_uring_complete(0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x8000) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x4f, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x40003, 0x0) 11:03:12 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) r3 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000001440)="4ebfa00a157b34efbd9982793d5d97aec4144c5ea537ccdf0c2e4318f6f325db77a768d39d142aca85c12a3a0e2950c9997b47843bb59ff7c2191c83d3738351e93196b1a15a5a157b9cfc40848f3995eceb6f70a8d58b914249abd5e8f257197aa02284a60f2d92670d714b2d6ac26c64cd83ac9c3d28d97c466f5b6b5d8a4be13a5dd71fcd9a785d19132e637755593c86d99784f061cf8925ce261d6e1a6a35dfa4d4f18e15b7761d365e379eed1876102f405767f2c55a46", 0xba, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "52e13e82a4cccc402d57e12f0652638b1de89d0c74669c95f0b93537c6d7fa80fb1690b8f535ac48fe2ba0dae1b1d9959099b5d56788cf09e506c8d6ffc499b2", 0x13}, 0x48, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r5], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1473.921847][T13489] device macvtap1 entered promiscuous mode [ 1473.928634][T13489] device vlan0 entered promiscuous mode [ 1474.301506][T13489] device vlan0 left promiscuous mode [ 1474.366874][T13511] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1474.373435][T13511] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1474.381191][T13511] vhci_hcd vhci_hcd.0: Device attached 11:03:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r2, &(0x7f0000004200)='t', 0xfff4) vmsplice(r2, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7", 0x9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 1474.609217][T13504] vxcan1 speed is unknown, defaulting to 1000 11:03:13 executing program 3: perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x9, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x7, 0xff, 0x4, 0x0, 0x7f, 0x20180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x86}, 0x4010, 0x9, 0x3, 0x4bed9606c63db1d8, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getpid() socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000018c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b\x198_\xce8!\x12\xbc\xd1}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14\x8c\xa2\x16\xdd[\xb0,q\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6d\x854>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xf6\x19\xe2\x92 \x99\fbqPg\x94\xd5\x18\xfe\x0e\x8f \x01~\x93\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\xa9\xe1\xcc\xe7m\x80\'\xf0\xa5\xed*\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x00\x00\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3\x91\x00\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x98Av\xa5\xb7oc\x99\xba\x97\xaa\x10\xcd\x11\x17\xc3p(\xa9#K(4\xd4\xf0\xe7\x9a\xd9i\xbfZj\xfa\x1fK\xbb\xee \xbb\xbe\x04\x9e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfe\x14f%\x82\x82\x0f#\x12{c\xdf]QG`zV\xd7\x0f\xaej\xf1\x8b\x10+\xc1\xc6\xff7\x83Ye\xb3\x8b\xdb\xb8\x11\xe1\xef\x9c\v\xe6\xbci\xc9J\b\x93H/\x96\xc5\xb5\xc2TkWO\xd3\xe1\x0e\xe3\xd4\xaa/R\x87\x1f\x8e\x0f\x81j\xb3\x1e\xd6\xb5\x8f\x95\n\xc6Y\xd4\x86\xf8\xc8\x7f\xdc0\a3') ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x6, 0x8, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000780)={{}, 0x0, 0x2, @unused=[0x0, 0x0, 0x6], @devid}) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x7) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000004c0)) socket(0x1, 0x1, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 1474.702386][T13512] vhci_hcd: connection closed [ 1474.703228][T18807] vhci_hcd: stop threads [ 1474.712417][T18807] vhci_hcd: release socket [ 1474.716854][T18807] vhci_hcd: disconnect device [ 1474.792166][T13524] loop2: detected capacity change from 0 to 16 11:03:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3ff}]}, 0x34}, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) signalfd4(0xffffffffffffffff, &(0x7f0000008800)={[0x80000001]}, 0x8, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x40b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002004}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@getchain={0x3c, 0x66, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x1, 0xa}, {0x3, 0x9}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x8de}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'veth0_to_batadv\x00', &(0x7f0000000400)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) setuid(r3) fchown(0xffffffffffffffff, 0xee01, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000004280)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/140, 0x8c}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/249, 0xf9}], 0x8, &(0x7f0000000a80)=ANY=[], 0x90}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 1475.140933][ T5874] vhci_hcd: vhci_device speed not set [ 1475.288726][T13532] device macvtap1 entered promiscuous mode [ 1475.294796][T13532] device vlan0 entered promiscuous mode [ 1475.381300][T13532] device vlan0 left promiscuous mode 11:03:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='\x15\xf7^\xf9\x12\x0f\xbd+\xa7\xce\xfa%\x98\xc6\x1e\x1e\xf8\x0213\xce\x89x\xb6\x9b\xfbp\x9f\xd5\x9d\b\xb7\x1b\xcc\x91\xc9\x12\xb01\xa8\x1e\xdb\xea+\xfd\x8d\xe7\xdc\x90\x90\xa8\x1a\xa6%\xc2\x85d?\x15W\xc0\xb9\xfb\x01&\xbb\xce6\xe7\x96\xf2\xf5\n!\xc5\xe2\xef\xce\xff\xec\xac9\x98\xb4<\xc5|\x0e\xae', 0x0) mmap(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6d, 0xc0, 0x2, 0x5, 0x0, 0x4a73, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x404d0, 0xffffffffffffff47, 0xfff, 0x0, 0x7fff, 0x5, 0x1, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) ftruncate(r0, 0x8007999) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 11:03:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000001440)="4ebfa00a157b34efbd9982793d5d97aec4144c5ea537ccdf0c2e4318f6f325db77a768d39d142aca85c12a3a0e2950c9997b47843bb59ff7c2191c83d3738351e93196b1a15a5a157b9cfc40848f3995eceb6f70a8d58b914249abd5e8f257197aa02284a60f2d92670d714b2d6ac26c64cd83ac9c3d28d97c466f5b6b5d8a4be13a5dd71fcd9a785d19132e637755593c86d99784f061cf8925ce261d6e1a6a35dfa4d4f18e15b7761d365e379eed1876102f405767f2c55a46", 0xba, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1475.749378][T13541] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1475.893117][T13558] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1475.899665][T13558] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1475.907456][T13558] vhci_hcd vhci_hcd.0: Device attached 11:03:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r6 = syz_usbip_server_init(0x4) sendfile(r6, r5, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r5, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x559, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x4c3e9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x18cc9}, 0x0) syz_open_dev$vcsa(0x0, 0x6, 0x0) socket(0x0, 0x800000003, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 1476.015379][T13561] vhci_hcd: connection closed [ 1476.024964][ T56] vhci_hcd: stop threads [ 1476.034320][ T56] vhci_hcd: release socket [ 1476.038756][ T56] vhci_hcd: disconnect device [ 1476.170811][ T5874] vhci_hcd: vhci_device speed not set [ 1476.176464][T13586] device macvtap1 entered promiscuous mode [ 1476.182833][T13586] device vlan0 entered promiscuous mode [ 1476.245090][T13586] device vlan0 left promiscuous mode [ 1478.484000][T18809] device hsr_slave_0 left promiscuous mode [ 1478.493101][T18809] device hsr_slave_1 left promiscuous mode [ 1478.501871][T18809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.511359][T18809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.709097][T18809] team0 (unregistering): Port device team_slave_1 removed [ 1478.727107][T18809] team0 (unregistering): Port device team_slave_0 removed [ 1478.744420][T18809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.757916][T18809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.839125][T18809] bond0 (unregistering): Released all slaves [ 1483.997876][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.004305][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 11:03:26 executing program 0: prctl$PR_GET_PDEATHSIG(0x2, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x477da178}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x3b0a9000) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000002c0)='-@\x00'], &(0x7f0000000980)=[&(0x7f0000000480)='-@\x00', &(0x7f0000000840)='*+$\x00', &(0x7f0000000880)='/\x00', &(0x7f00000008c0)='syztnl1\x00', &(0x7f0000000900)='}{+%\xe1\x00', &(0x7f0000000300)='\x00^\xff\x93\x9dRQe\x88,\xca\x17!/\x9c%\x9c9)\nv\x91\xca\x9d\x99!\x03\x8e\f\xb8\xe7|\x96%\'9\xb7\x19\xe7\xeaJ2\x99\xce\xb6[O\xee\xb6\x7f\x8c\\ \xd5\xc1\xb1\xf8I@\xa3~v\x1e\xd6\xa8M{\x1d\x04)O\xd9\x99%\xfd\\\x8ft\x1dZRv*O']) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r3, 0x0, 0x0, 0x26048f38, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e23, @remote}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x141) clone(0x55100980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="070000010000000900000000401700400067000002049078860dca5d45012c0325a9e0000002ac1414aa4420adf08000000500000001000000ac19159d99a158ebed7ddfca518b0c00070012"]}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000003c0)={@empty, @private=0xa010101}, 0xc) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) io_submit(0x0, 0x6, &(0x7f00000003c0)) rt_sigqueueinfo(r0, 0x9, &(0x7f00000001c0)={0x36, 0x1ff, 0x1}) 11:03:26 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="5b3a34233f927e1256643a"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 11:03:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3ff}]}, 0x34}, 0x3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) signalfd4(0xffffffffffffffff, &(0x7f0000008800)={[0x80000001]}, 0x8, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x40b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002004}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@getchain={0x3c, 0x66, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x1, 0xa}, {0x3, 0x9}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x8de}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'veth0_to_batadv\x00', &(0x7f0000000400)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) setuid(r3) fchown(0xffffffffffffffff, 0xee01, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000004280)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/123, 0x7b}, {&(0x7f00000006c0)=""/140, 0x8c}, {&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000840)=""/63, 0x3f}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/249, 0xf9}], 0x8, &(0x7f0000000a80)=ANY=[], 0x90}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 11:03:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f0000001440)="4ebfa00a157b34efbd9982793d5d97aec4144c5ea537ccdf0c2e4318f6f325db77a768d39d142aca85c12a3a0e2950c9997b47843bb59ff7c2191c83d3738351e93196b1a15a5a157b9cfc40848f3995eceb6f70a8d58b914249abd5e8f257197aa02284a60f2d92670d714b2d6ac26c64cd83ac9c3d28d97c466f5b6b5d8a4be13a5dd71fcd9a785d19132e637755593c86d99784f061cf8925ce261d6e1a6a35dfa4d4f18e15b7761d365e379eed1876102f405767f2c55a46", 0xba, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:26 executing program 4: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000280), &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3f20, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7080, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2}, 0x0) r6 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r9}}, 0xc8) 11:03:26 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)='\x15\xf7^\xf9\x12\x0f\xbd+\xa7\xce\xfa%\x98\xc6\x1e\x1e\xf8\x0213\xce\x89x\xb6\x9b\xfbp\x9f\xd5\x9d\b\xb7\x1b\xcc\x91\xc9\x12\xb01\xa8\x1e\xdb\xea+\xfd\x8d\xe7\xdc\x90\x90\xa8\x1a\xa6%\xc2\x85d?\x15W\xc0\xb9\xfb\x01&\xbb\xce6\xe7\x96\xf2\xf5\n!\xc5\xe2\xef\xce\xff\xec\xac9\x98\xb4<\xc5|\x0e\xae', 0x0) mmap(&(0x7f000004d000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6d, 0xc0, 0x2, 0x5, 0x0, 0x4a73, 0x800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x404d0, 0xffffffffffffff47, 0xfff, 0x0, 0x7fff, 0x5, 0x1, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) ftruncate(r0, 0x8007999) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1487.894863][T13625] libceph: Failed to parse monitor IPs: -22 [ 1487.913959][T13624] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1487.920508][T13624] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1487.928104][T13624] vhci_hcd vhci_hcd.0: Device attached [ 1488.045920][T13626] vhci_hcd: connection closed [ 1488.048037][T18771] vhci_hcd: stop threads [ 1488.057171][T18771] vhci_hcd: release socket [ 1488.061660][T18771] vhci_hcd: disconnect device 11:03:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0xf8b000) [ 1488.475824][T13634] vxcan1 speed is unknown, defaulting to 1000 11:03:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}}, 0x0, 0x0, 0x33, 0x0, "5e07cf1afd70ce97f5b61bb55b628b81c9b9dd51d0616455fa835df7e6c678b85d20f0b58bab6b5b627623a001290e98c581c5465f0f6740df470567ec34d69d3b1c39eb2465b8f14fc6a2e9e0124a68"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000180)=0xbce7, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 11:03:27 executing program 4: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000280), &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3f20, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7080, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2}, 0x0) r6 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r9}}, 0xc8) 11:03:27 executing program 2: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x86, &(0x7f0000000280), &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x6, 0x0, r3, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x3f20, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7080, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2}, 0x0) r6 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r9}}, 0xc8) 11:03:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:27 executing program 3: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="0b010802220001000000000904000001031900000905000000000000000705884f6600"/50], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x9, {0x9, 0x8, "ca83d3d52e3c78"}}, &(0x7f0000000040)={0x0, 0x3, 0x76, @string={0x76, 0x3, "951b32f6dac7a5822739aa0c082d22b2d730e26b96d9324148d1bad3471b531e9baa1c524a4c1798b701b62908ebb06df27105445b5fff0b74af8d8a23d9f8fb3bf90d393e8558cd146321ca1d3ca893afafc55f144216c76a89d547fff9cfe5445319b66ead4116b61b543225e0c9b64c7e0bb0"}}, &(0x7f00000001c0)={0x0, 0xf, 0xcf, {0x5, 0xf, 0xcf, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x9, 0x0, 0x1, 0x1f}, @generic={0xbf, 0x10, 0xb, "06446c7ec0ceb03088253d5a2255303bbe0bfa8a2c1c9a32505621f6d6ed693e83d3636718cfdecad17af2452b6a17dac4b97de49d6c1171abb1a5a38100ba3f78ceb15211e497cefe67aaa487f5b4d0c98644ab0d4720250a54aa2f3d1fb524a0731391c0cc1f2e57e5b357cf5f7b7ba5531a54121f27ffaa016e95eeffba4d12d6b9217b04d8346d2076897a8d466c3a8ad0bf0e1c58da0ee2b67291019fad70596f657d0f29e15822e5b8e9526247ea7bb80c18aa82093ffe6dd3"}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb6, 0x0, 0x7, 0x0, "599c1684", "50d30a37"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0xfd, 0x9e, 0x0, 0x7ff, 0x5}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x20, 0xb, 0x85, "550a0f67a0e0fa989bef07aa5694e68420c627d2fd56568ffeb9ddc74eb99028e646e8f8c7248b9dd31c2c9a8e8eacc729fb466bba82225df7e2e184bf489840ac267a04443f761aee28560fc6084e63b104e29fee5cd4ebf39b371add4a131ffe2effc5c0c343d89c32ac8a7a073bb6ce4ce5dbd17ee4ba676d8f76da42a8f87c5d17cf45"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x160, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000500)={0x40, 0xb, 0x2, "f6ff"}, &(0x7f0000000540)={0x40, 0xf, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="0083212100a3"}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "def5"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x25}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x30}}) 11:03:28 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r3, 0xb5644000) accept4$rose(r2, &(0x7f0000000240)=@short={0xb, @dev, @remote, 0x1, @null}, &(0x7f0000000340)=0x1c, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000200)=0x80000000, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="a7b5f08ffaffffffffffffffb175671fa5529f1f60c2fa2e6af1008d95edc8d2b6dda8068f782a49109e63ed327d08d1a93acdfbeb2528383995d4b2e9e48f2bcee92b6fd217e2d3dfe2ee3968c68699380213eb804353cfc4558f345cfb91177a36aae212b2650d9e876bbfa19960eadbf62454b5cb34425645ee1e3b916c37e90f85057ad27b43ba7813e2b02686e8101fbfcddd5543165c00cab86e33db86451d487a30a133a5dac071f184e3d36bb6704d52cd8fc2bda579473715160bc25aa315a9c8e075c965b74d7f14af905c3ac32d60f3fe662963", 0xd9, 0x800, &(0x7f0000000100)={0xa, 0x4e24, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @private0}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000280)=0x8) [ 1489.301350][T13688] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1489.307907][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1489.315631][T13688] vhci_hcd vhci_hcd.0: Device attached 11:03:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) [ 1489.425030][T13689] vhci_hcd: connection closed [ 1489.426588][T18776] vhci_hcd: stop threads [ 1489.435842][T18776] vhci_hcd: release socket [ 1489.440354][T18776] vhci_hcd: disconnect device 11:03:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r3 = openat(r2, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r3, &(0x7f0000004200)='t', 0xfff4) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x6) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 11:03:28 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) setxattr$incfs_id(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340), &(0x7f0000000380)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) fstat(0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x100010, &(0x7f0000000780)=ANY=[@ANYBLOB="66643d6a6e0b3db927befd0000bb50de3fd174eed1b586bea56804629336856aff3d7706b5d4b46baa87343cbabd", @ANYRESHEX=r2, @ANYBLOB="ab9b7759172d8653d8c1fc5adb297311ac95cb36bbf34d43cc7421f0ae2f92b1afa70db0dc02bb16710538f45f0010000000000000c4ca1d38e6e0", @ANYRESDEC, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030332c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6f626a5f757365723d255b2c275e9c2c61707072616973652c66736d616769633d3078303030303030303030303030303030302c646f6e745f61707072616973652c736d61636b66736465663d21"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{}, {0x8}]}, 0x14, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) syz_io_uring_setup(0x5bf3, &(0x7f0000000140)={0x0, 0xe200, 0x8, 0x3, 0x3d1, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 1489.941061][T13706] block nbd2: server does not support multiple connections per device. 11:03:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1490.006639][T13702] block nbd2: shutting down sockets [ 1490.150126][ T6574] block nbd2: Receive control failed (result -22) [ 1490.181267][T13708] block nbd2: shutting down sockets [ 1490.356355][T13717] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1490.362912][T13717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1490.371007][T13717] vhci_hcd vhci_hcd.0: Device attached [ 1490.489473][T13718] vhci_hcd: connection closed [ 1490.489936][T18807] vhci_hcd: stop threads [ 1490.498879][T18807] vhci_hcd: release socket [ 1490.503543][T18807] vhci_hcd: disconnect device [ 1490.579596][T27894] vhci_hcd: vhci_device speed not set 11:03:29 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r2 = dup3(r1, r0, 0x0) io_setup(0x3f, &(0x7f00000000c0)=0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xe9, r2, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x1}]) 11:03:29 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400148a", @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="06003600290000000600360011000000060036002e0000000600360012000000060036003c000000"], 0x44}}, 0x488d0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900020005000100a85b7600800000000010e4070913122c171333010100000000000000000000001800000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000600000002000000500150010102", 0x86, 0x10000}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:29 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x30, {0x30, 0x22, "5215f76193adc76129c5096e6c45e37b9e0e4c3ee55787996e812ceb0a0481ddf663875e5d7f021dfe6ed8837317"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x8, 0x7, 0x80, "27f363db", "fda457fc"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xff, 0x7f, 0x7f, 0x2e1, 0x3}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x16, 0xf6, "662ad16161a77954106267aeec727e77d129805949a9c0583134e097935fb7db3b4c1e63df88a690af04c5d47d55c7e4de13b7d69930c47b25cebbbb6abebb913f8f79e324145efe4285d0820ea80851a2c50855bfd77b647e67b93a19f6633b90cdfef75b5d5e2f7328398cb31a9a0f16c304b2ce34a7cda30e62975c8b123bb34451e901307f772d1686fa610c6bb8bd88697efa87e3f3e2597e636cbf2df54072acb7cc48dafbc8ee39b1677b4eee8769ef01e72b2d179387b783ffccbd931047323dee8aa7bdfc44d3b90f7470b764c864a26a5f2f4739d104dd1a7e1369d28bf14eb5a87570adef229a8aa58f1820e44253ac05"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3f}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x40, 0x20, [0xff00]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x81}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "09a4"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="e5c9759e7555"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "116f"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x60}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x89}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000840)={0x20, 0x23, 0x10, {0x10, 0x23, "f8b7a936c7ca9bcf4bbf5da1a923"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f00000008c0)={0x0, 0xf, 0xe4, {0x5, 0xf, 0xe4, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "a7ceab555a1c73ca5117a3fb1cc9aa13"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x3, 0xf00f, 0x6, [0xff0000, 0xff00f0, 0x3fc0]}, @generic={0xb0, 0x10, 0x2, "b1dba6166e590a988188b549cfc8627bfb95f406d584d478c1f3a0ee75f80011c56faac93ba725864d4eb3de849049e9770c02ab92a5d60403e662a548d01e59bb2170cecf4f2d01c41b24a6b41c1cba02f381bd03693a57fb1add599d5ac726b833f9f6b0a3a28f3bdfc4b0711676ea3a941b6b29da6cd1d4c9e3e0b3378b4d28a0c1ad6f92e65727182d5fc3aac4e1be82c96a2693cb9366c09c6d1f3b3c79b8d672a321ee8465f668fb8161"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x1, 0x0, '|xH1', "a7f01f00"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x0, 0x6, 0x81, 0x5, 0x3, 0xe2}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a80)={0x20, 0x9, 0x73, "530d58a504c426616877bba330b0a764a97fa03dd56f125c07cb0c36340b0a65bd394d381a2c52cf35aec905efe0eebe320e3216d503f7284f32806b8301b192c4b28a1958afec6afb57bff1d180bf93b61d28041c721590b0e9b08bbba5edb8a1512d89a0ed100e4b575a17d7b929fbeb5fe3"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x0, 0x4, [0xff00]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000c80)={0x40, 0xb, 0x2, '\'\\'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "ff8f"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xb980}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x8}}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "02000000ee57a42807fac71fe2bbc4b6da3ba4819068747f57bffe0f7c615428"}) 11:03:29 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) chdir(0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) setxattr$incfs_id(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340), &(0x7f0000000380)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) fstat(0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) sendfile(r1, r2, 0x0, 0x401ffc000) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x100010, &(0x7f0000000780)=ANY=[@ANYBLOB="66643d6a6e0b3db927befd0000bb50de3fd174eed1b586bea56804629336856aff3d7706b5d4b46baa87343cbabd", @ANYRESHEX=r2, @ANYBLOB="ab9b7759172d8653d8c1fc5adb297311ac95cb36bbf34d43cc7421f0ae2f92b1afa70db0dc02bb16710538f45f0010000000000000c4ca1d38e6e0", @ANYRESDEC, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030332c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6f626a5f757365723d255b2c275e9c2c61707072616973652c66736d616769633d3078303030303030303030303030303030302c646f6e745f61707072616973652c736d61636b66736465663d21"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{}, {0x8}]}, 0x14, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) syz_io_uring_setup(0x5bf3, &(0x7f0000000140)={0x0, 0xe200, 0x8, 0x3, 0x3d1, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 11:03:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() socket$inet6(0xa, 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1490.731215][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1490.825769][T13739] new mount options do not match the existing superblock, will be ignored [ 1490.837114][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:29 executing program 4: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000800142603600e1208000b0000000401a800160008000200e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r2, &(0x7f0000004200)='t', 0xfff4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x20, 0x5, 0x0, 0x0, 0x3, 0x42224, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x2610, 0xff, 0x3, 0x6, 0x3, 0x1, 0xfc01, 0x0, 0x0, 0x0, 0x4cd1}, 0x0, 0x6, r2, 0xa) [ 1490.908521][T13739] new mount options do not match the existing superblock, will be ignored 11:03:29 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "04347f7738f15c09e3cd55a8932f1477831e9838ae8ef3ab631365ffdeb38da3a9908380fd821829655d64e7f6a8584ab6317f14cf0288ef2fdf7f7ad0edbf1fd309ba19d361052f506ed7ef0e0fba0aa9926d5a94bfc64319801bba2110465ee6453b7996ce7220d161b91f0f844fe819f68761b42da65a4c75c75aa62bbe64d5a2373cf71a95a58f1e06d5641e0c3a45d5ffcc58b9565a8978be09519fc4bb71670a04189f39c1e1f00a563efd0da19a9f2a7f0c574a3fe10c7ee88fc170c57e0da06230fb256dd22f9d3eef94bc6cbf93f0434a4b120a0fbad51126a2267865cd7a7c3e06028b5051feca6a0977e656f8529ad72480ad92adadc0c6caa6078353d6cb00bab01f6e40a5ac9ef8818924dd9facf62acbecfa8100a1c6e752dae3f75292168f7373624bd18104db251478b7e4e5a6413a127f9926338723b3b95aa3f4cf8308c4f3113152f0decf3a4f1bf8d69c5630cbb89d9e5fb2c1e4f67a9bbeb2242029748cafa69f9abc48fb685944eb55f112ee55fb1e6f092f47898577fb377168240dbf5b68ab7f6949c5e39bafd4e428a910d2e38f3d9c920fca2021dc4ab909ec4bee9311ad84823741d23e6ae73205ff198e67620f9feeb1b74f6801004d05d27f7c144e99175a3e4806a9d29277fe9774e3555c69118731bca38bd2b7c14798c570888009b7905a12d92da61478b12c93cbb708a11f5a20555ea77405a567940e5bc14a3b4676895d2c32930e79dec6155fc02186f513b2e2ba70b95ee1377400d0b581543893f123f5705322821d3af5610ebd2be5f8284a5accfe10581a45a10965efb3b6abd3c3f7c655369278376afd38f97fa4c6910a3f839b6f0f8eb339af85f246f2e2d55b799834f660b313d4d89f15a67d4d4aeca5f8dcc4e8d70a3bf6100674f0143c9edbe37b6c286998ed55c9a7462ed96140bb774cac4d1973b38e2ac21e8730646faecbcf95c895271779e47e017720ebf020821e233e99d146ef62b47aab2dbbf1dca9404318a31da9e10e8a92943c04025c32cd2f936c01798a9e107b9df24ee947895b575415834137aa2d17ebed75bcc15fe01d68c1effdd2f312fcb2d3ef684033cb07e64edb39d2f63f750333e78f5d5f768acf1ea1cd60fda82d497e0f8b8b927adbb96a89c3ead0618920c645b20d8896ef700fa0531e99e77d9af233b712af7a2752db474b9d21364c2956d93edda51d9d481b2f1c234766395aa0343185940cd934b03e70ebc60df0268736237196aa59735f645cdcc16b2a111cbaecd9928d896541ece4acc5940e38e4256ef1cbc14ba7778591c3f21fd811e676ff9f6e4030a2c7b53165b34aec9213f00b0e4988179130ef6b02ced690efcd1b095f29b266adc410cd7d61cbd9886b88239d5b128a08fb3ecd7dc53733a266e88e40f8c4dcf9b48dde00"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400148a", @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="06003600290000000600360011000000060036002e0000000600360012000000060036003c000000"], 0x44}}, 0x488d0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900020005000100a85b7600800000000010e4070913122c171333010100000000000000000000001800000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000600000002000000500150010102", 0x86, 0x10000}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}], 0x0, &(0x7f0000000040)=ANY=[]) 11:03:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r2 = syz_usbip_server_init(0x4) sendfile(r2, r1, &(0x7f0000000080)=0xfff, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r4], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100ffff0000", @ANYRES32=0x0, @ANYBLOB="9580000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x48800) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0x0, 0xfff, 0x8}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004001) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000003c0)="a4d46301d88453755405b2697167fd8fd4aabcac31d2177143df3ae25b98fc9b974938fc4dcc2d8898fe6abcc1abc2285bf19de217b2d5508bd878343909b5efe4c9a48368a9201a0de4f9dde457400465daaaf0ffd0e95360c4eba6d7b34297310621e811264312d5ecdc41d13bbfc400fbae321d0786610fd869ae7b89f56acaeff77acf7d3a46d4c8689d1f3a56e567d1d4290c59ace98e824043196a02eba6b93ed8ca", 0xa5, 0x3}, {&(0x7f0000000540)="3a675832c7051c97064d0d0a97c334be02ca8b6dfc3da321d463f5663cf2a47d7d01d015143e9813cdfc78cdd1e56ea02471b525d35842afccae6fbbbf990d2afcc3df9576ad7ea9f0d98f79bfb027090abde93ec93e67b5b35056d1e5383e6eec923007b72b3e92aaabe3118a968f", 0x6f, 0x7}], 0x120c020, &(0x7f00000005c0)={[{@fat=@check_normal}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_winnt}, {@utf8}], [{@subj_user={'subj_user', 0x3d, '#\xf9\xe2\xeb\xd6n\xa7p\xf9\x93\xb9>\xfa\xdc\'\x16\xa1i\xebR\xa1!\x8f\rN\xb69\"*\b\x81D74\xbd\t\x00\x00\x00k\xbf8A\b\xedv,\x1d\xa2\xf9\xa7\xbeq\x15&\x8c\xf6\xf9\xa6\xca\x80\xfaf\x99\x9f\xcal\x89\f?\xcb\xe6\x97w\xbe\x80\x1f\xbeO\xb7\x0f\xed_J\x91k\xa8\x95\xf9\xcf\x9bD\xd7\xc8\xb4K\x8b\x0e\xf5\xa3\xb8\'\xf3\x93\xa2\xb6\xfd\xc56\x88\\\x11}\xa2\xa0\xe4X\n\x1e\x8cw\x8c\xb1\xf9\x1e% e\x1e\xdf\n\x90cZ\t\x8f\x01\x8a\x1eF\x87\x95^\xea\n\x114\xd9\x9d\xd2`\x03\xfe\xb2\xa5\x0f!\x87\x96\xcf\x88\x99\xe7V\x8a)Dp~o\x8d\x97IE\xd3\t \x9e&aG\x1a\x0e\x86\xe0\x9d\x9cC\xad\x16\xde\xe9\xc4\xff\xdf\x9dw\x9b[he'}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)) ftruncate(0xffffffffffffffff, 0x7f) [ 1491.107905][T13749] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 1491.212075][T13752] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 1491.298812][T13758] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1491.305368][T13758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1491.313088][T13758] vhci_hcd vhci_hcd.0: Device attached [ 1491.334703][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:30 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x84c, 0x2, [@TCA_TCINDEX_POLICE={0x848, 0x6, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1e8}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}]}]}}]}, 0x87c}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001940)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x64, 0x68, 0x300, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x12}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) [ 1491.529428][T13761] vhci_hcd: connection closed [ 1491.531640][T18769] vhci_hcd: stop threads [ 1491.540673][T18769] vhci_hcd: release socket [ 1491.545131][T18769] vhci_hcd: disconnect device [ 1491.577027][T27894] vhci_hcd: vhci_device speed not set 11:03:30 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400148a", @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="06003600290000000600360011000000060036002e0000000600360012000000060036003c000000"], 0x44}}, 0x488d0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900020005000100a85b7600800000000010e4070913122c171333010100000000000000000000001800000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000600000002000000500150010102", 0x86, 0x10000}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1491.710942][T13784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1491.928638][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4001, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) mkdir(&(0x7f0000000f00)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0xd, r2, 0x1, 0x2, 0x6, @multicast}, 0x14) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000d280)=[{{&(0x7f000000ac00), 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f000000b040)=[{&(0x7f000000adc0)=""/28, 0x1c}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f000000b0c0)}}, {{&(0x7f000000b140)=@abs, 0x6e, &(0x7f000000b640)=[{0x0}, {0x0}, {0x0}, {&(0x7f000000b580)=""/153, 0x99}], 0x4, &(0x7f000000b6c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{&(0x7f000000b800), 0x6e, 0x0, 0x0, &(0x7f000000cc00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2000000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000b66bdd26", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000000200", @ANYRES32=0x0, @ANYBLOB], 0xa8}}], 0x4, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040001000000000008000200", @ANYRES32=0xee00, @ANYBLOB="087877d6a341075b14000100", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="10000100000000002000000000000000"], 0x4c, 0x2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') openat$cgroup_subtree(r3, &(0x7f0000000280), 0x2, 0x0) 11:03:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_usbip_server_init(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1492.136495][T13784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:30 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400148a", @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="06003600290000000600360011000000060036002e0000000600360012000000060036003c000000"], 0x44}}, 0x488d0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900020005000100a85b7600800000000010e4070913122c171333010100000000000000000000001800000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000600000002000000500150010102", 0x86, 0x10000}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1492.362774][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1492.405076][T13822] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1492.411628][T13822] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1492.419840][T13822] vhci_hcd vhci_hcd.0: Device attached [ 1492.444960][T13823] vhci_hcd: connection closed [ 1492.445415][T18769] vhci_hcd: stop threads [ 1492.454516][T18769] vhci_hcd: release socket [ 1492.458958][T18769] vhci_hcd: disconnect device 11:03:32 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6900) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x46889000) ftruncate(r1, 0x800) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 11:03:32 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x84c, 0x2, [@TCA_TCINDEX_POLICE={0x848, 0x6, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1e8}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}]}]}}]}, 0x87c}}, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ftruncate(0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x1200, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001940)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000000)={0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x64, 0x68, 0x300, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x12}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) 11:03:32 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "63aa50e854edeb2f0627c97dce4d39dac6e66a55b296914ef9022232288d5689d3f31f648e4042aa160759dae421645b49ca94a0a4a277006b623390799319c50036c724830d70d71ce5c642ae25e38e86fe05c74487ae22c6aa2d85ca7043231964c1b2cd84c9d6d4f1ba510d5ebd94ba20923d3efd574fe6d902ed4f59a8ee4d440345b217fe3ac6603baaa9eaa2b2adf1036517de7febe75efdbab49af0f2be41e1e56cc13217a1301baf65cfbb04359dd139a15482196e61f9657871a0f5003c7046147d19828b2b0d1dd5f96ce5f2c4208806d9818c2559043fb34300e8be7772800150ed7887d984e0a9452d791a86dfe3e4c9faf8ccd13d14d94fd22df5b5f884dec3db18a7b824c613b452765a2e42ae5fdce168fd6148f220ac4113b778bc98e291c53dc9c7558370d7f2379ad6f5de067f66171b1828dbb751c4cdebbd202955e5fe354ab8b83e398e0685b03f6515ff586f2cabda43593ea735a53fefa2c2448d10aba7d65efee32b38963405a60de780ce04b8fb924685081aa4f7555c2070c22fb14b1fd27a1a185919e56ea9ad7238aceaa6da59452978d9c64bdf664f3bb6a482516c0f20ac7919e75ba25442a19d5f07238fd721f95304fa72bf348a7dbe6d882257689fad457b8a9be8584911b2fbf0338e18807f4fc57e5f9935b17c39e4843fa2b5187d5b3199f0ef7afd5efd7e87b602aa3faf88e8e131ec4acd784437b87f16a6713a570d139ef1f0b8755fb5bffa530a1f943543f2ed1a924cb44d0c53e87242f93e17601e4b2aaac3f91eeee0b9b4e8520c0f1a3f9802bd448801b356c3d2a105d35328df9eeedb7eeb4eb96a61ff037d82f7326a2f0027ba02eb877553745811a67781fb8ca9445558d5db09aec909878c39b40c895469344d292ae50c12d67767ea64646f8bf500c2e8c29a147eb04b0d33dd5a50ac932dbbe30fc8cf6c1c076b0c0660c450a6abd6e9d96b2c7ff1d990f09d334b1d5422c66b7334f9dde0e480b7e8be1b04fd7287d40d54612544b7f95634c8ce9f2d0b6010ecc2506e38c16a2101737063ff4d8ffc25cce23c5c69b36d4df0dad1d5e6bf91141fb7d2b1100f6b8c1e7f0226eb22fa5da51a787b1fe2da4c0d4f0f3804368fe140ea0770e019001b36b70ea2992536da31acecb2f53c3eff1e95bdabab14e69775ba3d949198398834c678e5a10e82f9802701e67a54a5811e949773ba41c766602286c61731d56d8c9872af8796e45384d79b6778bee88a3974484127e71e13a4d1034d795e7e704fe27f336fb3b44146fd34ed8dc82bb850218fb54be6c01d0d53cdbce9da14b88e99b5c292852a0fbba313c65baea1b2454f6713ea38e69580418b7dd505c887d238f22b3ba395702b308b2466ed9a5bdf1477246e35b7865974349f5fcf526f1936784ca0430dfb939da9b3623944e74d52", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400148a", @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="06003600290000000600360011000000060036002e0000000600360012000000060036003c000000"], 0x44}}, 0x488d0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:03:32 executing program 2: setreuid(0xee01, 0xee00) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4880, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x97, 0x5f5, 0xe6e7}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x4000, 0x8001}, {0x3, 0x3f}, {0x7, 0x5}, {0x1f, 0x3}, {0x2d, 0xfffa}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x18040, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x1f, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)={{0x107, 0x2, 0x3, 0xf2, 0xe6, 0x2, 0x8a, 0x1000}, "e3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa21) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 11:03:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100ffff0000", @ANYRES32=0x0, @ANYBLOB="9580000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}}, 0x48800) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0x0, 0xfff, 0x8}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004001) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000003c0)="a4d46301d88453755405b2697167fd8fd4aabcac31d2177143df3ae25b98fc9b974938fc4dcc2d8898fe6abcc1abc2285bf19de217b2d5508bd878343909b5efe4c9a48368a9201a0de4f9dde457400465daaaf0ffd0e95360c4eba6d7b34297310621e811264312d5ecdc41d13bbfc400fbae321d0786610fd869ae7b89f56acaeff77acf7d3a46d4c8689d1f3a56e567d1d4290c59ace98e824043196a02eba6b93ed8ca", 0xa5, 0x3}, {&(0x7f0000000540)="3a675832c7051c97064d0d0a97c334be02ca8b6dfc3da321d463f5663cf2a47d7d01d015143e9813cdfc78cdd1e56ea02471b525d35842afccae6fbbbf990d2afcc3df9576ad7ea9f0d98f79bfb027090abde93ec93e67b5b35056d1e5383e6eec923007b72b3e92aaabe3118a968f", 0x6f, 0x7}], 0x120c020, &(0x7f00000005c0)={[{@fat=@check_normal}, {@shortname_lower}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_winnt}, {@utf8}], [{@subj_user={'subj_user', 0x3d, '#\xf9\xe2\xeb\xd6n\xa7p\xf9\x93\xb9>\xfa\xdc\'\x16\xa1i\xebR\xa1!\x8f\rN\xb69\"*\b\x81D74\xbd\t\x00\x00\x00k\xbf8A\b\xedv,\x1d\xa2\xf9\xa7\xbeq\x15&\x8c\xf6\xf9\xa6\xca\x80\xfaf\x99\x9f\xcal\x89\f?\xcb\xe6\x97w\xbe\x80\x1f\xbeO\xb7\x0f\xed_J\x91k\xa8\x95\xf9\xcf\x9bD\xd7\xc8\xb4K\x8b\x0e\xf5\xa3\xb8\'\xf3\x93\xa2\xb6\xfd\xc56\x88\\\x11}\xa2\xa0\xe4X\n\x1e\x8cw\x8c\xb1\xf9\x1e% e\x1e\xdf\n\x90cZ\t\x8f\x01\x8a\x1eF\x87\x95^\xea\n\x114\xd9\x9d\xd2`\x03\xfe\xb2\xa5\x0f!\x87\x96\xcf\x88\x99\xe7V\x8a)Dp~o\x8d\x97IE\xd3\t \x9e&aG\x1a\x0e\x86\xe0\x9d\x9cC\xad\x16\xde\xe9\xc4\xff\xdf\x9dw\x9b[he'}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)) ftruncate(0xffffffffffffffff, 0x7f) [ 1493.751231][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1493.785326][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000004280)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000002000)={r0, 0x0, 0x1}) chdir(&(0x7f0000002040)='./file0/file0/file0\x00') recvmsg$unix(r3, &(0x7f0000006800)={0x0, 0x0, &(0x7f0000006640)=[{0x0}, {&(0x7f00000053c0)=""/232, 0xe8}, {0x0}, {&(0x7f0000006580)=""/96, 0x60}, {0x0}], 0x5, &(0x7f0000006780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x30}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$KDSETLED(r4, 0x1261, 0x0) 11:03:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1493.889651][T13860] loop0: detected capacity change from 0 to 87 11:03:32 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400148a", @ANYRES16=r5, @ANYBLOB="04002abd7000fbdbdf253000000008000300", @ANYRES32=r7, @ANYBLOB="06003600290000000600360011000000060036002e0000000600360012000000060036003c000000"], 0x44}}, 0x488d0) [ 1494.102654][ T26] audit: type=1804 audit(1633950212.859:7888): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/63/bus" dev="sda1" ino=14583 res=1 errno=0 [ 1494.227390][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x7, {r0}, {0xee00}, 0x10001, 0x10000000}) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x6, 0x0, 0xffffffff, 0x81, 0x7, 0x4, 0x2, 0x5f6}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) stat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4, 0x10000) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r4, 0xffffffffffffffff, 0x1c}, 0x14) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="c4c235aa1008ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f21eb420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11:03:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r1, 0x4}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x45c}}, 0x0) 11:03:33 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) [ 1494.713691][T13860] loop0: detected capacity change from 0 to 87 [ 1494.773383][ T26] audit: type=1804 audit(1633950213.529:7889): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/63/file1/bus" dev="sda1" ino=14589 res=1 errno=0 [ 1494.839944][T13907] sch_tbf: burst 0 is lower than device syz_tun mtu (1514) ! 11:03:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:33 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) 11:03:33 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6900) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x46889000) ftruncate(r1, 0x800) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 11:03:33 executing program 1: modify_ldt$write(0x1, &(0x7f0000000040)={0x3f5, 0x1000, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x9, 0x20000800, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010100)}, {0x0, 0x0, 0x9e0}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0f", 0x10, 0x10000}, {&(0x7f0000010800)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000c6eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffff", 0x72, 0x12000}, {&(0x7f0000010a00)="2e202020202020202020201000c6eb70325132510000eb7032510300000000002e2e2020202020202020201000c6eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x65, 0x16000}], 0x0, &(0x7f0000011200)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3, 0x20000000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x80) sendfile(r3, r2, 0x0, 0xf6c1) renameat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file1\x00') 11:03:33 executing program 2: r0 = open(&(0x7f0000000280)='.\x00', 0x440, 0x12) r1 = open(&(0x7f0000002000)='./bus\x00', 0x169042, 0x114) ftruncate(r1, 0x88001) open(&(0x7f0000000180)='./bus/file0\x00', 0x212141, 0x180) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/276, @ANYRESHEX=r2, @ANYBLOB="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"], 0x14}}, 0x0) mmap(&(0x7f00003ff000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r0, 0xffffd000) openat$null(0xffffffffffffff9c, 0x0, 0x4800, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000340)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth0_to_hsr\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001c40), 0x9}, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000ffffc001) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfb, 0x1, 0x40, 0x66, 0x0, 0x5c2, 0x801, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0x740c}, 0x4000, 0x3, 0x6, 0x5, 0x1, 0x9, 0x4b5, 0x0, 0x3}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) 11:03:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1495.112992][T13923] loop0: detected capacity change from 0 to 87 [ 1495.115378][T13921] loop1: detected capacity change from 0 to 264192 11:03:33 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "04347f7738f15c09e3cd55a8932f1477831e9838ae8ef3ab631365ffdeb38da3a9908380fd821829655d64e7f6a8584ab6317f14cf0288ef2fdf7f7ad0edbf1fd309ba19d361052f506ed7ef0e0fba0aa9926d5a94bfc64319801bba2110465ee6453b7996ce7220d161b91f0f844fe819f68761b42da65a4c75c75aa62bbe64d5a2373cf71a95a58f1e06d5641e0c3a45d5ffcc58b9565a8978be09519fc4bb71670a04189f39c1e1f00a563efd0da19a9f2a7f0c574a3fe10c7ee88fc170c57e0da06230fb256dd22f9d3eef94bc6cbf93f0434a4b120a0fbad51126a2267865cd7a7c3e06028b5051feca6a0977e656f8529ad72480ad92adadc0c6caa6078353d6cb00bab01f6e40a5ac9ef8818924dd9facf62acbecfa8100a1c6e752dae3f75292168f7373624bd18104db251478b7e4e5a6413a127f9926338723b3b95aa3f4cf8308c4f3113152f0decf3a4f1bf8d69c5630cbb89d9e5fb2c1e4f67a9bbeb2242029748cafa69f9abc48fb685944eb55f112ee55fb1e6f092f47898577fb377168240dbf5b68ab7f6949c5e39bafd4e428a910d2e38f3d9c920fca2021dc4ab909ec4bee9311ad84823741d23e6ae73205ff198e67620f9feeb1b74f6801004d05d27f7c144e99175a3e4806a9d29277fe9774e3555c69118731bca38bd2b7c14798c570888009b7905a12d92da61478b12c93cbb708a11f5a20555ea77405a567940e5bc14a3b4676895d2c32930e79dec6155fc02186f513b2e2ba70b95ee1377400d0b581543893f123f5705322821d3af5610ebd2be5f8284a5accfe10581a45a10965efb3b6abd3c3f7c655369278376afd38f97fa4c6910a3f839b6f0f8eb339af85f246f2e2d55b799834f660b313d4d89f15a67d4d4aeca5f8dcc4e8d70a3bf6100674f0143c9edbe37b6c286998ed55c9a7462ed96140bb774cac4d1973b38e2ac21e8730646faecbcf95c895271779e47e017720ebf020821e233e99d146ef62b47aab2dbbf1dca9404318a31da9e10e8a92943c04025c32cd2f936c01798a9e107b9df24ee947895b575415834137aa2d17ebed75bcc15fe01d68c1effdd2f312fcb2d3ef684033cb07e64edb39d2f63f750333e78f5d5f768acf1ea1cd60fda82d497e0f8b8b927adbb96a89c3ead0618920c645b20d8896ef700fa0531e99e77d9af233b712af7a2752db474b9d21364c2956d93edda51d9d481b2f1c234766395aa0343185940cd934b03e70ebc60df0268736237196aa59735f645cdcc16b2a111cbaecd9928d896541ece4acc5940e38e4256ef1cbc14ba7778591c3f21fd811e676ff9f6e4030a2c7b53165b34aec9213f00b0e4988179130ef6b02ced690efcd1b095f29b266adc410cd7d61cbd9886b88239d5b128a08fb3ecd7dc53733a266e88e40f8c4dcf9b48dde00"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) [ 1495.158897][T13921] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1495.253553][ T26] audit: type=1804 audit(1633950214.009:7890): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir567531052/syzkaller.qvfMzw/163/bus" dev="sda1" ino=14220 res=1 errno=0 11:03:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 11:03:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) unshare(0x40000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) clock_gettime(0x1, &(0x7f00000001c0)={0x0}) unshare(0x46000180) r1 = open(&(0x7f0000000000)='./bus\x00', 0x161242, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYRES16], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x54, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0xc79}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004014}, 0x800) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x94ba348dc57882d4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426f90001006e657464050bca9c778191c01d069deed80f826558ce4f60157673696d0000000f0002006e657464657673696d30000008000b0004000000060011006300000008"], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000c0) [ 1495.424318][ T26] audit: type=1804 audit(1633950214.049:7891): pid=13923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/64/file1/bus" dev="loop0" ino=228 res=1 errno=0 [ 1495.450308][ T26] audit: type=1800 audit(1633950214.069:7892): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=14572 res=0 errno=0 [ 1495.708321][T13923] syz-executor.0: attempt to access beyond end of device [ 1495.708321][T13923] loop0: rw=34817, want=88, limit=87 11:03:34 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x6144bea}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, {{@in=@multicast2}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = getpgrp(0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000380)={{}, {0x9}, 0x10, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="48db92746f1b562249df2b4ab1eb2589a5ca3ba128836afc97c059c4e071676696184e4a1a36cfc602e3210c2f72ea6a6487", 0x32, 0x0, &(0x7f00000001c0)={0x2, 0x10d, {0x1, 0xc, 0xbd, "66625ce7e7417e30e9ea0054e390d2207312e519cef4359d8c261549da4ffc28edf0c34f672941e0a71e231ccd56aa80544990698501db883b29d94c326ca047fcced8c05276c2fe10b98b9fa6bc4ec7382590ff00a151af9264551c5163dec40b37a387562d3ab76d25e3bc8d8893fefc42492118ab2b25802bcff3108b697d5da97b148c219ff49f41b81897eff241eb67e1e1439ff9930df9e8bfa45299a35e45ce18078541867bc597c79835b2d7ec3326a27b3ed89d2d0badfa2a", 0x43, "12794ba0e28b72a0f0e1890562041f3a2d9910adb458f981c9fc52806e769c1ee8fc39c3c11d3b820715323b89122cd0deb6b8e92f7d1bda0c4ffef27711c2cc69f08d"}, 0x91, "b09909a3c77c970f4852746b919c2ef6b3f2217ada6ee2255734407368536b6bdec7f243003e8af547f39f1b05730c7386bfdcd53ada015453e1620c81826213832946afe5e2e9019c01be574cf9cba251af04da3ae419a14680a00482a7966dc6200fbef0844e88636e94539da528b6a797cef7a4c1116ad2425c648005e88219b5edb1a8e17bceb6a24a79a94dbeb82b"}, 0x1aa}) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x24000000) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7ff}, 0x0, 0xffffffffffffffff, r0, 0x9) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) 11:03:34 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat(r2, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write$binfmt_elf32(r2, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x0, 0x6, 0x1, 0x2, 0x2, 0x3e, 0x8, 0x385, 0x38, 0x8f, 0x4a9, 0x4806, 0x20, 0x1, 0x2, 0x8de, 0x8}, [{0x60000000, 0x3, 0x2, 0x4f, 0x9, 0x1, 0x6, 0x6}, {0x0, 0x10001, 0x1, 0xa51, 0xfffffffe, 0x9, 0x9, 0x5}], "c2d6b036d78aef273cfe9dc4f59d86a75d1038360649082fc92189abb1021131896867c3e28d7c05d0014f5071e5169a2542b72e8213a3ec6ff8c38f0f8e7ca10307788e53f1a69fdd8e09fe50100e74a67a6731f9f84983ae127e250365b51dd5363e282fed640f4696e1417f14a167b055d88ad539f16fb666ff6a2bf4460c509f08f34f22398911eadea7deecb81732b0fd6e95ad658c8e9e286e57ccbd6799df8d", ['\x00', '\x00', '\x00', '\x00']}, 0x51b) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008800}, 0x40080) mkdir(0x0, 0x32) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16=r1, @ANYBLOB="0a17138cbeac1e253a0000000000", @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32], 0x0, &(0x7f0000000240)='btrfs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x1, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) readahead(r1, 0xd6f7, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000002c0)=@v1={0x1000000, [{0x0, 0x7}]}, 0xc, 0x2) 11:03:34 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "63aa50e854edeb2f0627c97dce4d39dac6e66a55b296914ef9022232288d5689d3f31f648e4042aa160759dae421645b49ca94a0a4a277006b623390799319c50036c724830d70d71ce5c642ae25e38e86fe05c74487ae22c6aa2d85ca7043231964c1b2cd84c9d6d4f1ba510d5ebd94ba20923d3efd574fe6d902ed4f59a8ee4d440345b217fe3ac6603baaa9eaa2b2adf1036517de7febe75efdbab49af0f2be41e1e56cc13217a1301baf65cfbb04359dd139a15482196e61f9657871a0f5003c7046147d19828b2b0d1dd5f96ce5f2c4208806d9818c2559043fb34300e8be7772800150ed7887d984e0a9452d791a86dfe3e4c9faf8ccd13d14d94fd22df5b5f884dec3db18a7b824c613b452765a2e42ae5fdce168fd6148f220ac4113b778bc98e291c53dc9c7558370d7f2379ad6f5de067f66171b1828dbb751c4cdebbd202955e5fe354ab8b83e398e0685b03f6515ff586f2cabda43593ea735a53fefa2c2448d10aba7d65efee32b38963405a60de780ce04b8fb924685081aa4f7555c2070c22fb14b1fd27a1a185919e56ea9ad7238aceaa6da59452978d9c64bdf664f3bb6a482516c0f20ac7919e75ba25442a19d5f07238fd721f95304fa72bf348a7dbe6d882257689fad457b8a9be8584911b2fbf0338e18807f4fc57e5f9935b17c39e4843fa2b5187d5b3199f0ef7afd5efd7e87b602aa3faf88e8e131ec4acd784437b87f16a6713a570d139ef1f0b8755fb5bffa530a1f943543f2ed1a924cb44d0c53e87242f93e17601e4b2aaac3f91eeee0b9b4e8520c0f1a3f9802bd448801b356c3d2a105d35328df9eeedb7eeb4eb96a61ff037d82f7326a2f0027ba02eb877553745811a67781fb8ca9445558d5db09aec909878c39b40c895469344d292ae50c12d67767ea64646f8bf500c2e8c29a147eb04b0d33dd5a50ac932dbbe30fc8cf6c1c076b0c0660c450a6abd6e9d96b2c7ff1d990f09d334b1d5422c66b7334f9dde0e480b7e8be1b04fd7287d40d54612544b7f95634c8ce9f2d0b6010ecc2506e38c16a2101737063ff4d8ffc25cce23c5c69b36d4df0dad1d5e6bf91141fb7d2b1100f6b8c1e7f0226eb22fa5da51a787b1fe2da4c0d4f0f3804368fe140ea0770e019001b36b70ea2992536da31acecb2f53c3eff1e95bdabab14e69775ba3d949198398834c678e5a10e82f9802701e67a54a5811e949773ba41c766602286c61731d56d8c9872af8796e45384d79b6778bee88a3974484127e71e13a4d1034d795e7e704fe27f336fb3b44146fd34ed8dc82bb850218fb54be6c01d0d53cdbce9da14b88e99b5c292852a0fbba313c65baea1b2454f6713ea38e69580418b7dd505c887d238f22b3ba395702b308b2466ed9a5bdf1477246e35b7865974349f5fcf526f1936784ca0430dfb939da9b3623944e74d52", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) 11:03:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 11:03:34 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x7fff, 0x0, 0x100}, 0x9, 0x0, 0x100}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17, 0xfffffffffffffffc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) openat(r1, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x19dca5565f2b9172, r1, 0x1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x5b, 0xf4, 0x3d, 0x8, 0x7c4, 0xa004, 0xcea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd5, 0x43, 0xa9, 0x0, [], [{}]}}]}}]}}, 0x0) syz_usb_ep_write(r2, 0x63, 0x0, 0x0) 11:03:34 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket(0x2a, 0x6, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x4000}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x14, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x2}, 0x6d) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0xd, 0xd, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3f}, @call={0x85, 0x0, 0x0, 0x60}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x0, 0x0, 0x3, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @ldst={0x0, 0x3, 0x6, 0x3, 0x6, 0x8, 0x1}, @exit, @map={0x18, 0x7, 0x1, 0x0, r2}, @generic={0x2, 0xa, 0xc, 0x6, 0x8}]}, &(0x7f0000002680)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1, r0, 0x8, &(0x7f0000002980)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000003ac0)={0x3, 0xc, 0x8, 0x1d}, 0x10, 0xffffffffffffffff, r0}, 0x78) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003b80)={@cgroup, r3, 0x2}, 0x10) recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/69, 0x45}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f0000000900)=""/169, 0xa9}], 0x7, &(0x7f00000029c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000002380)=""/105, 0x69}], 0x2, &(0x7f0000001bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000001cc0)=""/143, 0x8f}, {&(0x7f0000001d80)=""/120, 0x78}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000001e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001f40)=""/129, 0x81}, {&(0x7f0000002000)=""/58, 0x3a}, {&(0x7f0000002040)=""/70, 0x46}, {&(0x7f0000000a80)=""/21, 0x15}, {&(0x7f0000002100)=""/237, 0xed}, {&(0x7f0000002200)=""/94, 0x5e}, {&(0x7f0000002280)=""/228, 0xe4}, {&(0x7f0000001b40)=""/105, 0x69}, {&(0x7f0000002400)=""/105, 0x69}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000025c0)=""/192, 0xc0}], 0x1, &(0x7f00000026c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}], 0x5, 0x2060, &(0x7f00000007c0)={0x0, 0x989680}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbd30}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000020c0)={@private1, 0x29}) [ 1496.054484][T13942] vxcan1 speed is unknown, defaulting to 1000 [ 1496.190623][T13959] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1496.867583][T13959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 11:03:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 11:03:35 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "04347f7738f15c09e3cd55a8932f1477831e9838ae8ef3ab631365ffdeb38da3a9908380fd821829655d64e7f6a8584ab6317f14cf0288ef2fdf7f7ad0edbf1fd309ba19d361052f506ed7ef0e0fba0aa9926d5a94bfc64319801bba2110465ee6453b7996ce7220d161b91f0f844fe819f68761b42da65a4c75c75aa62bbe64d5a2373cf71a95a58f1e06d5641e0c3a45d5ffcc58b9565a8978be09519fc4bb71670a04189f39c1e1f00a563efd0da19a9f2a7f0c574a3fe10c7ee88fc170c57e0da06230fb256dd22f9d3eef94bc6cbf93f0434a4b120a0fbad51126a2267865cd7a7c3e06028b5051feca6a0977e656f8529ad72480ad92adadc0c6caa6078353d6cb00bab01f6e40a5ac9ef8818924dd9facf62acbecfa8100a1c6e752dae3f75292168f7373624bd18104db251478b7e4e5a6413a127f9926338723b3b95aa3f4cf8308c4f3113152f0decf3a4f1bf8d69c5630cbb89d9e5fb2c1e4f67a9bbeb2242029748cafa69f9abc48fb685944eb55f112ee55fb1e6f092f47898577fb377168240dbf5b68ab7f6949c5e39bafd4e428a910d2e38f3d9c920fca2021dc4ab909ec4bee9311ad84823741d23e6ae73205ff198e67620f9feeb1b74f6801004d05d27f7c144e99175a3e4806a9d29277fe9774e3555c69118731bca38bd2b7c14798c570888009b7905a12d92da61478b12c93cbb708a11f5a20555ea77405a567940e5bc14a3b4676895d2c32930e79dec6155fc02186f513b2e2ba70b95ee1377400d0b581543893f123f5705322821d3af5610ebd2be5f8284a5accfe10581a45a10965efb3b6abd3c3f7c655369278376afd38f97fa4c6910a3f839b6f0f8eb339af85f246f2e2d55b799834f660b313d4d89f15a67d4d4aeca5f8dcc4e8d70a3bf6100674f0143c9edbe37b6c286998ed55c9a7462ed96140bb774cac4d1973b38e2ac21e8730646faecbcf95c895271779e47e017720ebf020821e233e99d146ef62b47aab2dbbf1dca9404318a31da9e10e8a92943c04025c32cd2f936c01798a9e107b9df24ee947895b575415834137aa2d17ebed75bcc15fe01d68c1effdd2f312fcb2d3ef684033cb07e64edb39d2f63f750333e78f5d5f768acf1ea1cd60fda82d497e0f8b8b927adbb96a89c3ead0618920c645b20d8896ef700fa0531e99e77d9af233b712af7a2752db474b9d21364c2956d93edda51d9d481b2f1c234766395aa0343185940cd934b03e70ebc60df0268736237196aa59735f645cdcc16b2a111cbaecd9928d896541ece4acc5940e38e4256ef1cbc14ba7778591c3f21fd811e676ff9f6e4030a2c7b53165b34aec9213f00b0e4988179130ef6b02ced690efcd1b095f29b266adc410cd7d61cbd9886b88239d5b128a08fb3ecd7dc53733a266e88e40f8c4dcf9b48dde00"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) [ 1496.971226][T13958] vxcan1 speed is unknown, defaulting to 1000 11:03:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:03:35 executing program 2: syslog(0x2, &(0x7f0000000000)=""/234, 0xea) [ 1497.122515][T13982] loop0: detected capacity change from 0 to 16383 [ 1497.173493][T13982] FAT-fs (loop0): bogus number of reserved sectors [ 1497.180395][T13982] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1497.198638][T13994] __nla_validate_parse: 1 callbacks suppressed [ 1497.198655][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e00034305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 11:03:36 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 11:03:36 executing program 4: syz_read_part_table(0x0, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000140)="c9", 0x1}, {0x0, 0x0, 0xfffffffffffffff8}]) 11:03:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1497.630790][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:36 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "03a3174cb8d85474e63bdc785d856d71f5fd7afddd375d808ddb6ee3bd3535f9a45c266a91b776e7128a50ba07590a1e53735f4e42349df47e2d9ca46f4c2fe7"}, 0x48, r1) keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r2) 11:03:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in, 0x0, 0x0, 0x104}, 0x98) 11:03:38 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 11:03:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:38 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 11:03:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0xc01047d0, 0x0) 11:03:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) [ 1500.068978][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:38 executing program 4: mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 11:03:38 executing program 2: getresuid(0x0, &(0x7f0000000380), &(0x7f00000003c0)) 11:03:38 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:38 executing program 1: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 11:03:39 executing program 0: mount(&(0x7f0000000980), 0x0, 0xfffffffffffffffc, 0x0, 0x0) 11:03:39 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "04347f7738f15c09e3cd55a8932f1477831e9838ae8ef3ab631365ffdeb38da3a9908380fd821829655d64e7f6a8584ab6317f14cf0288ef2fdf7f7ad0edbf1fd309ba19d361052f506ed7ef0e0fba0aa9926d5a94bfc64319801bba2110465ee6453b7996ce7220d161b91f0f844fe819f68761b42da65a4c75c75aa62bbe64d5a2373cf71a95a58f1e06d5641e0c3a45d5ffcc58b9565a8978be09519fc4bb71670a04189f39c1e1f00a563efd0da19a9f2a7f0c574a3fe10c7ee88fc170c57e0da06230fb256dd22f9d3eef94bc6cbf93f0434a4b120a0fbad51126a2267865cd7a7c3e06028b5051feca6a0977e656f8529ad72480ad92adadc0c6caa6078353d6cb00bab01f6e40a5ac9ef8818924dd9facf62acbecfa8100a1c6e752dae3f75292168f7373624bd18104db251478b7e4e5a6413a127f9926338723b3b95aa3f4cf8308c4f3113152f0decf3a4f1bf8d69c5630cbb89d9e5fb2c1e4f67a9bbeb2242029748cafa69f9abc48fb685944eb55f112ee55fb1e6f092f47898577fb377168240dbf5b68ab7f6949c5e39bafd4e428a910d2e38f3d9c920fca2021dc4ab909ec4bee9311ad84823741d23e6ae73205ff198e67620f9feeb1b74f6801004d05d27f7c144e99175a3e4806a9d29277fe9774e3555c69118731bca38bd2b7c14798c570888009b7905a12d92da61478b12c93cbb708a11f5a20555ea77405a567940e5bc14a3b4676895d2c32930e79dec6155fc02186f513b2e2ba70b95ee1377400d0b581543893f123f5705322821d3af5610ebd2be5f8284a5accfe10581a45a10965efb3b6abd3c3f7c655369278376afd38f97fa4c6910a3f839b6f0f8eb339af85f246f2e2d55b799834f660b313d4d89f15a67d4d4aeca5f8dcc4e8d70a3bf6100674f0143c9edbe37b6c286998ed55c9a7462ed96140bb774cac4d1973b38e2ac21e8730646faecbcf95c895271779e47e017720ebf020821e233e99d146ef62b47aab2dbbf1dca9404318a31da9e10e8a92943c04025c32cd2f936c01798a9e107b9df24ee947895b575415834137aa2d17ebed75bcc15fe01d68c1effdd2f312fcb2d3ef684033cb07e64edb39d2f63f750333e78f5d5f768acf1ea1cd60fda82d497e0f8b8b927adbb96a89c3ead0618920c645b20d8896ef700fa0531e99e77d9af233b712af7a2752db474b9d21364c2956d93edda51d9d481b2f1c234766395aa0343185940cd934b03e70ebc60df0268736237196aa59735f645cdcc16b2a111cbaecd9928d896541ece4acc5940e38e4256ef1cbc14ba7778591c3f21fd811e676ff9f6e4030a2c7b53165b34aec9213f00b0e4988179130ef6b02ced690efcd1b095f29b266adc410cd7d61cbd9886b88239d5b128a08fb3ecd7dc53733a266e88e40f8c4dcf9b48dde00"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) 11:03:39 executing program 4: setpriority(0x0, 0x0, 0x7fff) 11:03:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="1b", 0x1, 0x0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 11:03:39 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@in={0x10, 0x2}, 0x10) 11:03:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, 0x0, 0x0) 11:03:39 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) 11:03:39 executing program 2: r0 = socket(0x2, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000080)="a9", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 11:03:39 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:39 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "04347f7738f15c09e3cd55a8932f1477831e9838ae8ef3ab631365ffdeb38da3a9908380fd821829655d64e7f6a8584ab6317f14cf0288ef2fdf7f7ad0edbf1fd309ba19d361052f506ed7ef0e0fba0aa9926d5a94bfc64319801bba2110465ee6453b7996ce7220d161b91f0f844fe819f68761b42da65a4c75c75aa62bbe64d5a2373cf71a95a58f1e06d5641e0c3a45d5ffcc58b9565a8978be09519fc4bb71670a04189f39c1e1f00a563efd0da19a9f2a7f0c574a3fe10c7ee88fc170c57e0da06230fb256dd22f9d3eef94bc6cbf93f0434a4b120a0fbad51126a2267865cd7a7c3e06028b5051feca6a0977e656f8529ad72480ad92adadc0c6caa6078353d6cb00bab01f6e40a5ac9ef8818924dd9facf62acbecfa8100a1c6e752dae3f75292168f7373624bd18104db251478b7e4e5a6413a127f9926338723b3b95aa3f4cf8308c4f3113152f0decf3a4f1bf8d69c5630cbb89d9e5fb2c1e4f67a9bbeb2242029748cafa69f9abc48fb685944eb55f112ee55fb1e6f092f47898577fb377168240dbf5b68ab7f6949c5e39bafd4e428a910d2e38f3d9c920fca2021dc4ab909ec4bee9311ad84823741d23e6ae73205ff198e67620f9feeb1b74f6801004d05d27f7c144e99175a3e4806a9d29277fe9774e3555c69118731bca38bd2b7c14798c570888009b7905a12d92da61478b12c93cbb708a11f5a20555ea77405a567940e5bc14a3b4676895d2c32930e79dec6155fc02186f513b2e2ba70b95ee1377400d0b581543893f123f5705322821d3af5610ebd2be5f8284a5accfe10581a45a10965efb3b6abd3c3f7c655369278376afd38f97fa4c6910a3f839b6f0f8eb339af85f246f2e2d55b799834f660b313d4d89f15a67d4d4aeca5f8dcc4e8d70a3bf6100674f0143c9edbe37b6c286998ed55c9a7462ed96140bb774cac4d1973b38e2ac21e8730646faecbcf95c895271779e47e017720ebf020821e233e99d146ef62b47aab2dbbf1dca9404318a31da9e10e8a92943c04025c32cd2f936c01798a9e107b9df24ee947895b575415834137aa2d17ebed75bcc15fe01d68c1effdd2f312fcb2d3ef684033cb07e64edb39d2f63f750333e78f5d5f768acf1ea1cd60fda82d497e0f8b8b927adbb96a89c3ead0618920c645b20d8896ef700fa0531e99e77d9af233b712af7a2752db474b9d21364c2956d93edda51d9d481b2f1c234766395aa0343185940cd934b03e70ebc60df0268736237196aa59735f645cdcc16b2a111cbaecd9928d896541ece4acc5940e38e4256ef1cbc14ba7778591c3f21fd811e676ff9f6e4030a2c7b53165b34aec9213f00b0e4988179130ef6b02ced690efcd1b095f29b266adc410cd7d61cbd9886b88239d5b128a08fb3ecd7dc53733a266e88e40f8c4dcf9b48dde00"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) 11:03:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000100), &(0x7f00000001c0)=0xb0) 11:03:39 executing program 0: truncate(&(0x7f0000000040)='./file0\x00', 0x0) sigaltstack(&(0x7f000097a000/0x3000)=nil, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 11:03:39 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) 11:03:39 executing program 4: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xff}, {0x0, 0xe6}, {}], 0x3) 11:03:39 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="a4", 0x1}], 0x1, &(0x7f00000004c0)=[{0x10}, {0x10}], 0x20}, 0x0) 11:03:39 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = pidfd_open(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) 11:03:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:39 executing program 0: r0 = semget(0x2, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xff}, {0x0, 0xe6, 0x1800}], 0x2) 11:03:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f00000000c0)="04", 0x1, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 1501.149132][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:40 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/91, 0x5b}, 0xb6}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delqdisc={0x44, 0x25, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe7, 0x10}, {0x10, 0x2}, {0x10, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) 11:03:40 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) pidfd_open(0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) 11:03:40 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0, 0x0, 0x0, 0x0, 0x601}}], 0x400000000000107, 0x0) 11:03:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:40 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000440)) [ 1501.476004][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:40 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "04347f7738f15c09e3cd55a8932f1477831e9838ae8ef3ab631365ffdeb38da3a9908380fd821829655d64e7f6a8584ab6317f14cf0288ef2fdf7f7ad0edbf1fd309ba19d361052f506ed7ef0e0fba0aa9926d5a94bfc64319801bba2110465ee6453b7996ce7220d161b91f0f844fe819f68761b42da65a4c75c75aa62bbe64d5a2373cf71a95a58f1e06d5641e0c3a45d5ffcc58b9565a8978be09519fc4bb71670a04189f39c1e1f00a563efd0da19a9f2a7f0c574a3fe10c7ee88fc170c57e0da06230fb256dd22f9d3eef94bc6cbf93f0434a4b120a0fbad51126a2267865cd7a7c3e06028b5051feca6a0977e656f8529ad72480ad92adadc0c6caa6078353d6cb00bab01f6e40a5ac9ef8818924dd9facf62acbecfa8100a1c6e752dae3f75292168f7373624bd18104db251478b7e4e5a6413a127f9926338723b3b95aa3f4cf8308c4f3113152f0decf3a4f1bf8d69c5630cbb89d9e5fb2c1e4f67a9bbeb2242029748cafa69f9abc48fb685944eb55f112ee55fb1e6f092f47898577fb377168240dbf5b68ab7f6949c5e39bafd4e428a910d2e38f3d9c920fca2021dc4ab909ec4bee9311ad84823741d23e6ae73205ff198e67620f9feeb1b74f6801004d05d27f7c144e99175a3e4806a9d29277fe9774e3555c69118731bca38bd2b7c14798c570888009b7905a12d92da61478b12c93cbb708a11f5a20555ea77405a567940e5bc14a3b4676895d2c32930e79dec6155fc02186f513b2e2ba70b95ee1377400d0b581543893f123f5705322821d3af5610ebd2be5f8284a5accfe10581a45a10965efb3b6abd3c3f7c655369278376afd38f97fa4c6910a3f839b6f0f8eb339af85f246f2e2d55b799834f660b313d4d89f15a67d4d4aeca5f8dcc4e8d70a3bf6100674f0143c9edbe37b6c286998ed55c9a7462ed96140bb774cac4d1973b38e2ac21e8730646faecbcf95c895271779e47e017720ebf020821e233e99d146ef62b47aab2dbbf1dca9404318a31da9e10e8a92943c04025c32cd2f936c01798a9e107b9df24ee947895b575415834137aa2d17ebed75bcc15fe01d68c1effdd2f312fcb2d3ef684033cb07e64edb39d2f63f750333e78f5d5f768acf1ea1cd60fda82d497e0f8b8b927adbb96a89c3ead0618920c645b20d8896ef700fa0531e99e77d9af233b712af7a2752db474b9d21364c2956d93edda51d9d481b2f1c234766395aa0343185940cd934b03e70ebc60df0268736237196aa59735f645cdcc16b2a111cbaecd9928d896541ece4acc5940e38e4256ef1cbc14ba7778591c3f21fd811e676ff9f6e4030a2c7b53165b34aec9213f00b0e4988179130ef6b02ced690efcd1b095f29b266adc410cd7d61cbd9886b88239d5b128a08fb3ecd7dc53733a266e88e40f8c4dcf9b48dde00"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000f40)={0x8001, 0x18, [0xffffffffffffffc1, 0x3, 0x8, 0x1], &(0x7f0000000f00)=[0x0, 0x0, 0x0]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) 11:03:40 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001180)='ns/pid_for_children\x00') 11:03:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000200)) 11:03:40 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000003c0)) 11:03:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x38}}, 0x0) 11:03:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x0) [ 1501.749800][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4e}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x78}}, 0x8808) 11:03:40 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e2, 0x0) [ 1501.883245][T14171] rdma_rxe: rxe_register_device failed with error -23 [ 1501.892583][T14171] rdma_rxe: failed to add gretap0 11:03:40 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000480)={"966babf8fa931306d3c37a969f132746", 0x0, r2, {0x8, 0x9}, {0x7f, 0x3}, 0x2, [0x5, 0x205, 0x0, 0x7, 0x1f, 0x2, 0x8, 0xffff, 0x2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffe, 0xffff, 0x18000, 0x4a, 0xffff]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) [ 1501.980401][T14175] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1501.998195][T18807] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1502.009679][T18807] bond0: now running without any active interface! [ 1502.016413][T18807] bond0: (slave bond_slave_1): link status definitely down, disabling slave 11:03:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000005780), r0) 11:03:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001b80)) 11:03:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}, 0x6000}, 0x1c, 0x0}, 0x0) [ 1502.137632][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1502.160007][T14183] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. 11:03:41 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x0, 0x0, 0x0, 0x6}, 0x20) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/210, 0xd2, 0x40000120, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 11:03:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:41 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) 11:03:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000300), 0x4) [ 1502.423542][T14195] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1502.437691][T14196] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:03:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 11:03:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="48615b1226b075683924aa1e1868ac09", 0x10) 11:03:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}}, 0x0) 11:03:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1502.596803][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1502.718972][T14209] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1502.734101][T14209] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 11:03:41 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 11:03:41 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) timerfd_gettime(r0, 0x0) 11:03:41 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x0, 0x7fff, @start={0x0, 0x0, "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", "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"}, [0x8, 0x7bd, 0x7, 0x7, 0x4fa5, 0xfffffffffffffffa, 0xbc0, 0xffffffff, 0x100, 0x81, 0x4, 0x8, 0x3, 0x3, 0x8001, 0x2, 0x296, 0xb72, 0x3, 0x4, 0x200, 0x100000001, 0x8, 0x4, 0xee0, 0x8001, 0x4000000f3f, 0xfff, 0x6, 0x5, 0x0, 0xa39, 0x8, 0x9, 0x3ff, 0x100000000, 0x700000000000, 0x3f00000000, 0x20, 0x4, 0x0, 0x8, 0xfffffffffffff001, 0x0, 0x1, 0x3, 0x761, 0x5, 0x0, 0x3, 0xb39, 0x7, 0x8000, 0x4, 0x2, 0xfff, 0xffffffff, 0x8, 0x3a, 0x9ff, 0x100000001, 0x5, 0x101, 0x8]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) 11:03:41 executing program 1: io_submit(0x0, 0x0, &(0x7f0000001d80)) 11:03:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1502.987348][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:41 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 11:03:41 executing program 4: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/4096}, 0x1008, 0x3, 0x3000) 11:03:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}]}, 0x38}}, 0x0) 11:03:41 executing program 1: clock_gettime(0x0, &(0x7f0000000500)) 11:03:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:41 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 11:03:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, 0x0) 11:03:42 executing program 2: fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 11:03:42 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x0, 0x0, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 11:03:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1503.406317][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:42 executing program 4: timer_create(0x2, &(0x7f0000000080)={0x0, 0x15}, &(0x7f00000000c0)) 11:03:42 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) mknodat$loop(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) 11:03:42 executing program 1: msgget$private(0x0, 0x608) 11:03:42 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000040)=""/4096) 11:03:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:42 executing program 4: timer_create(0x0, &(0x7f0000000080), 0x0) [ 1503.797853][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:42 executing program 1: timerfd_create(0x0, 0x80400) 11:03:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, 0x0, 0x0) 11:03:42 executing program 4: pipe(&(0x7f0000001500)={0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 11:03:42 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:42 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 11:03:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$packet(r0, 0x0, 0x0) 11:03:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "89627b048e27ff76", "26b68c51598c316f5173050c92678d734d1cc3e736048bbc24fa2785ef70fe54", "b3d28e44", "7b2b061dc419cb06"}, 0x38) [ 1504.164422][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:43 executing program 4: msgget(0x2, 0x214) 11:03:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDDISABIO(r0, 0x4b37) 11:03:43 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:43 executing program 1: msgget(0x2, 0x340) 11:03:43 executing program 0: msgget(0x0, 0x681) 11:03:43 executing program 4: msgget(0x2, 0x214) [ 1504.465921][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCMSET(r0, 0x5418, 0x0) 11:03:43 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) 11:03:43 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:43 executing program 4: msgget(0x2, 0x214) 11:03:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) timerfd_settime(r0, 0x0, 0x0, 0x0) [ 1504.833183][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:43 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 11:03:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 11:03:43 executing program 3: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:43 executing program 4: msgget(0x2, 0x214) 11:03:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 11:03:43 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='dax_writeback_one\x00'}, 0x10) 11:03:43 executing program 1: clone(0x48000100, &(0x7f0000003000)="6487c0f81073b83a198c6aac90cc016e598e0e12ec", &(0x7f0000003040), &(0x7f0000003080), &(0x7f00000030c0)="aa73adf6fb6d2aebd70bdb0dda8529fdaa555cd7aad6b429c0e192cc2875d5bf88d67bbb03b790dabb50967c578e31677bc6e8d1ef86b92cf57676afdca2b2a24e22f4e9fd10a82458c1b7d7") [ 1505.220483][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:44 executing program 4: clone(0x48000100, &(0x7f0000003000)="6487c0f81073b83a198c6aac90cc016e598e0e12ecd407c4c01bed8a7c67b4e43ff67313", 0x0, &(0x7f0000003080), &(0x7f00000030c0)) 11:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1505.407523][T14330] vxcan1 speed is unknown, defaulting to 1000 11:03:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 11:03:44 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/158, 0x9e}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/68, 0x44}], 0x5}}, {{&(0x7f0000002740)=@abs, 0x6e, 0x0, 0x0, 0x0, 0x38}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x101, 0x0) clone(0x48000100, &(0x7f0000003000)="6487c0f81073b83a198c6aac90cc016e598e0e12ecd407c4c01bed", &(0x7f0000003040), &(0x7f0000003080), 0x0) fork() [ 1505.568580][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1505.713035][T14335] vxcan1 speed is unknown, defaulting to 1000 11:03:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 11:03:44 executing program 4: syz_mount_image$vfat(&(0x7f0000005f00), &(0x7f0000005f40)='./file0\x00', 0x0, 0x0, &(0x7f0000006040), 0x8400, &(0x7f0000006080)={[{@utf8}, {@utf8no}, {@shortname_win95}], [{@fsname={'fsname', 0x3d, '{+'}}]}) [ 1505.874156][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1505.897968][T14364] vxcan1 speed is unknown, defaulting to 1000 11:03:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1506.032319][T14365] vxcan1 speed is unknown, defaulting to 1000 11:03:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:44 executing program 4: syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) 11:03:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r1], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 11:03:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 11:03:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1506.548997][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 1506.627620][T14381] vxcan1 speed is unknown, defaulting to 1000 11:03:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 11:03:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0xc}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x34}}, 0x0) 11:03:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @multicast2}}}, 0xa0) 11:03:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:46 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40000052, &(0x7f0000001980)) 11:03:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 11:03:46 executing program 0: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x63, 0x66, 0x61, 0x38, 0x38, 0x30, 0x61, 0x33, 0x62]}, &(0x7f0000000380)={0x0, "a846a358934637c5920dad0befa20c9bdf11abab213b0b3d6b96d54ee34d75125c2ba1e4fd08192d2a05e83be8024f9d16268d40ea1fde4ba45e8c23826df917"}, 0x84, 0xfffffffffffffffc) 11:03:46 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="3fa095174410292853d3ec730932f2512f261e6d04be2dd19f1ace8a12133207a894971fb1df380130e113f9333fe9", 0x2f}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x424002d9f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) mount$fuseblk(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000680), 0x10, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x5ea, 0x6, &(0x7f0000001a80)=[{&(0x7f0000000480)}, {&(0x7f00000005c0)="2373a4cdcfd9987b800dc725e7b6ce7e3b18a95ddad9105feb32938dc47db7c6ad8008e0c104439f0a8937ba6748cd166cb9e2c866dc7bcdde8d7292bb38f569aacb403adc8085e667d72c88a2aa77666f7dbd173bbceb6c41b5ef5326a2456b177d30a2d1c61a20b542f470cdc69315cd3c5bec", 0x74, 0x1}, {0x0}, {&(0x7f0000000640)="daf9ff921eafebcd27f29fb9a63b1a93aaa9701b4c74f7c76314", 0x1a}, {0x0, 0x0, 0x1}, {&(0x7f0000000780)="743269b5f69dbf692fd025fe166473f0e3d9c013d2fada392011def73a43ec865eed65f7c6be9b4c853df7f9edfc3551577c4e09348b700925406532c47478232a08dee2b6b88f0c62d50a3ea1345242e72785d11f58c39fc23cb3ba7bed02e36056da136505384832be7403ccf92c62b989e5ffa750720fd5311c765bd08b8cc52accb7201e6db71a2df97faaf1de003e71b8c04fa459e9ad2fe6017b2451fe9e59397478462ab95b", 0xa9}], 0x200400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x8802, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 11:03:46 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @address_reply}}}}, 0x0) 11:03:46 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0xa00) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000480)={0x0, 0x0}) 11:03:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 11:03:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x48d, 0x8595, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x94, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x80, 0x7f, 0x3, 0x1, 0x1, 0x86, {0x9, 0x21, 0x1f, 0x9, 0x1, {0x22, 0xb91}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x20, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x1f}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x5, 0xb5, 0x7f, 0x20, 0x1}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x1c, &(0x7f0000000580)=@string={0x1c, 0x3, "6d922ef0ffb7bc60c428fffc301ad6b31ba8dfff710eec5f4103"}}]}) [ 1507.847116][T14513] __nla_validate_parse: 3 callbacks suppressed [ 1507.847137][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:46 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000200)=@file={0xa}, 0xa) 11:03:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:46 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 11:03:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 11:03:46 executing program 0: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) read(r0, &(0x7f0000000040)=""/35, 0x23) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 11:03:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:47 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaa5df3f514b17286dd60cd5d3c0000000000ffffff000000000000000000000001fe8000000000000000000000000000aa"], 0x0) [ 1508.312287][T14532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, 0x0, 0x0) 11:03:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:47 executing program 2: add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0x0) 11:03:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x33]}, &(0x7f0000000340)={0x0, "c0f713155ef417e8a2b99de6bf0db76a98b0377ee6ce157a9d0d4eb6a4b288f3aa517deaa03feae8f0e6c9a683fe8a07297258722100"}, 0x19, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "c0f713155ef417e8a2b99de6bf0db76a9830377ee6ce157a9d0d4eb6a4b288f3aa517deaa03fcaa8f0e6c9a6740964b2ef69648adf7afb83fe8a072972587221"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 11:03:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:47 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0), 0x4) 11:03:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8001) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)) 11:03:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)="9ada5bdf", 0x4) 11:03:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:47 executing program 2: r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) 11:03:47 executing program 4: ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) 11:03:47 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'gre0\x00', @ifru_ivalue}) 11:03:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000040)) 11:03:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x37, 0x0, &(0x7f0000000080)) 11:03:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b40)={'veth1_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x0, r2}) 11:03:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:48 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20004000) 11:03:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:48 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x5, 0x87, 0x6, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x700, 0x10, 0x8, 0x3}}) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) openat$null(0xffffffffffffff9c, 0x0, 0x101200, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 11:03:48 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000580)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 11:03:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1510.109785][T14616] vxcan1 speed is unknown, defaulting to 1000 11:03:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1510.182096][T14627] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 11:03:49 executing program 2: syz_mount_image$iso9660(&(0x7f0000001140), &(0x7f0000001180)='./file1\x00', 0x0, 0x0, &(0x7f0000001700), 0x0, &(0x7f00000017c0)={[{@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x1f}}, {@check_relaxed}, {@cruft}]}) 11:03:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@rodir}, {@fat=@sys_immutable}, {@fat=@nfs}]}) [ 1510.439644][T14621] vxcan1 speed is unknown, defaulting to 1000 11:03:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1510.644330][T14678] FAT-fs (loop0): bogus number of reserved sectors [ 1510.651347][T14678] FAT-fs (loop0): Can't find a valid FAT filesystem 11:03:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x0) 11:03:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500"], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1510.799433][T14678] FAT-fs (loop0): bogus number of reserved sectors [ 1510.806029][T14678] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1510.935497][T14616] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:49 executing program 2: clone(0x2200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000300)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8c\xecR\xb2\x1b\x99vS\xa6K&u\x9dX\xcc\r\x12\x01\b\x00\x80\x00\x00\x00\x00E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\xaf\xfdj\x83nj\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c\xdc\xa8\xd30HX\xe9\t\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89m3\x1d\x1c@\x8eu\x85\xce\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D+\x1f\xdd\x9aY\xcd\xbf\xbc\xc8\x85\x1c\xdb1\xee\x14\f{\xf35\xcbH\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% \x00\x00\x00\x00\x99\xdd\x80\x03\xec@\x9f\x8elx\b\xf1\xb4^X\x99\xbb\xa0\xf5Bx\xa9cT\f\x99\xbf\xb5\xebj.t\xa2E#\x9c\x14_\x19\xe1\xe0H\x16\xedi:\x00\x00\x00\x00\x00\x00\x00\x00\xca\x97\xba\xf2\x1b\xeb\xa5h\xeb\xb0\xc0xe\xa3\x12\xcb\xef\xda\xa2nBP\xaf(\xb0\x8a\xdb\xa2M\xf1\x84\x05\x8cK\x8b\x93\xe9oBx\xd6\xad\xfdF\xee8\xca\x95|\xe2\x84\x11\x1c\x81M\a\x04\xd6\xd1\xed4\xc8\x82\xf2C\xf61\x13X8\x99M\xf1B\xac\xd7\xc7\x1d\x8f\xb2\x80\xf4\x1a\n\xe5\x8e\x80x^k\xfc\n\xd9?g\xa2\x7f!\xdf,\x7f\xa2\xa43\xd3h\xfd\xe7\x1b\x148\x191M\xf4O\xd1%\xa55\x9f[CBF\x00T\xf0\xdf\xe1\xfdK2(cy\x18K\xef\xfe\xeb\xdf\xc9cX\xf4\xf9\x91._\x9b%\x1a[\xa9ql\x19\xf1,E\xb7\x7f\x993\xf0i:1\x15\x9bYF\x1e\x90\'\xe5\xd2\x19\f&{t%\xb0z \n4\xba5\xa4:\xe8\xdb\xdd\xef\xc4j\xf4@\x8bc\xec(\xb7\xdb\x85\xa3v&;\xaf\xd9\xed$\x9f\x1b0\xad|\xb7&\xbb\xcd\xae\x85\x1c\x865\xb7\xd4_r\xf157\ri\x9b\xe3\xcc\xa9\xab\xf0\x9e\xaa\r\xa1MV\xbe\x82\xbb\xec\"_\xd1]~\xcd\xd7\xc0;\xc7IM&\xb0\x80a\xcf\x13\x1eF\xc0\xc5\xb0\xe7]\f\\\x85\xc9Qs:$\xf7\xdcGQY?)\x9a\xee\xe02\xabo\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbaK\x10t{\xd6\x11c\x03\xc9\xb3\xff\xfaUe\"k\xa9\xbc\x1a\x03\xfeC;\xed1W\xe6_d\xff8\xa0\xfa\x99\xdd\x92\xe3\xe5y{\xd6\xa0\xc4\ngNn\x9fND\x99\xd9_6\x8f\xb2\xb3;', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') read$FUSE(r1, 0x0, 0x0) getpgid(0x0) sched_setaffinity(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 11:03:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500"], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:03:49 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x5, 0x87, 0x6, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x700, 0x10, 0x8, 0x3}}) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x0) 11:03:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500"], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1511.291329][T14709] vxcan1 speed is unknown, defaulting to 1000 11:03:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x0) [ 1511.398471][ T26] audit: type=1804 audit(1633950230.090:7893): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/98/cgroup.controllers" dev="sda1" ino=15172 res=1 errno=0 [ 1511.467938][T14738] vxcan1 speed is unknown, defaulting to 1000 11:03:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1511.559449][T14741] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 11:03:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:03:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 11:03:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1512.137574][ T26] audit: type=1804 audit(1633950230.880:7894): pid=14778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/99/cgroup.controllers" dev="sda1" ino=15123 res=1 errno=0 11:03:51 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x5, 0x87, 0x6, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x700, 0x10, 0x8, 0x3}}) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/ip_tables_targets\x00') write$eventfd(r0, 0x0, 0x0) 11:03:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 11:03:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:51 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:51 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 11:03:51 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x452481, 0x0) [ 1512.603299][T14792] vxcan1 speed is unknown, defaulting to 1000 [ 1512.679535][T14799] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:03:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:51 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1512.880989][T14794] vxcan1 speed is unknown, defaulting to 1000 11:03:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 1513.238935][ T26] audit: type=1804 audit(1633950231.990:7895): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/100/cgroup.controllers" dev="sda1" ino=15190 res=1 errno=0 11:03:52 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x5, 0x87, 0x6, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x700, 0x10, 0x8, 0x3}}) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) 11:03:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2) write$evdev(r1, &(0x7f000004d000)=[{}], 0xfffffe82) r2 = dup(r0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 11:03:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 11:03:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) [ 1513.650393][T14867] vxcan1 speed is unknown, defaulting to 1000 11:03:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 11:03:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1513.768373][T14874] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:03:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) 11:03:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) [ 1514.149489][T14871] vxcan1 speed is unknown, defaulting to 1000 [ 1514.224321][ T26] audit: type=1804 audit(1633950232.970:7896): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/101/cgroup.controllers" dev="sda1" ino=13947 res=1 errno=0 11:03:53 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) [ 1514.836695][T14937] vxcan1 speed is unknown, defaulting to 1000 [ 1514.855311][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1515.066749][T14943] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1515.098344][T14942] vxcan1 speed is unknown, defaulting to 1000 11:03:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) semctl$IPC_RMID(0x0, 0x0, 0x0) 11:03:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:03:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000010) 11:03:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300"], 0x28}}, 0x0) 11:03:57 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1518.567799][T15003] vxcan1 speed is unknown, defaulting to 1000 [ 1518.710342][T15028] vxcan1 speed is unknown, defaulting to 1000 11:03:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300"], 0x28}}, 0x0) [ 1518.761887][T15034] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1518.899617][ T26] audit: type=1804 audit(1633950237.650:7897): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/102/cgroup.controllers" dev="sda1" ino=15231 res=1 errno=0 11:03:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000010) [ 1519.002748][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300"], 0x28}}, 0x0) 11:03:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 11:03:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1519.358624][ T26] audit: type=1804 audit(1633950238.110:7898): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/103/cgroup.controllers" dev="sda1" ino=14899 res=1 errno=0 [ 1519.392722][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1519.429146][T15076] ptrace attach of "/root/syz-executor.2 exec"[15075] was attempted by "/root/syz-executor.2 exec"[15076] 11:03:58 executing program 2: rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) prctl$PR_SET_SECCOMP(0x2a, 0x0, 0x0) 11:03:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000010) 11:03:58 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32], 0x28}}, 0x0) 11:03:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1519.667261][ T26] audit: type=1326 audit(1633950238.411:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 [ 1519.690613][ T26] audit: type=1326 audit(1633950238.421:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 [ 1519.713821][ T26] audit: type=1326 audit(1633950238.421:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 [ 1519.737139][ T26] audit: type=1326 audit(1633950238.421:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 [ 1519.760593][ T26] audit: type=1326 audit(1633950238.421:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 [ 1519.769178][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1519.783855][ T26] audit: type=1326 audit(1633950238.421:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 11:03:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="0900000000000000a18055"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1519.816139][ T26] audit: type=1326 audit(1633950238.421:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15080 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f110847a8d9 code=0x7ffc0000 [ 1519.954741][T15093] vxcan1 speed is unknown, defaulting to 1000 11:03:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:03:58 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x69e4bec5, 0x9) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1520.039387][T15103] ptrace attach of "/root/syz-executor.2 exec"[15102] was attempted by "/root/syz-executor.2 exec"[15103] [ 1520.056944][T15104] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:03:58 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32], 0x28}}, 0x0) 11:03:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:03:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1520.363461][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1520.441205][T15098] vxcan1 speed is unknown, defaulting to 1000 11:03:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:59 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x69e4bec5, 0x9) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) 11:03:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32], 0x28}}, 0x0) 11:03:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:03:59 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:03:59 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x69e4bec5, 0x9) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1520.906235][ T26] audit: type=1804 audit(1633950238.781:7906): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/104/cgroup.controllers" dev="sda1" ino=15237 res=1 errno=0 [ 1521.078529][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:03:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000300000000", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:03:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:03:59 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x69e4bec5, 0x9) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) [ 1521.223785][T15176] vxcan1 speed is unknown, defaulting to 1000 11:04:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x28}}, 0x0) [ 1521.276900][T15183] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1521.417308][T15177] vxcan1 speed is unknown, defaulting to 1000 11:04:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000300000000", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:04:00 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) 11:04:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x28}}, 0x0) 11:04:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000300000000", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:00 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:04:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x28}}, 0x0) 11:04:00 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) 11:04:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000300000000000800", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1522.358387][T15257] vxcan1 speed is unknown, defaulting to 1000 11:04:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000300000000000800", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:01 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="ff", 0x1}], 0x0, &(0x7f00000003c0)=ANY=[]) 11:04:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1522.485360][T15269] vxcan1 speed is unknown, defaulting to 1000 11:04:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1], 0x28}}, 0x0) [ 1522.610866][T15292] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000300000000000800", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:01 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) 11:04:01 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:04:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1], 0x28}}, 0x0) 11:04:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500030000000000080005", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:01 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) [ 1523.425969][T15329] vxcan1 speed is unknown, defaulting to 1000 11:04:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500030000000000080005", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:02 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) 11:04:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1], 0x28}}, 0x0) 11:04:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) [ 1523.557017][T15336] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1523.715125][T15333] vxcan1 speed is unknown, defaulting to 1000 11:04:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500030000000000080005", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 11:04:03 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:03 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[]) 11:04:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000", @ANYRES32=r1], 0x28}}, 0x0) 11:04:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 11:04:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000", @ANYRES32=r1], 0x28}}, 0x0) 11:04:03 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) [ 1524.482154][T15399] vxcan1 speed is unknown, defaulting to 1000 11:04:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1524.555655][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1524.555672][ T26] audit: type=1804 audit(1633950243.301:7911): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/110/cgroup.controllers" dev="sda1" ino=15281 res=1 errno=0 11:04:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) [ 1524.620724][T15405] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1524.774799][T15403] vxcan1 speed is unknown, defaulting to 1000 11:04:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, 0x0) 11:04:03 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 11:04:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000", @ANYRES32=r1], 0x28}}, 0x0) 11:04:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000840)=""/175, 0xaf}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8da7d34f3904cf12dba", 0x0, 0x0, 0x30, 0x100, 0x0}) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054d40)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) fstat(r0, &(0x7f0000000080)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x3312, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000640)=""/219, 0xdb}], 0x1, 0x80000001, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1, 0x0, 0x0) [ 1525.294559][T15468] vxcan1 speed is unknown, defaulting to 1000 11:04:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 11:04:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000068000000", @ANYRES32=r1], 0x28}}, 0x0) [ 1525.389512][T15475] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1525.604071][T15471] vxcan1 speed is unknown, defaulting to 1000 [ 1525.960132][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:04:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000068000000", @ANYRES32=r1], 0x28}}, 0x0) 11:04:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) 11:04:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:05 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:05 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000840)=""/175, 0xaf}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8da7d34f3904cf12dba", 0x0, 0x0, 0x30, 0x100, 0x0}) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054d40)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) fstat(r0, &(0x7f0000000080)) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x3312, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000640)=""/219, 0xdb}], 0x1, 0x80000001, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/1, 0x1}], 0x1, 0x0, 0x0) 11:04:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1526.535821][T15532] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1526.570490][T15534] vxcan1 speed is unknown, defaulting to 1000 11:04:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1526.700469][T15544] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1526.756123][T15538] vxcan1 speed is unknown, defaulting to 1000 11:04:05 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000068000000", @ANYRES32=r1], 0x28}}, 0x0) 11:04:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x30}}, 0x0) [ 1527.365451][T15573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 11:04:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01010000000000000000680000000800", @ANYRES32=r1], 0x28}}, 0x0) [ 1527.579967][ T26] audit: type=1804 audit(1633950246.331:7912): pid=15596 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/114/cgroup.controllers" dev="sda1" ino=15294 res=1 errno=0 11:04:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 11:04:06 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1527.863974][T15608] vxcan1 speed is unknown, defaulting to 1000 [ 1527.970472][T15616] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:07 executing program 2: munmap(&(0x7f0000ff6000/0x7000)=nil, 0x7000) munmap(&(0x7f0000ff6000/0x7000)=nil, 0x7000) 11:04:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01010000000000000000680000000800", @ANYRES32=r1], 0x28}}, 0x0) 11:04:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 11:04:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="27000000100009000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1528.185588][T15611] vxcan1 speed is unknown, defaulting to 1000 11:04:07 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 11:04:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01010000000000000000680000000800", @ANYRES32=r1], 0x28}}, 0x0) [ 1528.492962][ T26] audit: type=1804 audit(1633950247.241:7913): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/115/cgroup.controllers" dev="sda1" ino=15302 res=1 errno=0 11:04:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="27000000100009000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs, 0x6e) [ 1528.660061][T15669] vxcan1 speed is unknown, defaulting to 1000 11:04:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}}, 0x0) 11:04:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="27000000100009000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000068000000080003", @ANYRES32=r1], 0x28}}, 0x0) 11:04:07 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 11:04:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="270000001000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1529.064092][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1529.112710][ T26] audit: type=1804 audit(1633950247.871:7914): pid=15709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/116/cgroup.controllers" dev="sda1" ino=14177 res=1 errno=0 11:04:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}}], 0x1, 0x0) [ 1529.189838][T15683] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1529.290537][T15674] vxcan1 speed is unknown, defaulting to 1000 11:04:08 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000068000000080003", @ANYRES32=r1], 0x28}}, 0x0) 11:04:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}}, 0x0) 11:04:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000010) 11:04:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="270000001000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002c40)={0x14, 0x10, 0x0, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}, {&(0x7f00000001c0)={0x10}, 0x10}], 0x2}, 0x0) [ 1529.822737][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:04:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @multicast2}, @nl=@proc, @generic={0x0, "9623716f8d8b9a8c21ae320210a8"}}) 11:04:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}}, 0x0) [ 1529.921449][T15768] vxcan1 speed is unknown, defaulting to 1000 11:04:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="270000001000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1530.056970][T15792] vxcan1 speed is unknown, defaulting to 1000 11:04:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101000000000000000068000000080003", @ANYRES32=r1], 0x28}}, 0x0) [ 1530.138791][T15768] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:09 executing program 2: syz_open_dev$vcsu(&(0x7f0000000800), 0xc8bf, 0x0) 11:04:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000010) [ 1530.269842][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 11:04:09 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}}, 0x0) 11:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0xff6a) 11:04:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:09 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@map, 0xffffffffffffffff, 0x15}, 0x10) [ 1530.720733][T15840] vxcan1 speed is unknown, defaulting to 1000 11:04:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}}, 0x0) 11:04:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000010) [ 1530.837934][T15846] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000001c0)={0x94, 0x32, 0x913, 0x0, 0x0, "", [@nested={0x82, 0x0, 0x0, 0x1, [@generic="7b559708256281a64a90f6edee3edf211055092be372597fa5beeab103e27a137e3715806c01672f03665c5ec4288d535c87b96862e50ae69e8153940234c3f691a60be418b72d36deb7179823dbe7d7b8fa034dd7443a17ff3e0e6fad9bedeabc0108ae0cc8ee1ff1028a3e8e0513d1e51dede019ce276aaaeee22da670"]}]}, 0x94}], 0x1}, 0x0) 11:04:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) [ 1531.252006][T15843] vxcan1 speed is unknown, defaulting to 1000 [ 1531.282591][T15862] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1531.292197][T15862] tc_dump_action: action bad kind 11:04:13 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x2c}}, 0x0) 11:04:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:13 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop]}}}}}}, 0x0) [ 1534.544376][T15924] vxcan1 speed is unknown, defaulting to 1000 11:04:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:13 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @random="9eba0b986368", @void, {@generic={0x8864}}}, 0x0) 11:04:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:13 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000100)={@broadcast, @broadcast, @val, {@generic={0x8035}}}, 0x0) [ 1534.683506][T15947] vxcan1 speed is unknown, defaulting to 1000 [ 1534.744418][T15952] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x20) 11:04:14 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x7) 11:04:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) [ 1535.304967][ T26] audit: type=1804 audit(1633950254.052:7915): pid=15927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/120/cgroup.controllers" dev="sda1" ino=14490 res=1 errno=0 [ 1535.465586][T15993] vxcan1 speed is unknown, defaulting to 1000 11:04:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:14 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) 11:04:14 executing program 1: msgsnd(0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x240) msgctl$IPC_RMID(r0, 0x0) unshare(0x40000000) 11:04:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 11:04:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) [ 1535.644263][T15996] vxcan1 speed is unknown, defaulting to 1000 [ 1535.662828][T16024] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1535.738646][T16023] vxcan1 speed is unknown, defaulting to 1000 11:04:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 11:04:14 executing program 2: sigaltstack(&(0x7f0000ffc000/0x3000)=nil, 0x0) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000240)=""/115) 11:04:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x7) 11:04:15 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:15 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000066c0)='/proc/locks\x00', 0x0, 0x0) 11:04:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, 0x0, 0x7) 11:04:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 11:04:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, 0x0, 0x7) 11:04:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 11:04:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001540)={0x18, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) [ 1536.650580][T16093] vxcan1 speed is unknown, defaulting to 1000 [ 1536.776087][T16102] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x2010001}, 0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2700000010000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000000000008000500", @ANYRES32=r2], 0x44}}, 0x0) write$bt_hci(r0, 0x0, 0x7) 11:04:15 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x9, 0x0, 0x0) [ 1537.104854][T16098] vxcan1 speed is unknown, defaulting to 1000 [ 1537.297921][ T26] audit: type=1804 audit(1633950256.052:7916): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/122/cgroup.controllers" dev="sda1" ino=14626 res=1 errno=0 11:04:16 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:16 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 11:04:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:16 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1}) 11:04:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) lseek(r0, 0x2a, 0x0) 11:04:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) [ 1537.737458][T16164] vxcan1 speed is unknown, defaulting to 1000 11:04:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x60) 11:04:16 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 11:04:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1, 0x0, 0x0, 0x0) [ 1537.904146][T16173] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) [ 1537.994789][T16168] vxcan1 speed is unknown, defaulting to 1000 11:04:17 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:17 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 2', 0x9) 11:04:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:17 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 11:04:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0x401070cd) 11:04:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:17 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 11:04:17 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000080)) 11:04:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:17 executing program 2: socket$inet(0x2, 0x1, 0x62) [ 1538.886375][T16243] vxcan1 speed is unknown, defaulting to 1000 11:04:17 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x100000010) [ 1539.028547][T16250] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140), 0x10) [ 1539.085854][T16244] vxcan1 speed is unknown, defaulting to 1000 11:04:18 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:18 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x100000010) 11:04:18 executing program 1: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 11:04:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) 11:04:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000002c0)=r0) [ 1539.772597][T16316] vxcan1 speed is unknown, defaulting to 1000 11:04:18 executing program 5: io_setup(0x9, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 11:04:18 executing program 1: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 11:04:18 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x100000010) 11:04:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000080)) 11:04:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:18 executing program 1: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) [ 1540.265110][T16320] vxcan1 speed is unknown, defaulting to 1000 11:04:19 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000006800000008000300", @ANYRES32=r1], 0x28}}, 0x0) 11:04:19 executing program 5: socketpair(0x22, 0x0, 0x3, &(0x7f0000000000)) 11:04:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000580)='4', 0x1}], 0x1}, 0x4001) recvmsg$unix(r1, &(0x7f0000004780)={0x0, 0x0, &(0x7f00000045c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10101) 11:04:19 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 11:04:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000dbc0)={&(0x7f000000da40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f000000db00)=""/129, 0x26, 0x81, 0x1}, 0x20) [ 1541.057768][T16402] vxcan1 speed is unknown, defaulting to 1000 11:04:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x7f, 0x0, 0x80004, 0x0, 0x1}, 0x40) 11:04:19 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 11:04:19 executing program 2: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev}}}], 0x20}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x0, 0x80, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x685, 0x7c948d33}, 0x40400, 0x7fffffff, 0x7f, 0x0, 0x1298, 0x5, 0x4, 0x0, 0x3, 0x0, 0x3ff}, 0x0, 0x8, r1, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 11:04:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000011a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000006f80)={0x0, 0x0, 0x0}, 0x0) [ 1541.553301][T16405] vxcan1 speed is unknown, defaulting to 1000 11:04:20 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:20 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 11:04:20 executing program 3: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) 11:04:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:20 executing program 5: syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) [ 1542.072457][T16474] vxcan1 speed is unknown, defaulting to 1000 [ 1542.087867][T16469] ISOFS: Unable to identify CD-ROM format. 11:04:20 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001000, 0x0) 11:04:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:20 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 1542.220348][T16497] vxcan1 speed is unknown, defaulting to 1000 11:04:21 executing program 2: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @dev}}}], 0x20}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x0, 0x80, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x685, 0x7c948d33}, 0x40400, 0x7fffffff, 0x7f, 0x0, 0x1298, 0x5, 0x4, 0x0, 0x3, 0x0, 0x3ff}, 0x0, 0x8, r1, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 11:04:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@loopback, 0x0, 0x0, 0x2}, 0x20) [ 1542.390291][T16469] ISOFS: Unable to identify CD-ROM format. 11:04:21 executing program 5: socketpair(0x25, 0x1, 0x0, &(0x7f0000000040)) 11:04:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:21 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 11:04:21 executing program 3: perf_event_open(&(0x7f0000002140)={0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:04:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:21 executing program 5: socketpair(0x25, 0x1, 0x0, &(0x7f0000000040)) 11:04:21 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0xa89c26, &(0x7f0000000300)) [ 1543.077227][T16550] vxcan1 speed is unknown, defaulting to 1000 11:04:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8f}}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x30}}, 0x0) 11:04:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) [ 1543.365528][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:04:22 executing program 2: socket$inet6(0xa, 0x0, 0x1197) 11:04:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 11:04:22 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x0, 0x3f}}) 11:04:22 executing program 5: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='#+-+))\x00', 0xfffffffffffffffc) [ 1543.566873][ T26] audit: type=1804 audit(1633950262.322:7917): pid=16569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/135/cgroup.controllers" dev="sda1" ino=15339 res=1 errno=0 [ 1543.598403][T16554] vxcan1 speed is unknown, defaulting to 1000 [ 1543.616128][T16572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 11:04:22 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:22 executing program 5: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='#+-+))\x00', 0xfffffffffffffffc) 11:04:22 executing program 3: syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x142) 11:04:22 executing program 1: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 11:04:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:22 executing program 2: request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xffffffffffffffff) 11:04:23 executing program 3: timer_create(0x0, 0x0, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000240)) 11:04:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0, 0x17}, 0x0) 11:04:23 executing program 5: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='#+-+))\x00', 0xfffffffffffffffc) 11:04:23 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000014c0), 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 11:04:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:23 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1544.647628][T16628] vxcan1 speed is unknown, defaulting to 1000 [ 1544.896948][T16627] vxcan1 speed is unknown, defaulting to 1000 11:04:24 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:24 executing program 5: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='#+-+))\x00', 0xfffffffffffffffc) 11:04:24 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/41) 11:04:24 executing program 1: add_key(&(0x7f00000000c0)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fork() 11:04:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:24 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r0, &(0x7f0000002240)=ANY=[], 0x49) [ 1545.437875][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.444192][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 11:04:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) 11:04:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port1\x00'}) 11:04:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) [ 1545.584444][T16704] vxcan1 speed is unknown, defaulting to 1000 11:04:24 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0xb}, 0xb) write$9p(r0, &(0x7f0000000200)="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", 0x1000) 11:04:24 executing program 5: timer_create(0x0, &(0x7f0000000ec0)={0x0, 0x2e}, &(0x7f0000000f00)) 11:04:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 1545.931433][ T26] audit: type=1804 audit(1633950264.682:7918): pid=16723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/139/cgroup.controllers" dev="sda1" ino=15341 res=1 errno=0 [ 1545.958416][ T26] audit: type=1800 audit(1633950264.682:7919): pid=16723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15341 res=0 errno=0 [ 1545.980877][ T26] audit: type=1804 audit(1633950264.682:7920): pid=16721 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/139/cgroup.controllers" dev="sda1" ino=15341 res=1 errno=0 [ 1545.985808][T16707] vxcan1 speed is unknown, defaulting to 1000 11:04:25 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001700)={'gretap0\x00', 0x0}) 11:04:25 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)) 11:04:25 executing program 5: r0 = fork() wait4(r0, 0x0, 0x20000000, 0x0) 11:04:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:25 executing program 1: setfsuid(0xee00) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0) 11:04:25 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc4000, 0x0) socket$unix(0x1, 0x2, 0x0) 11:04:25 executing program 1: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002580), 0x0, &(0x7f0000002980)={[{@anchor}, {@gid_forget}, {@session}, {@unhide}, {@shortad}, {@uid}], [{@fsmagic}]}) 11:04:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80100) 11:04:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:25 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a01, 0x0) 11:04:25 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001200270500"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000b8"], 0x4c}}, 0x0) [ 1547.179434][T16789] UDF-fs: bad mount option "fsmagic=0x0000000000000000" or missing value [ 1547.225694][T16779] vxcan1 speed is unknown, defaulting to 1000 [ 1547.280565][T16789] UDF-fs: bad mount option "fsmagic=0x0000000000000000" or missing value [ 1547.554844][T16784] vxcan1 speed is unknown, defaulting to 1000 11:04:26 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:26 executing program 1: pselect6(0xffffffffffffff42, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 11:04:26 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}) 11:04:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000840)={[{@hide}]}) 11:04:26 executing program 5: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000140)="c2867cdf8a10a6b9e019224cefd7aab547080bb0eda6fdeaf824c18359aceca2d2038f4c72aed2f861e954aaa73c32bf5dc8e25ec22a6c63408c5d980a20ec661faa80a2dc8abd448c5201e66cf6cc1330f4cd0284bfd0fd8075efb212c72ccecb79c23fe989a0739c8b7270f6e093102f49d08fe40aad69a1cbb5c0547690d84a3ef0584276831d33e1d0578ee01111367693a5c87c66555cde56ef59b1be8e5695a3e8af5ab5d7504cb9a9d0d8c1445181ca5cd2b6ed3d7f66d7d85ee5e5211636b1b19096630b79d4561866ff68990f0f9b59a9e1c92be950e9a63b90b3e1e88e7c18086fd221e7e7d36e6e2798cce94d40deb1c5ef19a035bc6b0474c2e482dc285fbb8171ef9cefb9cb5d5333f39adbaf35843850c78c8dfbb1cd634f372b25c0761c68612a516b899327a3e2510e1c0a6b8772f5aa5ab1fac18d3d1c4e4ed722df07e44c36ed7daf5b8449ce9bc1a13f2654d7f5ac8c3c407879e894bce3598e676ec85addc412b27f9e3c8bb9412ce148dd42bbfecd84d484c80d1c732e3a952fdbfac9e44ed9486f0fff1d3b81224503e783b01949665d1a0b4a4e35971febede6c699eda9a577e794db1851ce2e1b0590361c359e14a9d34582b4cb96652f9997323acd3e0fc30f6235a2487a792433bd70f02cf84aa7c504d2d13eec67063803d2383642a45e7aff04f39a5f9704f188fc9ec170d51cf020aa4b383535d24a3525ccac61d5622d405683598b029c72f185a10c25c7769555f45a4fd692b1ce42c842489ba9bd53e347483e55b9f8587e895761d013892283398b2bc1922d444238fb9c77aeb7de7f44b58884ade92cb05418865e9c33267ae07490223d80c937fa90d6c6af892f4f249ddcc4ef097c0e6bb3520285960c2c8bdf5dbdd07853f6b03a1de8212f7cc0fbcc7a3b1099585a475e0970ac71528ffc663ce602c4218da4c73c6c4a4dc910d75e7e2a652270adb6c4196399588aaec1a9e4ca916e048e30a9b9c110849fb4d992e41466f513a3449bdb98f4cf1786f20eec866ad166aa418e230dc9a236a515e307b57f0cceb4692894159994b82bbd934930037fb34c3dd4ef0d297fedc9e1ee9cb90091a40123634c1238adc0132578998f3db32c0854911be07bdfdd95bd8d6a5e72ec5aaf0bf32b98854ff8e4962831cdd1d100c850aa3e49a382f7491b0675790170de0a31529cd1331abb5242283765ac0ca5ad2144b5761768917aaed30e6cd173050288c21d64c26056939f5cc901846625e56f9604be8c19bdaf0fdcee79c73c00c5ec5b95cfe3e3bcbadd4a1b525ef0a03da67e4c872007f69c5d9828dd252918f883515479acc3c6b1a59342d7b9cc90380794892c1518f7c73a7aeb10abd94c47492f773e96954dacd14cc11eaa96d00e6d28eab5e163df17a32e900ecb6eb9ea5a5bd78a6be3ad81f44b7b26a06df2954e57d23a8d812993440f61784b080fea69737203b6fcc5707ead8502e99928d63bf0a15bd54810f6b56df213b470719df8818a658741e4af66fc79d164aaef2de84235d0f6ff4ffdd73188c8d1c35afd67121a146594a2a294543baa4b4ba604d7deb47233615a12d69bb43a011ffd2b4f2d6a7dedadbe85d5fdaaa01da0b5cd45d05ec62115449ddbddb183fadde4af3cd1671847ae9cf73b3a9d81a70c7f39c188d24486c162017065cec83b8aa0f5562ddce9ba4682d611eeba665eef6013895a170302dc13ea4f815831e135dafcec5a960fc2224582a69737bb89ffd0fc826717986d125648794b87d2b803f1186d7699962733f3dc7de01492d2ecfb5db196c722d735f485df7276e048101ba85968ba6b921730ea3d28d9f3e6509640942334838855b19e0362c1ecf7fd3d6c721789952bedce0305a1f35de51a1bb22b1c8f5308bee7fa936db1f9de335f59567d57ce64af2b0d9020618b47851098d1561f4394535e8491310d3b3bf04dca6723f0ec20f474808b6f2af1ed2e2852bc6a0ee55dcb437c123f5c1c8c7850c1c07069e31619f9dbc60caa8354fba635597b1a0b9a3ff7b8fdb0b49ef28517b08b5e59065e4213a42aa7ca7bd5e138c2390ca4f4524bc130aa1f5a8cd963f2e9d5a6bed964586fb2461983dd97071b4993f118232880d2555e9511fff88ac5bd571836fb7b2acd3393949de6c358409796bafdb99d1ed05174a5be3abcebe57faf061074e59ee79918224a2facd949223de395d08489de6a65293985cd3397df700b62ca18d50282eac4816c82c80baa955ccc6af90a04723195b0bfcc9e04750e03a6fb37b53fdb460e945267d0c8adb128b7e4508d436f1cf298ad94576f790b445ad6405ac3dc311634f7d564c788ba087fc63430ea29ed7e82df625ecc21d447cf9627417aa9788c11c1c77ca63903f64160e36516d10d4fd57c46aef80d47739080a03de18c0d385bffea9889ee8f3fd08d67b954ea3fdee1cc9ad20c87efa38992a210d0962d55c0782d8f3137b9346ddfeea9f64a90f89c7ebb7cb6571bfa095fd1c5770d8ffc17b80c77c387462a5cbcbcde2b3d99615dd970644d96c573a3b70020f5e1402f0c1d2a1dff6ed9c60a1250f888361a70542b6587d5357dd4f257f3ca0c85029de4c3849d2f1a4688a3cfdd6e1e7bcd7297396f73e179202ef2f49eede68152452883abc8fcb60cd5257e302b3a1f4ebcefdc62827922166c944afc80778098f6e57ffd2a98039d3fc7e22bf1f8c63ef2022bf412d139a0449eaab30333efcbe1db68fa7d11f73e639ad7540e3c0d172a85eff426d6fcb65bc5a50f0e72a6f16fdb1d015747ca6467b725d3fec172bd1b7497f03863f1127f2cf081db39df596ad0cffbc225c9f1fd89e75de58ce3d58a714df07d51f2a8231883f9e884bc573b7bf17961b10fd33505a49fc97e74be449b093e23284fe59f30bafed08256e564dd32baa92687a36968f503c1509f019bbbe6801c06d415979f6e6ac0abcf509e4dec3380d1682795f71ad8c51f6b1b139cdc4d4a5b87327d831ffaaba2b1106b585a91af0b78331ee890126f3e5b271180e46e9147abbc1c4a0b1c17c4534198eb9bb6aba5b605ab3d18d4dbeadda9d27cb2b2950a080eff0adfb82e73e38bbf5f84f400bc66956dae98b5b77564857ba0a706fff31ffbe55fd28d93e9821cab7cecbfbdd488256e401532527e8e998a1c6f7570d1520ebe3df87f97daf288f21249fbb7c01dfa914660216c05265ddc49332ec7e4f910c194b029d78f056fe64b38ca96b754e9e983fbe80fb9910c2db8c2a0726ff98364b5a6e180558bad1a4386a2c812b78fb62d987453bac235c7317705c630152b2cfb0a06d4577ef4c113e975b254bf0982778d17600a3cc7ed1c0868e9d8ec6330f5c8e04fd3af6732cca85411d1a1b28e393ffd26e83b136e44c9bedf46d1ebd7d6e8b007507e8b332eaa016dff2171c62f9b04a54edfc496c451238be1228af80330e3e060ed7a8e960150e2b05190b2cfe84ed6aa415522f8cef8d57add9588614d859c39c8aaadfe4c7002b500f521638ffec8b3373f0b88de6f39dfeaf4bab83c96aad317847e0a1a990d746e91d6a069ea785e19e58b1d075bcdf06162983cfa63545bd008394444b140bf225dab99e8be65e5a62ff4d53f5fa0936db0ae8e930a5ab6aa00e74ab919e73dd3603b8988a4a3f213a621b133be05b92537bba7ae74ad33132d05962c3a2a8f2213b41459ef92b72d08660f0467c7a4fde3210570759c1d627743de956a1af9ab2169d594915ec492f3023b0acc7c60b641e349380f807ccda0f0a0fe72e467e93b53cdd9a901a751194619afc7074214b91035995baf749f7d1182f7d1f4f408b78112dbf5024b7b01166be34bab6ae2ce13d1c993f088bbacae7c8a7e044dadfb7d1973bcc3f761d92a916dddb7ad721d402d7fa7c21cf5d02aa73f8a14efe59532d38c1781877de90030bcafa315826e9cb658975e5be9d8440f1207183486ce1130f1b2d9b8e14ca8e14b43a45fba07bc7d267ca8e70252abe195fc3329b9dbf0c4c1e588e94f351d56bf2aeb394c919d3409207f967b05b96aadeb7e23b3b77d1cc81a79d490f07739c5f31e24a0e3a7653d307f982613549ed99b1e1c8de6671ced802e2d2a8f2f067f08d9137d10d70fb615e7e971ac3788ddd3de33f06d6e7bbd8cca42b194d168a6c5a3fa9216375ed3ad00809b132d308f611bc74c97309e4dfa66eb3c8c9a1aebe1a9e15839ad4af22ac8b1b3aecdbfbff51c4c1c710753cfef7b2c9b29f0773b6ac5d53984d166c97b0d42829507d593dbddd91f394cdb3124f5a2e08b947bcaca6c367add9862b66d786e010c7f02809f5ff4a6343d84042f419fb00cd11308e881f5c90e2f5eb68deba1638e4bf4514df8a555dc6a4c7bef2fe0270ddb8a51cedc1d1d73942c5b6bb9a06ece3f37f0cd9e59cb2232061e817e987b0623c0c67adbe0854cf378801c764adcca35bbea05b340824b7c9024a21625c71be993fd7a2e8ccc3c75fa264837d92e11dae91f6645ad74b89a60b45a07fa90925d6b47e38c036aab141cf06bbfdd6fb72bfea2d155c50e462a904e66652d8801223197560619aa6d9ca114e918c863806b308505da5503c10e41dc51ef5aa5b6e9d88b3c56d38d00bb40634f6c48cd8cc9efea1fd1af118d51ab0fcb225f5cc9aeb79c9b1ef292306ee636e0999420f10e8c4dbfbf74eefbf07458b8b9f46f1877634d2b0942c3ba060717f5b7fc4c5f895c920d362ff14728a31b79854d7a8d20b8d209fb6bc29509e9f33e0b24b051b51a1465bec2b350462144dcf236896ffefce794e220c867d88b9e7cdc6770c01635c8deae62ae967de52a59d5579784ac80fe8e656d473fc8a30dcc8a187872fd7f9031a3e768bc0137e0af31870f4b6899130aa0913f11eca38033f083ff49fd0b56c50640bae8c8dd376a3f50cee6f0f0f2c1f5f5a8b6ac68c1cdfe8b41dda0fbcdb5729400118a8a21421742589386ea385f195765dad1c556c33a6007dc3ec7ab6a6f4640fc7c78cc2d921ddd9ff46fb58d1a64c548eb2559104bbe7289f93e19b8626a89c2cebce19cccd621ba0cf96df6a018ae9b46e39f216a6ca23dd73759697826b3cb0ed6f7932252263dd6c4c757e36fb4c3adf11f28bc08e28262b394afe21ba40f703a0ee8e1ebb045cd7fe5819c38a04cb3fc8ebc4bf44209717f9c4789895505ecddbae01c8d7442d41f1e4ad47871def4337216fb39e6e279fecef733ba4ab28b44933dadb12653fd4e4d6d4ec15bfce95ca2994f9f554f835966b2646bb472180b24fecb6c8a230ac38631a68c8dae6048faadb51b1a03a1daf5", 0xec1, 0xffffffffffffffa0}], 0x0, 0x0) 11:04:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={0x0}}, 0x0) [ 1547.988308][T16859] loop5: detected capacity change from 0 to 16383 [ 1548.091951][T16859] loop5: detected capacity change from 0 to 16383 11:04:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10002) [ 1548.139681][T16871] fuse: Bad value for 'fd' [ 1548.171454][T16872] vxcan1 speed is unknown, defaulting to 1000 [ 1548.243452][T16871] fuse: Bad value for 'fd' [ 1548.273480][ T26] audit: type=1804 audit(1633950267.023:7921): pid=16813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/141/cgroup.controllers" dev="sda1" ino=15366 res=1 errno=0 [ 1548.353481][T16880] vxcan1 speed is unknown, defaulting to 1000 11:04:27 executing program 2: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002580), 0x0, &(0x7f0000002980)={[{@anchor}, {@gid_forget}, {@session}, {@shortad}, {@uid}]}) 11:04:27 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000014c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x0) 11:04:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:27 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) 11:04:27 executing program 5: r0 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0) 11:04:27 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:27 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000001b80)) 11:04:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0xff, 0x1}, 0xe) [ 1549.019680][T16940] vxcan1 speed is unknown, defaulting to 1000 11:04:27 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$usbmon(r0, &(0x7f0000000000)=""/188, 0xbc) 11:04:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@rand_addr=' \x01\x00'}) 11:04:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) 11:04:28 executing program 2: syz_mount_image$ext4(&(0x7f00000028c0)='ext2\x00', &(0x7f0000002900)='./file0\x00', 0x0, 0x0, &(0x7f0000004e00), 0x0, &(0x7f0000004e80)) 11:04:28 executing program 1: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 11:04:28 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x42, 0x0) [ 1549.672069][T16948] vxcan1 speed is unknown, defaulting to 1000 [ 1549.777997][ T26] audit: type=1804 audit(1633950268.533:7922): pid=16947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/142/cgroup.controllers" dev="sda1" ino=15369 res=1 errno=0 11:04:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x9}, &(0x7f0000000180), 0x0) 11:04:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2100) 11:04:28 executing program 5: syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x1021012, &(0x7f0000000840)) 11:04:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000c80)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x9}, &(0x7f0000000180), 0x0) 11:04:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, [{}, {}]}, 0x48) 11:04:28 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:29 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffff, 0x283c3) [ 1550.376142][T17030] vxcan1 speed is unknown, defaulting to 1000 11:04:29 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000200)) 11:04:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:29 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000002380)={'syztnl2\x00', 0x0}) io_setup(0x3, &(0x7f0000002840)) 11:04:29 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setfsuid(0xee00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11:04:29 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 11:04:29 executing program 1: r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000040)) 11:04:29 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)) 11:04:29 executing program 5: add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, 0xfffffffffffffffe) 11:04:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 11:04:29 executing program 1: socket$inet(0x2, 0x0, 0x281) [ 1551.418716][T17034] vxcan1 speed is unknown, defaulting to 1000 [ 1551.555509][ T26] audit: type=1804 audit(1633950270.313:7923): pid=17053 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/144/cgroup.controllers" dev="sda1" ino=14628 res=1 errno=0 11:04:30 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:30 executing program 5: add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, 0xfffffffffffffffe) 11:04:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000000040)) 11:04:30 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000200)="04fd6e1a5d898353fa364765a9097981eeb69ba98d775641aed34312379816d440f73c6eef09fe12e097a5158d27b64ab92d18b1a8b5a3663bd3cad88a650af45baf4966c0b99d7c923fbb48f9a9d7caef69ed2057bfcbd2d796b1279d13149428c8bf2e0c65baba925b1d32d2f070b858925855461ae445cc32bac664a13b7a995a5a2548fbbfd41bead30c2e4c839ac0633dac0bdbf26d3f4af7f618c561", 0x9f, 0x3ff}, {0x0, 0x0, 0xffff}, {&(0x7f0000000400)='f', 0x1}], 0x1018000, &(0x7f0000000540)={[{@dmode={'dmode', 0x3d, 0x7fff}}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) 11:04:30 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x6000) 11:04:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 11:04:30 executing program 5: add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, 0xfffffffffffffffe) [ 1552.064499][T17119] vxcan1 speed is unknown, defaulting to 1000 11:04:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000440)) 11:04:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4}, 0x8, @in6=@remote}}, 0xe8) [ 1552.275819][T17122] vxcan1 speed is unknown, defaulting to 1000 11:04:31 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4020, &(0x7f0000000080)) 11:04:31 executing program 5: add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, 0xfffffffffffffffe) 11:04:31 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:31 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x14, 0x1005, 0x0, 0x0, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "f0f914504816c80c100c925e7293e5c94ee0d6c4a92dedcaa5265cceb4ff377bf9748b646e874d73c848bb18d7"}]}, 0x48}}, 0x0) 11:04:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {}, {0x7ff}]}) 11:04:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x88) 11:04:31 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000040)) [ 1552.878897][T17189] vxcan1 speed is unknown, defaulting to 1000 [ 1553.080820][T17194] vxcan1 speed is unknown, defaulting to 1000 [ 1553.306949][ T26] audit: type=1804 audit(1633950272.063:7924): pid=17175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/145/cgroup.controllers" dev="sda1" ino=14947 res=1 errno=0 11:04:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:32 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 11:04:32 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 11:04:32 executing program 5: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0xd81}], 0x0, 0x0) 11:04:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 11:04:32 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1553.634429][T17247] loop5: detected capacity change from 0 to 6 11:04:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) 11:04:32 executing program 3: clock_gettime(0x5, &(0x7f0000001700)) 11:04:32 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 1553.691233][T17250] vxcan1 speed is unknown, defaulting to 1000 [ 1553.809527][T17247] loop5: detected capacity change from 0 to 6 11:04:32 executing program 5: pselect6(0x38, &(0x7f0000000040), &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 11:04:32 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x0, 0x1}, 'port0\x00'}) 11:04:32 executing program 1: getresgid(&(0x7f00000001c0), &(0x7f0000002240), &(0x7f0000002280)) [ 1554.760304][ T26] audit: type=1804 audit(1633950273.513:7925): pid=17268 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/146/cgroup.controllers" dev="sda1" ino=15422 res=1 errno=0 11:04:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={0x0}}, 0x0) 11:04:33 executing program 2: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), r0) 11:04:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB="f7ffff"], 0x64}}, 0x0) 11:04:33 executing program 5: syz_open_dev$rtc(&(0x7f00000014c0), 0x0, 0x144ec0) 11:04:33 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0}, 0x4000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1555.160968][T17304] vxcan1 speed is unknown, defaulting to 1000 11:04:34 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000080)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='syzkaller\x00', r0) 11:04:34 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)) 11:04:34 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREAD(r0, &(0x7f0000000180)={0xb}, 0xb) write$P9_RSTAT(r0, &(0x7f0000000140)={0x49, 0x7d, 0x0, {0x0, 0x42, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, '/\\', 0xd, '/dev/usbmon#\x00'}}, 0x49) 11:04:34 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:04:34 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x9}, 0x0, 0x0) 11:04:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000002380)={'syztnl2\x00', 0x0}) io_setup(0x3, &(0x7f0000002840)=0x0) io_destroy(r0) 11:04:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:34 executing program 1: mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 11:04:34 executing program 3: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000000)=0x0) io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) setxattr$incfs_metadata(0x0, &(0x7f00000001c0), &(0x7f0000000200)="65471671020e086a6742ee941396bb635b297e9a0de15a2a3eb6e67dbc41ddb8a6044365052792354f4e", 0x2a, 0x0) 11:04:34 executing program 2: r0 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) 11:04:34 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:34 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0xffffffffffffffac) [ 1556.168509][T17361] vxcan1 speed is unknown, defaulting to 1000 11:04:35 executing program 3: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000000)=0x0) io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) setxattr$incfs_metadata(0x0, &(0x7f00000001c0), &(0x7f0000000200)="65471671020e086a6742ee941396bb635b297e9a0de15a2a3eb6e67dbc41ddb8a6044365052792354f4e", 0x2a, 0x0) 11:04:35 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f0000000380)="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", 0xc81) 11:04:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:35 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0xa34, 0xa0001) 11:04:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f00000004c0)='.\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000580)={[{@gid}]}) 11:04:35 executing program 2: socketpair(0xa, 0x3, 0x9, 0x0) 11:04:35 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) write$nbd(r1, &(0x7f0000000040), 0x10) 11:04:35 executing program 3: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000000)=0x0) io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) setxattr$incfs_metadata(0x0, &(0x7f00000001c0), &(0x7f0000000200)="65471671020e086a6742ee941396bb635b297e9a0de15a2a3eb6e67dbc41ddb8a6044365052792354f4e", 0x2a, 0x0) 11:04:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:35 executing program 4: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:35 executing program 2: timer_create(0x2, &(0x7f0000000000)={0x0, 0x6, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) 11:04:35 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)={{0x20}}) 11:04:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000140)="f93a", 0x2, r0) [ 1557.022034][T17416] vxcan1 speed is unknown, defaulting to 1000 11:04:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:35 executing program 3: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000000)=0x0) io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) setxattr$incfs_metadata(0x0, &(0x7f00000001c0), &(0x7f0000000200)="65471671020e086a6742ee941396bb635b297e9a0de15a2a3eb6e67dbc41ddb8a6044365052792354f4e", 0x2a, 0x0) 11:04:36 executing program 5: io_setup(0xa847, &(0x7f0000000000)) io_setup(0x5, &(0x7f0000000240)) 11:04:36 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 11:04:36 executing program 1: timer_create(0x0, 0x0, &(0x7f0000002340)) fork() timer_gettime(0x0, &(0x7f0000002440)) [ 1557.452371][ T26] audit: type=1804 audit(1633950276.203:7926): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/151/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 11:04:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0xfffffffe}) 11:04:36 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 11:04:36 executing program 1: io_setup(0x3, &(0x7f0000002840)) 11:04:36 executing program 4: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='check=strict,dmode=0', @ANYRESHEX=0x0]) 11:04:36 executing program 2: getitimer(0x0, &(0x7f0000000300)) 11:04:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0) 11:04:36 executing program 2: clock_gettime(0xfffffffffffffffe, &(0x7f00000000c0)) 11:04:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000640)) [ 1558.054855][T17481] vxcan1 speed is unknown, defaulting to 1000 11:04:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x3, 0x0, 0x1}) 11:04:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:37 executing program 1: syz_genetlink_get_family_id$ieee802154(0xfffffffffffffffd, 0xffffffffffffffff) 11:04:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000180)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, r0) 11:04:37 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x4c, 0x12, 0x527, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x4}}, 0x4c}}, 0x0) [ 1558.549062][ T26] audit: type=1804 audit(1633950277.303:7927): pid=17528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/153/cgroup.controllers" dev="sda1" ino=14211 res=1 errno=0 11:04:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001600)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb2}, {{@in=@multicast1}, 0x0, @in=@local}}, 0xe8) 11:04:37 executing program 1: clock_gettime(0x0, &(0x7f0000000300)={0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={r0}, 0x0) 11:04:37 executing program 3: perf_event_open(&(0x7f0000002140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14a0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x71440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:04:37 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 11:04:37 executing program 4: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1558.860511][T17537] vxcan1 speed is unknown, defaulting to 1000 11:04:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:37 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 11:04:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 11:04:37 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x0, 0x2}) 11:04:38 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000480)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/37, 0xfffffffffffffd7b}) [ 1559.189761][ T26] audit: type=1804 audit(1633950277.943:7928): pid=17573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/154/cgroup.controllers" dev="sda1" ino=14098 res=1 errno=0 11:04:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x341e, 0x0) read$usbmon(r0, 0x0, 0x0) 11:04:38 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x12001) 11:04:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:38 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000002480)={0x1001, 0x75, 0x0, {0xff6, "679d67229ab1dc9def21e9607edeaed905d2a9deedf3ccb37c99164c837a088d6126add70743ed10f2af3c979a27a850fe14fee2f76efc4ac16b9f586d3edc0a11011d656e22bfdf79fa9178a72c25da2cbf126fba1e675c4b4540793e8937828f053227e1578b8e6e65a7744a63d48cbdd5e2043030d34fbc010752af5a49a23ea24ea55e4ff45f7db165c9f52f508097bbdae4b20f2945dd850ff3755052613e6ddbd12292c605b5869d2146235da544cf7c2ca9ed48494ef23a9713d3937bda1aaaa14b93031ec3cb6f4dd6163355012b0d31486a0f04578231739e2f226e15cffb3a5735597d10321b7ce8f12d35876e2941b03dbb9b55a3b2a4644fae0dde41016a9657762f114c5ea1cc0d7ae510e14c9e0065be09868072e13045142ffbda22a8395347dcc61eade18fa045a40071e6d491b5844ee38ae9923bc95eabbacb681c70dc5a60a119cb9ba7dc18842c4e747c3815222aa57526c7a1a82ed45757b5406d58b898bb63a6a7c0dee241a1e9ac085a5e463f2e05c62299d0bff6ce107c4416a8c433a467842814176bd63bd17645f876143a474cdc430a71f37549ae2e39d354d52d0cca4d4c118931643b4b002fd675ce772c712b63120a0fe7da111b03d935194313ad48ea766ce9deedcb9dcab12f19be2be60de1fe6a243fc0ebc143b3ad07914d8404bf259ae9f860aa8418e822a668cf21a7256bd11b0fc6309a718e9e59e8e4d64d055711de5581d69d5a3639c57c348ecf3b546a3e6f8d461bd1098bbe3fee04fb6bbeae16edc1186e6c3f617100d4d757fe27f5a3f7aed0ff5138656a58b1b9c89c171603e7e7b55433e1e0b605f51c3aa717a4f67f2193710f2d15b3124c8fd5a4a54f8134a70136a3333a0b3532d1b02a21c96c44684fc0b44c476e39ef6a9c60494220bd0bcdf273b212f3869f43bff267f0227cd75837e467b8568e35d9c583702f4b20345c1de9573bb121724d438cd5490cc16a6e73e28761033cddd3e576c6e797cdbcbc154b34ac84d5441afff844c00f28813b71fc1aa68f976f90af03114eeabbfb9ad07353dcf3e5165c787a1078fc28653b7ba7abae275cef6d42ee49c87660df435d445ed6e7a7db1e6e60d9eb8cb86f2c78e8ee3a578848a4dba55187bf3f9a9b78633b188f16c22078999be01c2bbcbd53c5a199de8232ef5440f0552a2b65d711b08ff301c0fc645e2decc524e128e91fea8a5710c75154bd07b5928a06606d317274eb1f3a92be7106eaba7f7d0ec9a96ff77b16d153e0b240ca676e6cb54e235269d09551c3d8fcd82aa7eddb8973ea62500c73949f6bde67ce7f754ecb4cd570fa89e2fc045ca0662b9f04a278ea9c8a4110d36c8519f4046ab88aadaa1776cd40cea13242a3f57e4686dd65dd38002cf4f9e0283dc943140fb0964afaf78169732fe1d7e34cd4b97405c4346929d4a4c8290affaf64a8890442dd3874666a521c792654cd1ad055f858af5071fa46367a771afb552308e4cdc3c97a840df6291808f8836f5685da0f75c7802b5bde2b1142a9dd9bc7e09d3484d97cd641d63be84801aea3da14bf110b65f15b00499f4ee8dce5964969b53ecb1ba6b8c543562450d44455208f1171f301184d7b3e3afd332b0e3e8e2a30b500a741957d36e9d1697beaa9abdeda356e5f1c3cb59f5cb7d428470b8c7514ef2d8fd590dea6cb42071269b0da12f50cc4ff96e13d5c0285ae9c2e8cda0046b6add3aca4ae8ed0c44d45063d364316ced6fdf2fd6bcbc315af07909cde043fc16744e933cfacb33fe77f7f6cfcbbaa05322d6ea331dce822c9bd17b0a8cf45e9c025f89087122cdf794a7d4df3f07ed2100447a6e749f1b320b60427b291973c8f256b0d87467be2ff4d5e15551b4da4dceb4ab5f60a11d0a79f68141e5a9729fa31c31bfccf31080427c0391341f01630ac3fb852e881e910a5f01be5c85d87886c4434b945a876368fb70305aa43a0ca838bd230ae32907cd91ce831c6e19831339bb3c5df7a538d4aee2eb627c510d22c64ffe843d882afebaedafdebcf305f99c4f44e652e4fb89424ab69b962d9140fb8beb0c8312252ce63bd6ee1c88797cb600413afd1eea5e82eedfde0eb01352ae2754d1e854bdb1e98e6f0760d7e3d43b24021bd3593aa00cb6998b72ee7ae42ce5d1d32fdc0b27c1eea4b63892a7a81f9bb78a2d67205c6c273510ffbe4ed639de22c12543cb3e5d09741f85a375dbeae5e1db589c05452f8a71d31d71e1af503a40db33a74c3288a2759692bfd3b27e64237607d40b27e82b5e9d8ce9ded2f9becefa0975a1304d724e29d4533f36820a622a405fa1064720beb3bc0b637d8de3f7befbf1f9031e5db0ce977066a450898c95ac63a89ff48736e0bd65660b25ff791f0f1bcfd6ae5b50f545b49ea4e02a6d5232c21835d8e88efbdfcda9550f5c53eedb4162c9e2b6e151ff82df5bac77e0207ed81f69724844c8053bb89af18dc434ead0419b326bc172d96eca977c060ac36f0eec7c6c843c4caab7bdd597f68e07d7509bbf10b57dfada65c7683d3ac04e87404d21c2df9fd41704e2a116336177a27850e34529c7498c5a9b899074c70fdd7a181b92206da58c6313450bb192ae0ca38c7e5efd7ab5df23f620428d250c0f222f3439487e2046f5e2aaaca181e1f8247fec92f2b842ec18fc2e5bf22ff1b8010a59051ca14616f56373b0f08ef145726b0148c259c837850dca2e56585f6d2be6dee473af7598e54f2b5fbfea2da2a6ed9f11466cd0634d18823cd5cc6c3f9f5e4bda4f8f7ff6a8cf62a06548e560d3cc6747974504c448447d984ae0ae663eba6e3a1301858c0c3b1808cf72c3497695a1380554a2d1985ef2562debcbda13b4e08e2dde4dc3e68180d76a9a484b99fd975a0c52f93fa0b15a24ececd0ecd2d9de09d75114186ba6b2f428475350ac7d236d99cdac5c807198a1676e6e969cd6d3d21507d5f99fbd49b0f556bf648b2c01a9f127de8d60374e790dcd75f737439924e888eda44a182316145054d80a59f122edfea6c2eeadf246542baf492880dc13c803a8012aff260c8ec34545833f6762893c26f98cd14e69a2cbd79d4ac79a9bbaa5674a19346df47f318c06a95e6f716a1a32357ca7bd8f7325e201bdced5ca6fd3e9ca322002310bcfc5e1e0cfabbe187953d335ef517d029f894511ea1388065af11037b5d2518ff9dc906f31c8cbfae1a8f5e2a08b9195651f36e2069a286ef61218479374f1cf4cfad7a9fa633bdf1313f2629b71bb44bccd0a53cfd67fe8f822b6e905c0a678cbb8225f9ccc94eb2940a6e7c7533ad448b62b6015ff7ba261c2e8152b6326659c493ee838094fa387d134b427294fbbb8c5be40f79885d63dd2964b35df44f715a4c692f6645ea2d353536bb2455dd652e795153c1cd0b2c205bbb59fc425a7dbde27aa1bc605db018ff2acb49f9ad39e90bf5d9ec187c02eb89a0cd1dcf00c40d88b29c916880670749b404976eb297b40be25ed87a7ef9a51381827446f11552e1671aa61d872b2b002b6608bf4610d87d6ec49d4b85f6e805936a99041fc03e50ba01322e5d1ce82762e01e438a9df66f8773e264c6b607a8e450e003b8bc307c6247127d0953f596f20d9c04abe3b8c8a35e5c4a2bb5f19bcb1c53bd6f43a2da0d6bb176dc4fdcc7b0b569e1b871731e6dccdd6df9660b55cd1ffc022ada7922cb1114df4c055335b371771910221766ce3c8b6371de15bc7c6450e93d9f4045fbbe85194e8cf7d8347956acc21d80277a071004bafc6ebcefa1ea67d9529a384124899a69e6f1e962d4e312b9406726afe7dedeb1db10b1fbfe66594e182f32beb5f48b2bfaeac18d15b4aeacd72480fdec2edff00f414bea3635f8b4b7e535b08270075a6965d4fd61a6da89ab0ae46975dbe29dc1ac3eb01dc7d0ac7b6430b0653ac5de486681d2a7513331dd3a12fc34abeed8b49189baa8c06536a35e60056e6bf8056ad95e736029d73517dc4c5950a3b87b48f099b8f230adc1a841d7d49d193ed1c1f224f9c03324e768d7f3f8afa431db8b60e0430eda82e1563b79128a589c1b14f66a7fd5d915587ccde74335b49aceae26d8aeebc0940edfd0910575704854a21e3be5338004340a70e682f92683a9d0b866689184bd397da0a52146d05eb74f06dc3865d498ab65b55139a11b43c18515733c18074a6c7ed455aa307cd9172fef5bf46d926215da741442373e51ef09234e75ea09041f06238daf6331190d264477070f8c125de2313788724f7c337bc4202df9a30058468e848526d63992b5c1d609f916740a9686590a9c7eb7c7c9d1064ef07751f83e65edaf8d9c2b56dffd458e511772fdebae40bedde9eaf1aa7d5be0e8a61aec87f94367ff6d2be4a6481bffc0b277bd9925b09b72e89f34bac6868f93c553e425b892f52bdd014ec4b3c3c061516520d7c5c2ecf4ef1e5323bcdbba5fd991d188f9302f55b2bdeec44519e54bef6c77c6a873f062bf9cfe463eea5738f1f048d6e57e51337002d28698691cd2723c2eac9c0d72feb4cac5c2a4d4fc3567ff72248881624d80684914bac9e5b332186d84e4a3913593eeb82ceb6bc04457d002551f6fd3c7518cdee7e258c8cb97cc229f2d9d95bf68eb167ce23419f2766565f71b735b110db863256527f5100c5d41bf6d3e6c64058715a267bdd57053658d3ac8440ffe28a9b1b28b5e1c039e24291dbe62d9de6d8d3a972be87cc349cc2ae3205fc32fe54353577f7bbc86c22fc6f76c63b942e20aed90e5f939c7915ef221cad515d637c7e79a3b992ee0c6f6311f38b4c6a01ab6b5e04e6d6b80c788087e38cb3157edf5892d81303be4370ea9aed55380d30e2d05de5dfd0b16f8b114b99d7d1009a0915df06a37ab8b5cd8581fc9de2df5654c8e3366db77f65454936a25af97cb9bcfdebc2c24a9d54bbf7c3f0ccbb616e84f1670ed68b4a54740f83d16ea18027ee891d667d09f40498bdb723ba268f94bfa5d974d4be94c88d049c2454fe3651e1f3b1d581a99ee8a22cb1a4855147755ce3e7898a13ffd5a78db1514176fe93e1cb604fe5b2b67d2683f024e0a7c4e5018b3d50100492508be2a4caa6ec60af77ab37f0f33f708d6a7ae5c1aa8d112ab18bf1878ac7560871b76557bf2898f7c74c0af67eef34f3c9cf5797bd572938dff91b9a18989a632bf34960ce74263cc7095b325dcbf83f3c573b7bef7a91a42dfa006886218e1ff2496a2f23c52eefff2d44efa5dbebe8db54b3a6a39eff9a9d54c2477facb70df41fe11b2be090af7b31041f6273dc85c742b592c12a487eaeff39b97e78483671d4876703c2068d4d7135c89d2b4a312bf07a0b0064cd89f7c2ecfc1bf0990309162c0f08dd5d8fc1e81f500691e5c89b77ce6cfb84e9730e4e1dff1554f00eefc47539baba395df9ee3f8417d547215c8fdbfb8a64c03d7f649a170bfa08238d4be5f7122d2cdda2f00962dc9cce0f22a5e58ea402e2ef60ef695b329256e6e3c9ecacf76b9dfcb0e3d243f6ebc81bdc8dae393e8578e179117286c3c5e46b5c9d6bdbd8bd39b3d3fb11c18bd8d28ca5bdcf3f9e5c5aff10708c19ba2a0094f1ea8931682268e5e95371f8145e8da10c51b0305ab7f34f9ec83b9483324501d7fd7150f7f0f27c1907087bda5db9166106037c6795f23c0ad945eae62a8055165f264245e6a927c731c75cbd3ccbb9110cb1dc9f00f2f96dab6715a95e9ac542779a41dc110ec6afd6d99076c4b666989b12c9e1e833b25"}}, 0x1001) 11:04:38 executing program 4: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:38 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f0000000040)) 11:04:38 executing program 5: write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0xb}, 0xb) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000002c0)=""/167) [ 1559.774024][ T26] audit: type=1804 audit(1633950278.523:7929): pid=17590 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/155/cgroup.controllers" dev="sda1" ino=14132 res=1 errno=0 [ 1559.877749][T17594] vxcan1 speed is unknown, defaulting to 1000 11:04:38 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001600)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x3c}, 0xa, @in=@local}}, 0xe8) 11:04:38 executing program 3: r0 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="86", 0x1, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) 11:04:38 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000580)='./file0\x00', 0x4000, 0x0) 11:04:38 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000014c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xacbf}) 11:04:39 executing program 3: r0 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="86", 0x1, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) 11:04:39 executing program 2: perf_event_open(&(0x7f0000002140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) 11:04:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='%'], 0x60}}, 0x0) 11:04:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:39 executing program 3: r0 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="86", 0x1, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) 11:04:39 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="40010000724913151464000000ad00000000e041", @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000100102"], 0x140}}, 0x24004001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:39 executing program 5: pipe2$9p(&(0x7f00000001c0), 0x0) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='keyring\x00', 0x0) 11:04:39 executing program 2: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002580), 0x0, &(0x7f0000002980)={[{@anchor}, {@gid_forget}, {@session}, {@unhide}, {@shortad}, {@uid}]}) 11:04:39 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x0, 0x0, 0x7}, 0x20) 11:04:39 executing program 3: r0 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="86", 0x1, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) [ 1561.195838][ T26] audit: type=1804 audit(1633950279.954:7930): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/156/cgroup.controllers" dev="sda1" ino=14004 res=1 errno=0 11:04:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{0xfffffffffffffffd}], 0x1}, 0x0) [ 1561.295088][T17678] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:04:40 executing program 2: pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r1, &(0x7f0000000180)={0xb}, 0xb) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) write$P9_RSTAT(r1, &(0x7f0000000140)={0x49, 0x7d, 0x0, {0x0, 0x42, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, '/\\', 0xd, '/dev/usbmon#\x00'}}, 0x49) 11:04:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'virt_wifi0\x00'}) 11:04:40 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 11:04:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:40 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000029f047"], 0x14}}, 0x0) 11:04:40 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:40 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 11:04:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="f7"], 0x64}}, 0x0) 11:04:40 executing program 5: socketpair(0x11, 0x3, 0x7, 0x0) [ 1561.801434][ T26] audit: type=1804 audit(1633950280.554:7931): pid=17699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/157/cgroup.controllers" dev="sda1" ino=14115 res=1 errno=0 11:04:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20) 11:04:40 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[{&(0x7f0000000140)="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", 0xffb, 0x6}, {&(0x7f0000002280)="ad", 0x1, 0x80000000}], 0x0, 0x0) 11:04:40 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001200)={0x0, 0x0}) 11:04:40 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) [ 1562.137039][T17714] loop1: detected capacity change from 0 to 264192 [ 1562.290122][T17714] loop1: detected capacity change from 0 to 264192 [ 1562.443379][ T26] audit: type=1804 audit(1633950281.194:7932): pid=17727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/158/cgroup.controllers" dev="sda1" ino=14132 res=1 errno=0 11:04:41 executing program 3: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) r0 = syz_open_dev$rtc(&(0x7f00000014c0), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000000)) 11:04:41 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@loopback}, 0x20) 11:04:41 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:41 executing program 1: write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 11:04:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:41 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 11:04:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 11:04:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000400)={0xff}) 11:04:41 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:41 executing program 2: getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) setregid(r0, 0x0) 11:04:41 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd606335a30008000000000000000000000000ffffe0ff0000000000000000000000000000000000aa"], 0x0) 11:04:41 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:41 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000240)) [ 1563.130526][ T26] audit: type=1804 audit(1633950281.884:7933): pid=17754 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/159/cgroup.controllers" dev="sda1" ino=13970 res=1 errno=0 11:04:41 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000200)=[{&(0x7f0000000600)=""/194, 0xffffffffffffffe5}, {&(0x7f0000000040)=""/101, 0x65}, {&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000340)=""/17, 0x11}], 0x6, &(0x7f00000004c0)=""/240, 0xf0}, 0x0) 11:04:42 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3}, 0xfffffffffffffea0) 11:04:42 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:42 executing program 5: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x1}}, 0x0) setitimer(0x0, &(0x7f00000000c0)={{}, {0x0, 0x81}}, &(0x7f0000000100)) 11:04:42 executing program 1: setitimer(0x0, &(0x7f00000000c0)={{}, {0x7}}, 0x0) setitimer(0x0, &(0x7f0000000000), 0x0) 11:04:42 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') 11:04:42 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0), 0xed) 11:04:42 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:42 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@in, 0xc, 0x0, 0x2}, 0x0) 11:04:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) shutdown(r0, 0x2) 11:04:42 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000), 0xc) 11:04:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 11:04:42 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1563.867624][ T26] audit: type=1804 audit(1633950282.624:7934): pid=17783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/160/cgroup.controllers" dev="sda1" ino=13946 res=1 errno=0 11:04:42 executing program 5: readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) acct(&(0x7f00000001c0)='./file\x00') 11:04:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:42 executing program 3: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1811, 0xffffffffffffffff, 0x0) 11:04:42 executing program 2: truncate(&(0x7f0000000780)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 11:04:42 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:42 executing program 1: open$dir(&(0x7f00000000c0)='./file0\x00', 0x502365760d8fd37c, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) 11:04:43 executing program 5: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x1011, 0xffffffffffffffff, 0x0) 11:04:43 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0) r2 = creat(&(0x7f0000004f80)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 11:04:43 executing program 2: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 11:04:43 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) 11:04:43 executing program 1: pipe(&(0x7f0000000140)) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000180)=""/4096) 11:04:43 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1564.510312][ T26] audit: type=1804 audit(1633950283.264:7935): pid=17817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/161/cgroup.controllers" dev="sda1" ino=14678 res=1 errno=0 11:04:43 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 11:04:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:43 executing program 5: syz_open_dev$dri(&(0x7f0000002100), 0x0, 0x0) 11:04:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000004740)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 11:04:43 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x7fdb, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, 0x0) 11:04:43 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0) r2 = creat(&(0x7f0000004f80)='./bus\x00', 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 11:04:43 executing program 1: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000043c0), 0xffffffffffffffff) 11:04:43 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 11:04:43 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4"], 0x9c}}, 0x0) [ 1565.225636][ T26] audit: type=1804 audit(1633950283.984:7936): pid=17843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/162/cgroup.controllers" dev="sda1" ino=14369 res=1 errno=0 11:04:44 executing program 5: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000680)={'bridge_slave_0'}, 0x11) 11:04:44 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:44 executing program 1: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x9}]) 11:04:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000100)={0x0, [], 0x0, "ab8f669ded87e9"}) 11:04:44 executing program 5: socketpair(0x18, 0x0, 0xb63, 0x0) 11:04:44 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1566.184769][ T26] audit: type=1804 audit(1633950284.944:7937): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/163/cgroup.controllers" dev="sda1" ino=14338 res=1 errno=0 11:04:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @xdp, @hci, @nl=@unspec}) 11:04:45 executing program 1: io_setup(0x1, &(0x7f0000000080)) 11:04:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @xdp, @hci, @nl=@unspec, 0x400}) 11:04:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0) r2 = creat(&(0x7f0000004f80)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000000)) 11:04:45 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:45 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000002100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000040)={0x0}) 11:04:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 11:04:45 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x4}, 0x0) 11:04:45 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:45 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) [ 1566.804451][ T26] audit: type=1804 audit(1633950285.564:7938): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/164/cgroup.controllers" dev="sda1" ino=14098 res=1 errno=0 11:04:45 executing program 3: socketpair(0x2c, 0x0, 0x0, 0x0) 11:04:45 executing program 5: io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:04:45 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:45 executing program 2: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003140)={0x0, 0x0, "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", "f5e70cc2f5f46f7d48bb31f9a99bfe860252a2cdf343e9e0983f6b68453748b7c279a069ffe587dffea9649a20b35fa9290a5ab52309ffac37553faf6f5eb4d0dec8a9203c4c37a7f7ff1029888ceae9ba436678b598fd3b20867a41e0ac3d5047776332dafd2eaa6431bd5d9c657b6aff62019bb5a9d38e50dab724916ff4b543f208b105974bca7147e0d08aa9e09fe3ca5316257c862c925156c5ce119e34a5500c39d84570ee2d8fd2465753e47fd111bc77e05ebd87bc527926e17cadd0111aeba3933d9d3962844ee78d6e97ddc9a6e01f7d0a43ddd3b2d4277ad5802784ff75819c2e683e23c38ab9d5c48f6ecedc62d863c706c10b2c194aae205bccab1214614b669d052cb7ab4663835440a7893a57d9408037a7b652a1f56c30cc79cde7670b4728ed7d94a763ed551b96ad0eea5334bbc3e353c5c11c6888a953f1c34370b2dc16eece407c16fe5851748dd1c7761bffcd11b1495ed918a04ff28063ac6d9454389d3fb0390fd484ed80f68f8d5c844f560d085e24ad2b69be3ec7ca8355743594a707aaad21222f9fd704d4fcec4e651fd0b2ca37929045a2c3e4cb3f235d260249d13afb0262b986d86628ca339d54ab7d59f36b14b1a37dc792ccf20fdfa003aa42a496b7ebbd6e2df579845c9a111e5de784966b29aaa0ffdae9bb6038ab53a0c2480be1a8f2688ec0e87909c7327d5b9a2e31b44735466b1c859df158a0439658e927b2b77d4dfa29e26ca2f8022ef9e48a4d3f24eb944599d8d83d2569f5f57fafbfa1b0a8f33c1ee8508e64f86b2699941cf55895ec415ede5227580e3f85bdd74e64e49b0bcf5d7999db3d52e13d83b89c21220796475c9993bd6b8b7d15cce24307751626514523319fb17d35d1dcab197f461c3caff997f88d420c2e55b66cf945608b12e849227fa75e74e1cbfc46591c7fd7007da0aef53838860c16d0c2f3c01f7b2f5d074b43f5bc5a6123cf4c7bdbafa00ace4fc95aa430cbff10af175008792c0d7d2a9467a7b8b22f5384fac82726e073b11ffe2a89f3e5dc90a5c8542014094984c92e00e1ddbfd7e6f2190ed9f246270edfcc22524f3721aaea6d7589072cb4187dd8fd7e4f152700e9d20f082f654e5e151585ffdf953b907e3271daadbcc85deb79f856476847c8a754d7397731d0783c9469ecbccd378fea244ef1bae704bb1ec1b7b6ee5ed04ab2d621fd853f67b6e271dbe442da570ef52fff00a477473ed096f16dfdebc224cc1f843874a6e3a01f2c8a3de6da6bb365840e07d462b3e9bee4eb2d4805ef811a788961cd0ade04ab8d9331847563af0b785d5875d14c8e4f682411370697be602e9c0b606e6eb0c1b3b8d84af4f8a0d4095b50609c20015ddd26dff487d9076fd3c47b71376bd547aee9dcdd4c5936fe321beb57c6b878861cea79ee12b68f5adc5ae566b7cd2d4f09525e08e008a920ed1b7193791e8d36aaffbfa6fbb57a9d5681262c85f347e46fe7dc1f53bf69a47f89fbc69e9243d799711f11fef32314149d9b844ebba347a7da31019b090910b2357f2ce0bf9060b69e311f3928d2bd1bd8952700532041bbb20f5631f52834d989d87ad23990984e14d3e770d43c98426e24eb39bce016a9d317d7f2e142d48bc134e168e302886fbaef3651000447817a679cc1a311c8110b433b888bac5969dc6dfcd9d93b7e4469d08465b2e768a8997f5f0c18a828e3258f9cb51c63a0a336112287c0b4d3f252695580c5d54ced88a26c9c4c1a98566a69ec22dc907368192506841fb5f7c7554851bf17567c584f9bc2584358267c5423fffb2987514d9d79619615d47893fe0eb86903d8f59cc9cb119e476e57914e308ba50c6492ee5efb533a031edb4c179f8f4ea744636da7b0db3a4fb24202236505ee8e98eb6935b2a5ced384d24889b7f0d981fc221f8c28c553ee9f5c8208ed6840e4133f32a4e0c1dc19d0f93e3902257e31defb44e2b93dc8314fa61e4ef4682201526f0a1c1ce0b497a85a0fff1b801eba8896abc53865b1e01f96f25c77bc6de0ea299573344ea17cc1d380c7f9a20bd33d837a6662ad648fbbad5929ababdc73a71667a83ef7a64ae93f1a50237b5fdae88325dcabb80527e0e15e303943c1332b595af45d0420860afe8483b36fdca4f708fdcae62fe588cb428af9d9bdb46e23ced9b0c46d0ee693c04a8d8c2a96b989b6ee59fde8cf46d688316b4903b10ad7e250ec296832a0a54b7e7143b764ac7c38576ad033bf0f4accc529f4ece984a6767f58ff7694b2d6ce2d7b1277bc7de875454f9c6a73fb228e24a69197f982a2e93e9020a1e3e125495c41aee91ebb826ac159d166b523fe40e11b5855e4e8d65e853fa957d00c08e9173e60f25c4616670da5a16a9b57df50344001b68a28cb3bcb2af119254240d534237cb0e53f9e06012b9b35a2c2be7d85901e2b973407170c52e135e7f5280ac22d101c7f180cea848c9478b4866193133128155ca1ae744459be139b07b0509c4d668b44c67badd3c1911ea8324e1c0ac8bf3cfa89fd60e56ac7bf09210710ac5b7d3f709bd7cc68590fd085b60f76e6da2a4147fa5a2ded007c84a8831ac9db9ac0c9c98656c56bf359c5b44c38fcb6e75d6594f520e4517d715453740712220d7ab3043f00fec51b1a58baecd95223517a0da144cf3613bfb0327f4874b58d335ffb9bd1783fb309a1bfe95239b7988ccc53f6824d70c9bcac0b69d4ff4a5881aba6fd284c4306351be3a7824f0a0c7c434f80f532809dbf4b6f3d202927daeb30db38864aebc8f4f04507c59fc3dd228cbc95f97ed0abe2ed774e73bbfcb687b59d5d752f4bf9c58faa66369b4759b696331ed2871606a06c480f5de170932eb246d0e5375a397dbf70f3ba9ea3ac130ad36c2fef11210710339b6905cfe3036aca0f380c77c747172b4fc5cf603957065ab317b13f74a751b61a6ff629c70955891b2f7d7f0a98b882ac886478f914de82fcf5dfb1bac8f7794cbf4abd7f6a563a0a8bfd1daf38ad56dc1eb7920bfccb2e22270edaaf8988293f4dad24dfaf7b10c72afabe9010a77f7855d0a520d636100672b4c92bdc72d35f8f9eb728db44310072bba5db99ef6b1bb4a0c4734c6d952ba39fcb9b05acaf967d517c851ff400cd696a77cf3929be6b60ae4ecd6b83295edb70897be895d4272d0efb048c0caa7717633f297c48a29a4cb39d180fdd998533d3b48aa21d60b76f1fb385b9a9f279353994bca70b08a0efad15b094e43c6e9c2102852b96e5b23490d2c628c4f0130a35f13cbc3db2f559e68a5f022f02fe164f19caa97cfe2178cf918d4a738673c00135cb091f053d7c02095bef1fb22acaa4c1d9c8ac53895cd801c65fa0224877a2b3734be79fab9adb54853fa751c308ece38876f8b678e32f63ed893c3bcafaf47634be5a0ee04ec394fe09f1c20b2158e8be0c955003921fab40e19f00965d371fbc85a22720988b559f8641d82621570c224ced43e022c7c3d1ee0072d42ca164e6b55e669c70cf75cd002d95449ca07d377f6ba806df163c812d671efbd61a23931da87f2661e4a688d1df022dc5882cfcd688b27699970b1fc3b6dac2d176daeaa686c4e306792c2fc9082ae7abb5d65407164928ca168701e1701dc2b987e9f675719eaa51f76ef453e559e991dbe0d329338c25b1569d1214a08c772e6248df5a53e335bcbf2848237d9158fbd608d537512f621eec96370e36f0986124dd3e99389f0e28ff8514d1330c513789c3bb847e8209b06abf58ef09b689cf80b42aa0a1477b474469bbf4e4ef537b39681d8575757dd6788b9d54930df289a06280768e41d9680b18c01e639cf5760ff2e8b4ffeee66a550bbff6c04b64243f0645cfa2ca6298b4d2bf9d1d239ae30650ee6fde9db34a94af244911f4c03f5b308edeffe3fed6853612b83d6d91afa046ff05f1070fc4190d82cd03e075e86a63c5ec42a367175e0b588c58e17d619d11df96551d423482ff4b24c9d6945223850f7ec581a9d718e4f3840acef8324303d28c4998cbb94dfbfa01fd5d714dd1055d1cccced8d94e6eacf0ae25bf4be3edebfcba0a52546f45e2f116f7c7918f93afe140f21e10339d2a1c4aa48cba64a908d57febd39efac6aed8c146178729c57ff83674dbef3bc9c288f208cdd8e94a5da79fc3c04bd9d2b32e7a57af55b105723d8bb2f180dfd47abd07bdd7964a7a2b2cca189eb269d2786040ac149729823dd054ab89c2bfda4a674784545107c87c3d861aae91fca25cfbd8e71d8e593b0f497dbeeb77de92b9160c1c151827193d242f03761d82c618b1b8d4cbc9cf5dcba22c119f9a19b893c3a52902ccf58dafb32f23c62eda30f958ff2d0d1fc684c73efdf28d11aa500078b90e7334d05b047a26cb61bf139a115ba306a51256d6207a0c6ffab060d5cdda032b22f979cedce6cf436870e56d3262cb71f73525ce9372c19d11cb819f0eeb1bfda27c68e49ac62a69bc3598357e9b390d5e14a35b1e7973293cca0cef199331abd8f368fdefb3845c25328d4edd621469372f21c8a4b18ad47f7f7421f530c0d352865d873dc46cedd1de1616e2b0ad9f1efc74891363ccd8409e377da4ab6d92e39d5be507bc525d5cf38218ca541dd053d40532681e850262f2fab79740eb2b6257f776c185befb9564027ce74c23fea5b67ba88fcb66086b823643e47c4dad4bdabbb811cb90137cf4a5d9af540f0a4e41d23a5d527d91bb7b009acd177c99101470b5f3a5dbb03c21c1cf99116d7a4dce645f3a045e25a2e7f626524fc934b6455855dc12821b3413bde2a2d0ba78138d5d3fba1e8a365bc67b3dfa8a4449d395470565e99003d293cbccc4d8c1b050c60178626048d341d5198cba89693140a21776e867123fe389c606f017f1a2f8a9f8c519bc815d3674a0393f8c88d4b51a1c0dc55fbcdc29efc456130b278765e2190d687db68bfe057b41332c553a5983a57c5f924fa0773b65e65665f185190d62dbdd3e302e4d98bd45a0bc5deaa83d1f62da08e1454e3bc4ade612979a80145c69b34c37b07b74387d39ee0afb95f031a6d55ae405bad555aea325286245755df88865761ad63ccff040f6d8635b56094f78e46c2b23b71e5d95a6fe99276a4f7ffe7064c7281bb47be5a62e829275e7a2836907d54225ad0fd70a2494fd86a224f7082321b64dcc51a548fabc45081b0cf2ea42516436f67596f9b8516899190e4362db1d157ce4cc457ee734e4202106f2882caa93546f2be75d8f0e44967838f1f4d70def435f94e0f442139c7178d5ace9ffe9cd1be2d29c0afd8009dbe9b07f86fccda8aa8fd3422f09ca04cdc6b4d392e673c0963af9dc6c3ab44efddec4f6d2bc8b6b832b7f7a8710c978810a528f619a5660dae6"}) clock_gettime(0x0, &(0x7f00000046c0)) 11:04:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 11:04:46 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000200)='rxrpc_s\x00', 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xf1) splice(r1, 0x0, r3, 0x0, 0x6cc253fb, 0x0) 11:04:46 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) 11:04:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:46 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 11:04:46 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:46 executing program 5: select(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:04:46 executing program 2: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) [ 1567.744815][ T26] audit: type=1804 audit(1633950286.484:7939): pid=17927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/165/cgroup.controllers" dev="sda1" ino=14338 res=1 errno=0 11:04:46 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000040)={0x0}) io_setup(0x1, &(0x7f0000000080)) 11:04:46 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:46 executing program 1: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x0, {0x2, 0x0, @loopback}, 'ip6tnl0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x2, 'rr\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 11:04:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 11:04:47 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001080)) clock_getres(0x0, &(0x7f0000002080)) 11:04:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000100)=@in={0x2, 0x4e22, @remote}, 0x80) getpeername(r0, 0x0, &(0x7f00000000c0)) 11:04:47 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:47 executing program 2: r0 = syz_io_uring_setup(0x6f85, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x2, 0x20000000, r3) [ 1568.441843][ T26] audit: type=1804 audit(1633950287.194:7940): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/166/cgroup.controllers" dev="sda1" ino=13970 res=1 errno=0 11:04:47 executing program 3: add_key$keyring(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 11:04:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') read$char_usb(r0, &(0x7f0000000880)=""/4096, 0x1000) 11:04:47 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:47 executing program 1: clone3(&(0x7f00000001c0)={0x40500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0, 0x0) clone3(&(0x7f0000002c00)={0x208000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[0x0], 0x1, {r0}}, 0x58) 11:04:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x100000010) 11:04:47 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) 11:04:47 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:47 executing program 1: add_key$keyring(&(0x7f0000001640), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 11:04:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:04:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) [ 1569.293082][ T26] audit: type=1804 audit(1633950288.044:7941): pid=17981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/167/cgroup.controllers" dev="sda1" ino=14562 res=1 errno=0 11:04:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 11:04:48 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/nvmem', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x10000000) 11:04:48 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:48 executing program 1: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 11:04:48 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a014c2f"], 0xa) 11:04:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:48 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:48 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f00000012c0)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 11:04:48 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred], 0x60}, 0x0) 11:04:48 executing program 2: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) accept(r0, 0x0, 0x0) 11:04:49 executing program 1: socketpair(0x10, 0x0, 0x6, 0x0) 11:04:49 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x104) [ 1570.550992][ T26] audit: type=1804 audit(1633950289.304:7942): pid=18027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/168/cgroup.controllers" dev="sda1" ino=13956 res=1 errno=0 11:04:49 executing program 1: open(&(0x7f0000000380)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000001680)='./file0\x00', 0x20040c, 0x0) 11:04:49 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:50 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:50 executing program 3: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000400), 0x1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 11:04:50 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) dup2(r0, 0xffffffffffffffff) 11:04:50 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:50 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x200, 0x0) bind$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a012e7f"], 0xa) 11:04:50 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:50 executing program 1: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) shmdt(0x0) 11:04:50 executing program 2: r0 = socket(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) 11:04:50 executing program 5: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:50 executing program 3: shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001000)=""/24) 11:04:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)='&', 0x1}], 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) poll(&(0x7f0000000080)=[{r2, 0x1}], 0x1, 0x0) 11:04:50 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:50 executing program 2: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/4096) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001000)=""/24) [ 1571.993508][ T26] audit: type=1804 audit(1633950290.704:7943): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/170/cgroup.controllers" dev="sda1" ino=14133 res=1 errno=0 11:04:50 executing program 1: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 11:04:50 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:50 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40001, 0x0, 0x0) 11:04:50 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) dup2(r0, r0) 11:04:51 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights, @rights], 0x78}, 0x0) 11:04:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x0, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:51 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:51 executing program 3: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 11:04:51 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/244, 0xf4}], 0x1, 0x0, 0x0) 11:04:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:51 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040040, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:51 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) accept(r0, &(0x7f0000000500)=@in, &(0x7f0000000540)=0x10) 11:04:51 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0xa}, 0xa) [ 1572.809393][ T26] audit: type=1804 audit(1633950291.564:7944): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/171/cgroup.controllers" dev="sda1" ino=13970 res=1 errno=0 11:04:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:51 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080), 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000632177", 0x0, 0x100, 0x6000000000000000}, 0x28) 11:04:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@rights, @rights], 0x28}, 0x0) 11:04:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x0, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1573.504327][ T26] audit: type=1804 audit(1633950292.264:7945): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/172/cgroup.controllers" dev="sda1" ino=13970 res=1 errno=0 11:04:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, 0x0, 0x0) 11:04:52 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080), 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) 11:04:52 executing program 3: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r1 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x1000)=nil, 0x3000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) 11:04:52 executing program 1: openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x30040a, 0x0) 11:04:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, 0x0, 0x0) 11:04:52 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080), 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x0, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:52 executing program 3: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) mlock(&(0x7f0000ffb000/0x5000)=nil, 0x5000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ff4000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 11:04:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, 0x0, 0x0) 11:04:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r1, r0, 0x0) 11:04:52 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:53 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000464c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005d100)={{0x0, 0x9, 0x0, 0x101, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0x89e8, 0x0) 11:04:53 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f00000001c0)='./bus\x00', 0x6, 0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)={0x74d, 0x6b2, 0x3, 0xffffffff, 0x4, [{0x0, 0x3f, 0x0, '\x00', 0x802}, {0x3, 0x9, 0xdb, '\x00', 0x100}, {0x0, 0x1, 0x0, '\x00', 0xa01}, {0x9, 0x4, 0x0, '\x00', 0x4}]}) [ 1574.294393][ T26] audit: type=1804 audit(1633950293.055:7946): pid=18163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/173/cgroup.controllers" dev="sda1" ino=14833 res=1 errno=0 11:04:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040040, 0x0, 0x0) 11:04:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="00424541303101000000", 0xa, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fe", 0x19, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) [ 1574.484771][T18172] hub 9-0:1.0: USB hub found [ 1574.491178][T18172] hub 9-0:1.0: 8 ports detected [ 1574.670862][T18172] hub 9-0:1.0: USB hub found [ 1574.675916][ T26] audit: type=1804 audit(1633950293.425:7947): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir959851478/syzkaller.LnJ09b/952/bus" dev="sda1" ino=15141 res=1 errno=0 11:04:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) [ 1574.726641][T18172] hub 9-0:1.0: 8 ports detected 11:04:53 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) write$P9_RREMOVE(r2, 0x0, 0x0) 11:04:53 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:53 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x0, "22f8ef135f31fe812b0fac52d6b7f6204ddd3f00839aae4c7a22aac2b0e7ab5b"}) [ 1574.851461][ T26] audit: type=1804 audit(1633950293.505:7948): pid=18175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir959851478/syzkaller.LnJ09b/952/bus" dev="sda1" ino=15141 res=1 errno=0 11:04:53 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 11:04:53 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x9100}], 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 11:04:53 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1575.077179][ T26] audit: type=1804 audit(1633950293.835:7949): pid=18198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/174/cgroup.controllers" dev="sda1" ino=13972 res=1 errno=0 11:04:53 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001a40)=ANY=[@ANYBLOB="1201000050cb5320450c10108e490102030109021b00010000000009040000017b35040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000780)='0', 0x1) r2 = dup2(r1, r1) write$char_usb(r2, &(0x7f0000000240)="f1255d6684acb75d13898206ab16f042957193c6c755d4abd7e15e64f47a52f3b83c187896e33dd705324166edb8d4c004ff63a8b5418d1ed3238f310dccc6933a45ea62f5c162ec4c944f5da80b68e9ebae1afa3989e3fb9abd37380567cc2a024c7266f57c7d83332dc4dc84", 0x6d) syz_usb_disconnect(r0) 11:04:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000632177", 0x0, 0x100, 0x6000000000000000}, 0x28) 11:04:54 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001a40)=ANY=[@ANYBLOB="1201000050cb5320450c10108e490102030109021b000100000000090400"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000780)='1', 0x1) syz_usb_disconnect(r0) 11:04:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1d6d079c4d4f58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be266e31a8021e00b00004e080addde36e5fdc6c42a7b3f912f6906a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003845404b04bf97c4772b42bc32b363956cd8bac9626bcc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7399423f84c6fa51fb50f14f9be8173a9639a79fae885d05afe002c0e7821d406c967379e7521292d24d6c8034e2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d737acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4b9276e9dc330c9cb7fca701fcb947d6017ad573c4772ad790af252e648048c31bc604324f59511722a6cd9bbb2cf327a8f5dd89315b8c8650a708f2bba30ad7804fa4140f1a754b7d3f510ee687ae5006619dfb3a37d897662bee00189f43da46ba3079f869d1ea172908a231c84cbad3365d1d2f2ef93a6a70c8b8ece0e243eab7fa34ab0a7e7e497065e5e282e8852a243d528075214af000000000070d42182d8f3a347d48289865f75331d888c72df1da4b290582f94064227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504801e747715550f843b66b1a8c7b36194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dffffff3359c117f78a36f114868ccfe32cebfd72193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f4f8c107761108e4e230419fd27b6ad9c10b25c6b6ed84bad9b970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce2161342f4c722f8491805c2b0c2ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722af9ad9fb960bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d76b1d96d753ef6fc354fc126cab0602cbc3042e753fe9135770b24f25c558736dd7e5f9fb26fb6ef4615f4092de54c1ddbd9d25916d642b182600a1522364ba96f21ba6f519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e28d655c10"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000632177", 0x0, 0x100, 0x6000000000000000}, 0x28) 11:04:54 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) 11:04:54 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)) 11:04:54 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0x89e8, 0x0) [ 1576.188879][ T26] audit: type=1804 audit(1633950294.935:7950): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/175/cgroup.controllers" dev="sda1" ino=14371 res=1 errno=0 [ 1576.215787][T17667] usb 2-1: new high-speed USB device number 9 using dummy_hcd 11:04:55 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 11:04:55 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000001a40)=ANY=[@ANYBLOB="1201000050cb5320450c10108e490102030109021b000100"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000780)='6', 0x1) syz_usb_disconnect(0xffffffffffffffff) [ 1576.496690][T17667] usb 2-1: Using ep0 maxpacket: 32 11:04:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) [ 1576.613225][T17667] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 11:04:55 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000464c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000466c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005d100)={{0x0, 0x9, 0x0, 0x101, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0x89e8, 0x0) 11:04:55 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) [ 1576.744156][T12395] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1576.754429][ T26] audit: type=1804 audit(1633950295.505:7951): pid=18244 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/176/cgroup.controllers" dev="sda1" ino=14371 res=1 errno=0 [ 1576.814729][T17667] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1576.823861][T17667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.831871][T17667] usb 2-1: Product: syz [ 1576.836145][T17667] usb 2-1: Manufacturer: syz [ 1576.840848][T17667] usb 2-1: SerialNumber: syz [ 1576.953285][T17667] usb 2-1: config 0 descriptor?? [ 1577.015380][T17667] yurex 2-1:0.0: Could not find endpoints [ 1577.055762][T12395] usb 6-1: Using ep0 maxpacket: 32 [ 1577.179817][T12395] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.190111][T12395] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1577.223919][T17668] usb 2-1: USB disconnect, device number 9 [ 1577.363890][T12395] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1577.373172][T12395] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.381178][T12395] usb 6-1: Product: syz [ 1577.385580][T12395] usb 6-1: Manufacturer: syz [ 1577.390183][T12395] usb 6-1: SerialNumber: syz [ 1577.630097][T12395] usb 6-1: config 0 descriptor?? [ 1578.083528][T17667] usb 6-1: USB disconnect, device number 4 [ 1578.213042][T17666] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1578.234506][T17668] Bluetooth: hci1: command 0x0406 tx timeout [ 1578.463195][T17666] usb 2-1: Using ep0 maxpacket: 32 11:04:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000632177", 0x0, 0x100, 0x6000000000000000}, 0x28) 11:04:57 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x4000000) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb2c05cc376efadc0, &(0x7f0000000180)=0x1, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 11:04:57 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x5, 0x1, 0x0, "22f8ef135f31fe812b0fac52d6b7f6204ddd3f00839aae4c7a22aac2b0e7ab5b"}) 11:04:57 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c040, 0x0, 0x0) 11:04:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100000010) [ 1578.615211][T17666] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1578.622849][T17666] usb 2-1: can't read configurations, error -71 11:04:57 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c040, 0x0, 0x0) [ 1578.853135][T18280] vxcan1 speed is unknown, defaulting to 1000 11:04:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:04:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 1579.026823][T17667] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1579.292865][T17667] usb 6-1: Using ep0 maxpacket: 32 [ 1579.413662][T17667] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.423993][T17667] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 11:04:58 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000464c0)) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005d100)={{0x0, 0x0, 0x0, 0x101, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0x89e8, 0x0) 11:04:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c040, 0x0, 0x0) 11:04:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000632177", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 1579.465996][ T26] audit: type=1804 audit(1633950298.225:7952): pid=18298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/178/cgroup.controllers" dev="sda1" ino=15435 res=1 errno=0 [ 1579.794850][T17667] usb 6-1: string descriptor 0 read error: -71 [ 1579.801119][T17667] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1579.810248][T17667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.822461][T17667] usb 6-1: config 0 descriptor?? [ 1579.842951][T17667] usb 6-1: can't set config #0, error -71 [ 1579.858987][T17667] usb 6-1: USB disconnect, device number 5 [ 1579.941952][T18309] hub 9-0:1.0: USB hub found [ 1579.947855][T18309] hub 9-0:1.0: 8 ports detected 11:04:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x400c040, 0x0, 0x0) 11:04:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) [ 1580.809912][ T26] audit: type=1804 audit(1633950299.565:7953): pid=18320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/179/cgroup.controllers" dev="sda1" ino=14716 res=1 errno=0 [ 1581.061531][T18310] vxcan1 speed is unknown, defaulting to 1000 [ 1581.093826][T17667] vhci_hcd: vhci_device speed not set [ 1581.469058][T17667] usb 9-1: new full-speed USB device number 2 using vhci_hcd 11:05:02 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x4000000) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb2c05cc376efadc0, &(0x7f0000000180)=0x1, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 11:05:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1, 0x3, 0x0, "22f8ef135f31fe812b0fac52d6b7f6204ddd3f00839aae4c7a22aac2b0e7ab5b"}) 11:05:02 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x400c040, 0x0, 0x0) 11:05:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x3ff, 0x1ff}}) 11:05:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:02 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f0000004140)=[{{&(0x7f0000001680)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x0) 11:05:03 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x400c040, 0x0, 0x0) [ 1584.177305][ T26] audit: type=1804 audit(1633950302.935:7954): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/180/cgroup.controllers" dev="sda1" ino=15265 res=1 errno=0 [ 1584.320502][T18380] vxcan1 speed is unknown, defaulting to 1000 [ 1606.861911][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.868188][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 11:05:49 executing program 5: r0 = socket(0x2, 0x3, 0x2) recvmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x110}}], 0x7, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)=@tipc=@id={0x2}, 0x80, 0x0}}], 0x1, 0x0) 11:05:49 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x1, 0x0, 0x0, 0x0) 11:05:49 executing program 3: r0 = socket(0x2, 0x6, 0x0) recvmmsg$unix(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:05:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'tunl0\x00', @ifru_addrs=@can}) 11:05:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:49 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)="037ffbf90a5cd2a5d31080616d1fcb3fea9999272daa7aa036a8523ccada3c3c15f5c856005cf8c871ea6cc01014bd0eafad0ddd6bc43b18431d327bfb57951dcd30e6eeba44ac243841", 0x4a}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000001940), 0xd, 0x0) 11:05:50 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[], 0x29, 0xfffffffffffffffc) [ 1631.225094][ T26] audit: type=1804 audit(1633950349.989:7955): pid=18436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/181/cgroup.controllers" dev="sda1" ino=13981 res=1 errno=0 11:05:50 executing program 2: socketpair(0xa, 0x6, 0x0, &(0x7f0000000440)) 11:05:50 executing program 1: socket(0x2c, 0x3, 0x7) 11:05:50 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x1, 0x0, 0x0, 0x0) 11:05:50 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 11:05:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x61}]}) [ 1634.932237][T18459] vxcan1 speed is unknown, defaulting to 1000 [ 1635.142405][T18459] chnl_net:caif_netlink_parms(): no params data found [ 1635.230695][T18459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.237778][T18459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.245762][T18459] device bridge_slave_0 entered promiscuous mode [ 1635.256305][T18459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.263817][T18459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.272495][T18459] device bridge_slave_1 entered promiscuous mode [ 1635.305666][T18459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1635.319776][T18459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.361626][T18459] team0: Port device team_slave_0 added [ 1635.373962][T18459] team0: Port device team_slave_1 added [ 1635.409043][T18459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.416032][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.442250][T18459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.471666][T18459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.478627][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.504978][T18459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.548257][T18459] device hsr_slave_0 entered promiscuous mode [ 1635.557590][T18459] device hsr_slave_1 entered promiscuous mode [ 1635.674048][T18459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.681160][T18459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1635.688544][T18459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.695630][T18459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.757371][T18459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.774653][T15707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1635.785975][T15707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.793570][T15707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.804229][T15707] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1635.820930][T18459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.834367][T15707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1635.843001][T15707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.850127][T15707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.870458][T15707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1635.878896][T15707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.885950][T15707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1635.907078][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1635.915897][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1635.928130][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1635.943383][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1635.956751][T18459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1635.967910][T18459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1635.976583][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1636.001943][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1636.009792][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1636.027954][T18459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.108755][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1636.135339][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1636.143690][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1636.155064][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1636.163065][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1636.171279][T18459] device veth0_vlan entered promiscuous mode [ 1636.186984][T18459] device veth1_vlan entered promiscuous mode [ 1636.214536][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1636.223056][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1636.231317][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1636.239982][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1636.251987][T18459] device veth0_macvtap entered promiscuous mode [ 1636.266934][T18459] device veth1_macvtap entered promiscuous mode [ 1636.288059][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1636.298851][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.308756][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1636.319231][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.329128][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1636.339616][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.349486][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1636.359967][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.369856][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1636.380335][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.391667][T18459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.399439][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1636.407621][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1636.415753][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1636.424488][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1636.441733][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1636.452398][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.462680][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1636.473190][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.483067][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1636.493583][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.503505][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1636.513975][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.523831][T18459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1636.534349][T18459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1636.545136][T18459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.552833][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1636.561673][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1636.669189][T18809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.677620][T18809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.693288][T12395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1636.737618][T18809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.745972][T18809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.759548][T14991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1636.949286][T12395] Bluetooth: hci5: command 0x0409 tx timeout 11:05:56 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x1, 0x0, 0x0, 0x0) 11:05:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xffffffffffffff18, &(0x7f0000000500)={0x0}}, 0x0) 11:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00000000c0)="b946ad3bbcd21820fe8a54a6f5ee542fd7c61f10", 0x14) 11:05:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x80) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 11:05:56 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:05:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x14, 0xf}, 0x14}}, 0x0) 11:05:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000001b00)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x7fffdf000000, 0x0, 0x12, r0, 0x8000000) 11:05:56 executing program 2: keyctl$KEYCTL_PKEY_DECRYPT(0x14, 0x0, 0x0, 0x0, 0x0) [ 1637.846814][ T26] audit: type=1804 audit(1633950356.599:7956): pid=18830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/182/cgroup.controllers" dev="sda1" ino=14236 res=1 errno=0 11:05:56 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:05:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="020000000057"], &(0x7f00000000c0)=""/179, 0x77, 0xb3, 0x1}, 0x20) 11:05:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4, 0x0, 0x4) 11:05:56 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000020c0)) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) 11:05:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4d, 0x0, 0x0) 11:05:56 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 11:05:56 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 11:05:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x2d}]}) 11:05:57 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x10}, 0x420}}, 0x0) 11:05:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', @ifru_hwaddr}) 11:05:57 executing program 5: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34]}, &(0x7f0000000100)={0x0, "e73a3a36f3c90377745ec095ef4c71dad3ce1ad160ff53bf521a0ebd46e5d1835812e378aa88125cd3be9c99bd047c179ee49ed7721b2a52d99e8c43da15dcfd"}, 0x48, 0xfffffffffffffffc) [ 1638.484430][ T26] audit: type=1804 audit(1633950357.239:7957): pid=18864 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/183/cgroup.controllers" dev="sda1" ino=14071 res=1 errno=0 11:05:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x420, 0x3eb}, 0x420}}, 0x0) 11:05:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0d00002d00010025bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="090000000f00e0ff07000200060005002005000008000b0001000000400001"], 0xd1c}}, 0x0) 11:05:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={0x0, 0x0}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001a00)) [ 1638.785556][T18878] netlink: 3240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1639.019266][T15708] Bluetooth: hci5: command 0x041b tx timeout 11:05:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}}, {{@in=@empty}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xe8) 11:05:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:57 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x300}, 0x0) 11:05:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'veth1\x00', @ifru_map}) 11:05:57 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180), &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'crct10dif-generic\x00'}}, 0x0, 0x0) 11:05:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'ip6gre0\x00', @ifru_hwaddr}) 11:05:58 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x511482, 0x0) 11:05:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0x29, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_STATUS={0x5}]}, 0x58}}, 0x0) 11:05:58 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_flags}) [ 1639.309520][ T26] audit: type=1804 audit(1633950358.069:7958): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/184/cgroup.controllers" dev="sda1" ino=14236 res=1 errno=0 11:05:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x35}]}) 11:05:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x29, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) [ 1639.501152][T18906] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 11:05:58 executing program 2: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r0}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'crct10dif-generic\x00'}}, 0x0, 0x0) 11:05:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:58 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x7f, 0x8, 0x3, 0x4}) 11:05:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24}, 0x24}}, 0x0) 11:05:58 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@null, @remote, @netrom, @rose, @bcast, @null, @null]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'netdevsim0\x00'}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5c) 11:05:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x49, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2}, 0x90) 11:05:58 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x30}]}) 11:05:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000240)={'batadv_slave_0\x00', @ifru_addrs=@rc={0x1f, @fixed}}) 11:05:58 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'\x00', @ifru_flags}) 11:05:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/14) [ 1639.888093][ T26] audit: type=1804 audit(1633950358.639:7959): pid=18929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/185/cgroup.controllers" dev="sda1" ino=14115 res=1 errno=0 11:05:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000400), 0x4) 11:05:58 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@null, @remote, @netrom, @rose, @bcast, @null, @null]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'netdevsim0\x00'}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5c) 11:05:58 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000280)='.dead\x00', 0x0, 0x0) 11:05:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:59 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 11:05:59 executing program 4: timer_create(0x1, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) 11:05:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'ip6gre0\x00', @ifru_hwaddr}) 11:05:59 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 11:05:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0x29, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_STATUS={0x8}]}, 0x58}}, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:05:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 11:05:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1640.506794][ T26] audit: type=1804 audit(1633950359.259:7960): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/186/cgroup.controllers" dev="sda1" ino=14227 res=1 errno=0 11:05:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@null, @remote, @netrom, @rose, @bcast, @null, @null]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'netdevsim0\x00'}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5c) [ 1640.616015][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 11:05:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_newroute={0x40, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc}, @RTA_METRICS={0x5, 0x8, 0x0, 0x1, "fe"}]}, 0x40}}, 0x0) 11:05:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@rc={0x1f, @none}, 0xffffffffffffffe6, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000a80)=""/4082, 0xff2}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000600)=""/156, 0x9c}], 0xa, &(0x7f0000000780)=""/143, 0x8f}, 0x0) 11:05:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x40) 11:05:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:05:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000080)='6', 0x1) 11:05:59 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'veth1\x00', @ifru_flags}) 11:05:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2c, 0x0, 0xc97963dd2913126c) 11:05:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000001c0)={'bridge0\x00', @ifru_addrs=@nl=@proc}) 11:05:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', @ifru_hwaddr}) 11:05:59 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@null, @remote, @netrom, @rose, @bcast, @null, @null]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'netdevsim0\x00'}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x5c) 11:05:59 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000580)={'sit0\x00', 0x0}) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 1641.109222][T15708] Bluetooth: hci5: command 0x040f tx timeout 11:06:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0xfffff801, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 1641.203627][ T26] audit: type=1804 audit(1633950359.959:7961): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/187/cgroup.controllers" dev="sda1" ino=14001 res=1 errno=0 11:06:00 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x14, 0x1}, 0x14}}, 0x0) 11:06:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000900)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x51, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @private2}}]}, 0x90) 11:06:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x8, 0x0, 0x0) 11:06:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:06:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x17, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2}, 0x90) 11:06:00 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 11:06:00 executing program 3: request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\'&\x00', 0xfffffffffffffffd) 11:06:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x31, 0x0, 0x0) 11:06:00 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x381, 0x0) 11:06:00 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x4a, &(0x7f0000000080)="36c31132", 0x4) 11:06:00 executing program 5: bpf$BPF_GET_BTF_INFO(0x8, 0x0, 0x0) 11:06:00 executing program 4: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a00ffffffff9e1d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 11:06:00 executing program 2: keyctl$KEYCTL_PKEY_DECRYPT(0x7, &(0x7f0000000180), 0x0, 0x0, 0x0) 11:06:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@hyper}) [ 1641.953305][ T26] audit: type=1804 audit(1633950360.709:7962): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/188/cgroup.controllers" dev="sda1" ino=13946 res=1 errno=0 11:06:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv4_newroute={0x28, 0x18, 0x401, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) 11:06:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:06:01 executing program 5: timer_create(0x1, &(0x7f0000002300)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002340)) timer_gettime(0x0, &(0x7f0000002440)) 11:06:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x4}, 0x0) 11:06:01 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @ifru_flags}) 11:06:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'vlan0\x00', @ifru_flags}) 11:06:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x128, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x31, 0x2a, [@ext_channel_switch={0x3c, 0x4}, @measure_req={0x26, 0x15, {0x0, 0x0, 0x0, "65137748459a19b1b297fea67f9d15cc17e5"}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xd5, 0x2a, [@perr={0x84, 0xcf, {0x0, 0xd, [@ext={{}, @device_b, 0x0, @broadcast}, @not_ext, @not_ext={{}, @broadcast}, @not_ext={{}, @device_b}, @ext={{}, @device_b, 0x0, @broadcast}, @not_ext, @not_ext={{}, @device_b}, @not_ext={{}, @broadcast}, @ext={{}, @device_a, 0x0, @device_b}, @not_ext={{}, @device_b}, @ext={{}, @broadcast, 0x0, @broadcast}, @ext, @ext={{}, @device_b, 0x0, @broadcast}]}}]}]}, 0x128}}, 0x0) 11:06:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000040)={'ip6gre0\x00', @ifru_hwaddr}) [ 1642.333977][T19063] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1642.366363][T19066] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. 11:06:01 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0xffffffffffffffff) 11:06:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x38}}, 0x0) 11:06:01 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x400}, {0x16}]}, 0x10) 11:06:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0xffffffffffffff58}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}, @NL80211_ATTR_WDEV={0xc}]}, 0x34}}, 0x0) [ 1642.524460][ T26] audit: type=1804 audit(1633950361.279:7963): pid=19071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/189/cgroup.controllers" dev="sda1" ino=14465 res=1 errno=0 11:06:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:06:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3d}]}) 11:06:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x11, 0x65, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) [ 1642.640100][T19080] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1642.675254][T19082] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 11:06:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x12, &(0x7f0000000000)={0x9, {{0x2, 0x0, @multicast1}}}, 0x108) 11:06:01 executing program 4: add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="18", 0x1, 0xfffffffffffffff8) 11:06:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14) 11:06:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x0, 0x0, 0x4) 11:06:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000580)={'sit0\x00', 0x0}) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 11:06:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x74}]}) 11:06:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="36c31132571fb798ad759ad749528d3e552a887a", 0x14) [ 1643.012115][ T26] audit: type=1804 audit(1633950361.769:7964): pid=19095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/190/cgroup.controllers" dev="sda1" ino=14214 res=1 errno=0 11:06:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x28, r1, 0x309, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 11:06:01 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x24, 0x0, 0x0) [ 1643.188801][T15708] Bluetooth: hci5: command 0x0419 tx timeout 11:06:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:06:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x21, &(0x7f0000000080)="36c31132", 0x4) 11:06:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}, 0x8}, 0x0) 11:06:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x0, 0x200800) fcntl$getownex(r0, 0x10, 0x0) 11:06:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'ip6gre0\x00', @ifru_hwaddr}) 11:06:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x12, r0, 0x8000000) fork() 11:06:02 executing program 2: add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 11:06:02 executing program 1: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="240000002c0007031dfffd946fa2830020200a00ffffffff9e1d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 11:06:02 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0xf, {0xf, 0x0, "afe1b580dccd9534b3907ee99d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff}) 11:06:02 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x14, 0x11}, 0x14}}, 0x0) [ 1643.589387][ T26] audit: type=1804 audit(1633950362.339:7965): pid=19123 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/191/cgroup.controllers" dev="sda1" ino=14517 res=1 errno=0 11:06:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x0, 0x1f0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan1\x00', 'syzkaller1\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d6b69130eac529e5efddc832b5fe789277c7a885148868a78cf06a03289c"}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 11:06:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, 0x0, 0x0) 11:06:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 11:06:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4}}, 0xe8) 11:06:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x420, 0x3f9}, 0x420}}, 0x0) 11:06:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x8, 0x0, 0x0) 11:06:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x14, 0x14, 0x313, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 11:06:02 executing program 3: socket(0x10, 0x3, 0xa) 11:06:02 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x1d, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/241}, 0xf9, 0x2, 0x3000) 11:06:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 11:06:03 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:03 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8955, 0x0) [ 1644.310162][ T26] audit: type=1804 audit(1633950363.070:7966): pid=19157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/192/cgroup.controllers" dev="sda1" ino=13958 res=1 errno=0 11:06:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r1}, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 11:06:03 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgid(r1) [ 1644.455045][T19165] tmpfs: Bad value for 'mpol' [ 1644.506186][T19170] tmpfs: Bad value for 'mpol' [ 1644.545254][T19172] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 1644.553788][T19172] IPv6: ADDRCONF(NETDEV_CHANGE): Y­4`Ò˜: link becomes ready 11:06:03 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000380)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) close(r0) 11:06:03 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:03 executing program 1: set_mempolicy(0x4003, &(0x7f0000000080)=0x3ff, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220040, 0x0) readlinkat(r0, &(0x7f0000000040)='\x00', &(0x7f0000002340)=""/43, 0x2b) 11:06:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000010) 11:06:03 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 11:06:03 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 11:06:03 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8934, 0x0) 11:06:03 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1644.800711][T19187] tmpfs: Bad value for 'mpol' 11:06:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000024001deeffffff3314fa2182d60fdc00", @ANYRES32, @ANYBLOB="00000000f1ffffff"], 0x2c}}, 0x0) 11:06:03 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000018c0)={@multicast1, @local, 0x0, 0x2, [@empty, @empty]}, 0x18) 11:06:03 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1644.954287][ T26] audit: type=1804 audit(1633950363.710:7967): pid=19196 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/193/cgroup.controllers" dev="sda1" ino=14227 res=1 errno=0 [ 1644.987449][T19199] tmpfs: Bad value for 'mpol' 11:06:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000010) [ 1645.052707][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:06:03 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000074790270600fd1a27540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00000000fc9f682339c3000a0005"], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 11:06:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:06:03 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b650000"], 0x48}}, 0x0) 11:06:03 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1645.152935][T19207] tmpfs: Bad value for 'mpol' 11:06:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000ec0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1645.306107][T19216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1645.319086][T19218] tmpfs: Bad value for 'mpol' 11:06:04 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1645.354064][ T26] audit: type=1804 audit(1633950364.110:7968): pid=19220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/194/cgroup.controllers" dev="sda1" ino=14593 res=1 errno=0 [ 1645.385284][T19219] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1645.393927][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 11:06:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000010) 11:06:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000000000000000034001680300001802c000c801401010000000000000000000000000000000000140001000000000000000033ef56ada4fbfd2c00140014"], 0x68}}, 0x0) [ 1645.491434][T19228] tmpfs: Bad value for 'mpol' [ 1645.505198][T19219] device macsec1 entered promiscuous mode [ 1645.511157][T19219] device batadv0 entered promiscuous mode 11:06:04 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1645.608915][T15708] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1645.638290][T14991] usb 6-1: new high-speed USB device number 6 using dummy_hcd 11:06:04 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) [ 1645.708396][ T26] audit: type=1804 audit(1633950364.460:7969): pid=19239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/195/cgroup.controllers" dev="sda1" ino=14370 res=1 errno=0 11:06:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000010) [ 1645.796979][T19246] tmpfs: Bad value for 'mpol' 11:06:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:06:04 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1645.988854][T15708] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1645.998014][T15708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.008031][T14991] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1646.017102][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.044707][T15708] usb 2-1: config 0 descriptor?? [ 1646.090772][T15708] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1646.101385][T14991] usb 6-1: config 0 descriptor?? [ 1646.141479][T14991] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1646.158617][ T26] audit: type=1804 audit(1633950364.920:7970): pid=19262 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/196/cgroup.controllers" dev="sda1" ino=14593 res=1 errno=0 [ 1648.478863][T15708] gspca_ov534_9: reg_r err -71 [ 1648.519089][T14991] gspca_ov534_9: sccb_write failed [ 1648.737945][T14991] gspca_ov534_9: reg_w failed -71 [ 1648.757947][T15708] gspca_ov534_9: Unknown sensor 0000 [ 1648.757989][T15708] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1648.774446][T15708] usb 2-1: USB disconnect, device number 12 [ 1649.067871][T14991] gspca_ov534_9: Unknown sensor 0000 [ 1649.067936][T14991] ov534_9: probe of 6-1:0.0 failed with error -22 [ 1649.090914][T14991] usb 6-1: USB disconnect, device number 6 [ 1649.387767][T15708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1649.607803][T14991] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1649.787845][T15708] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1649.797086][T15708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.808246][T15708] usb 2-1: config 0 descriptor?? [ 1649.860954][T15708] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1649.968231][T14991] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1649.977357][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:06:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:06:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x1, 0xa, 0x3}, 0x14}}, 0x0) [ 1650.012847][T14991] usb 6-1: config 0 descriptor?? [ 1650.017816][T15708] gspca_ov534_9: reg_w failed -71 [ 1650.083573][T14991] gspca_main: ov534_9-2.14.0 probing 05a9:1550 11:06:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000010) 11:06:09 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 11:06:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:09 executing program 3: perf_event_open(&(0x7f0000003a80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000ec0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1650.271018][T14991] gspca_ov534_9: reg_w failed -71 11:06:09 executing program 4: mkdir(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:09 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8}, 0x10) 11:06:09 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 1650.451747][ T26] audit: type=1804 audit(1633950369.210:7971): pid=19317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/197/cgroup.controllers" dev="sda1" ino=14742 res=1 errno=0 11:06:09 executing program 4: mkdir(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1650.578710][T15708] gspca_ov534_9: Unknown sensor 0000 [ 1650.578778][T15708] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1650.635098][T15708] usb 2-1: USB disconnect, device number 13 [ 1650.778470][T14991] gspca_ov534_9: Unknown sensor 0000 [ 1650.778537][T14991] ov534_9: probe of 6-1:0.0 failed with error -22 [ 1650.815385][T14991] usb 6-1: USB disconnect, device number 7 [ 1651.097671][T15708] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1651.167743][T14991] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1651.508594][T15708] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1651.517734][T15708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.528486][T15708] usb 2-1: config 0 descriptor?? [ 1651.529460][T14991] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1651.543191][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.572456][T14991] usb 6-1: config 0 descriptor?? [ 1651.590441][T15708] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1651.620107][T14991] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1654.027775][T15708] gspca_ov534_9: reg_r err -71 [ 1654.057612][T14991] gspca_ov534_9: sccb_write failed [ 1654.277756][T14991] gspca_ov534_9: reg_w failed -71 [ 1654.327472][T15708] gspca_ov534_9: Unknown sensor 0000 [ 1654.327538][T15708] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1654.343704][T15708] usb 2-1: USB disconnect, device number 14 11:06:13 executing program 4: mkdir(0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000010) 11:06:13 executing program 2: r0 = io_uring_setup(0x792c, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000240), 0x1) 11:06:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:06:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x989680}) 11:06:13 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1654.607473][T14991] gspca_ov534_9: Unknown sensor 0000 [ 1654.607546][T14991] ov534_9: probe of 6-1:0.0 failed with error -22 [ 1654.654612][T14991] usb 6-1: USB disconnect, device number 8 11:06:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000010a0108000000000000000003000007f800010073"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) [ 1654.716583][ T26] audit: type=1804 audit(1633950373.470:7972): pid=19374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/198/cgroup.controllers" dev="sda1" ino=14748 res=1 errno=0 [ 1654.838451][T19380] tmpfs: Bad value for 'mpol' 11:06:13 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002ec0)={{0x1, 0x0, 0xee01}}) 11:06:13 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r1}}, 0x18) 11:06:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x0) 11:06:13 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1654.889105][T19385] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1654.924105][T19386] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 11:06:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0x1ff, 0x4) [ 1655.017495][T17668] usb 2-1: new high-speed USB device number 15 using dummy_hcd 11:06:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xffffff59, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xfffffffffffffd4a}}, 0x0) 11:06:13 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 1655.141002][ T26] audit: type=1804 audit(1633950373.900:7973): pid=19397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/199/cgroup.controllers" dev="sda1" ino=14746 res=1 errno=0 [ 1655.144552][T19398] tmpfs: Bad value for 'mpol' 11:06:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f000000a480)) [ 1655.380924][T17668] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1655.390118][T17668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.434460][T17668] usb 2-1: config 0 descriptor?? [ 1655.479803][T17668] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1657.907493][T17668] gspca_ov534_9: reg_r err -71 [ 1658.227196][T17668] gspca_ov534_9: Unknown sensor 0000 [ 1658.227272][T17668] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1658.242475][T17668] usb 2-1: USB disconnect, device number 15 11:06:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:06:17 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x0) 11:06:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="54ee470113e057423487a9e71b4c6d5f", 0x10}], 0x1, &(0x7f0000000280)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) 11:06:17 executing program 2: umount2(&(0x7f0000000000)='./file0\x00', 0x8) lsetxattr$security_evm(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0xd, "1945598fa58bab95cbf2e33dc428ef"}, 0x11, 0x3) r0 = syz_mount_image$tmpfs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x400, 0x5, &(0x7f0000003d00)=[{&(0x7f0000002980), 0x0, 0x5}, {&(0x7f0000002a00)}, {&(0x7f0000003a00)="ae", 0x1, 0xffffffff}, {&(0x7f0000003b00)="db637e2e210d41895bb8d866cbd4ef8c8f2f4f89f1f7680af4ede49eb2389f4e797ebf5919f3dd83cbf5a28ceeddf4dcc619ded22523131b9bab79b4eecf010ae275da5994ff6257e08a4065ca1bd80cd3dbd6b3a3cb3cc8e066f53e65bb1e77307bb9bd692cb01256e1ee7e4f2a0fb2f52d28ad2dc47ab023ee8b774eec039b0ff992acdb32bb8220a20a0c364595550dbc26a11a2826c763fb5a93f34c599f", 0xa0, 0x101}, {0x0, 0x0, 0x67}], 0x8080, &(0x7f0000003d80)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_gt={'fowner>', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@permit_directio}]}) renameat2(r0, &(0x7f0000003e00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000003e40)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20004010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f000000a240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2022, &(0x7f000000a480)) setxattr$trusted_overlay_origin(&(0x7f000000a4c0)='./file0\x00', &(0x7f000000a500), &(0x7f000000a540), 0x2, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000010ac0), 0x2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000138c0)={0x78, 0xffffffffffffffda, 0x0, {0x7, 0x8000, 0x0, {0x0, 0x20, 0x0, 0x8bc0, 0x2, 0x1, 0x9, 0x0, 0x678, 0x8000, 0x4, 0x0, 0x0, 0x7, 0x2}}}, 0x78) 11:06:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1658.534177][T19431] tmpfs: Bad value for 'mpol' 11:06:17 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @private}}) 11:06:17 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) [ 1658.628918][ T26] audit: type=1804 audit(1633950377.391:7974): pid=19440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/200/cgroup.controllers" dev="sda1" ino=14767 res=1 errno=0 11:06:17 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x0) 11:06:17 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) [ 1658.867317][T17668] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1659.029618][ T26] audit: type=1804 audit(1633950377.791:7975): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir729723454/syzkaller.FKyx2H/201/cgroup.controllers" dev="sda1" ino=14721 res=1 errno=0 [ 1659.249106][T17668] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1659.258381][T17668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.309651][T17668] usb 2-1: config 0 descriptor?? [ 1659.350936][T17668] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1661.747128][T17668] gspca_ov534_9: reg_r err -71 [ 1662.026899][T17668] gspca_ov534_9: Unknown sensor 0000 [ 1662.026948][T17668] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1662.050297][T17668] usb 2-1: USB disconnect, device number 16 11:06:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:06:21 executing program 5: umount2(0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x0, "1945598fa58bab95cbf2e33dc428ef"}, 0x11, 0x0) rmdir(0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x0, 0x2, &(0x7f0000003d00)=[{0x0}, {0x0, 0x0, 0x67}], 0x0, &(0x7f0000003d80)={[], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) sendmsg(0xffffffffffffffff, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005340)) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f000000a4c0)='./file0\x00', &(0x7f000000a500), &(0x7f000000a540), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 11:06:21 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:06:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 11:06:21 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) 11:06:21 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f000000aa40)={&(0x7f000000aa00)='./file0\x00'}, 0x10) 11:06:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x70}}, 0x0) [ 1662.422044][T19490] tmpfs: Unknown parameter 'mask' 11:06:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040)) [ 1662.517864][T19490] tmpfs: Unknown parameter 'mask' 11:06:21 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:21 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000480), 0x0, &(0x7f0000000500)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffff9) [ 1662.687055][T12395] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1663.068691][T12395] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1663.077843][T12395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.118121][T12395] usb 2-1: config 0 descriptor?? [ 1663.159374][T12395] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1665.316854][T12395] gspca_ov534_9: reg_r err -71 [ 1665.636672][T12395] gspca_ov534_9: Unknown sensor 0000 [ 1665.636745][T12395] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1665.651874][T12395] usb 2-1: USB disconnect, device number 17 11:06:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)=ANY=[], 0x1c}}, 0x0) 11:06:24 executing program 5: syz_mount_image$tmpfs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x0, 0x2, &(0x7f0000003d00)=[{0x0}, {0x0}], 0x0, &(0x7f0000003d80)={[], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) 11:06:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) 11:06:24 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:24 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000002940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:06:24 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 11:06:24 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) [ 1665.962517][T19547] tmpfs: Unknown parameter 'fscontext' 11:06:24 executing program 3: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 11:06:24 executing program 2: shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) [ 1666.034492][T19547] tmpfs: Unknown parameter 'fscontext' 11:06:24 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 11:06:24 executing program 5: pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x7}, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 11:06:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0) [ 1666.237340][T17666] usb 2-1: new high-speed USB device number 18 using dummy_hcd 11:06:25 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x202002, 0x0) connect$inet6(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2d7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x0, 0x1, 0x200, 0x8, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x0, 0x0, 0x81, 0x21, 0x0, @broadcast, @loopback}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x44000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000340), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:06:25 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 11:06:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x3, &(0x7f0000001b00)=@framed, &(0x7f0000001b40)='GPL\x00', 0x80000001, 0xe1, &(0x7f0000001b80)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1666.617534][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1666.626800][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.677399][T17666] usb 2-1: config 0 descriptor?? [ 1666.721807][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1668.298575][ T1194] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.304907][ T1194] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.681509][T17666] gspca_ov534_9: reg_w failed -71 [ 1669.006426][T17666] gspca_ov534_9: Unknown sensor 0000 [ 1669.006500][T17666] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1669.020569][T17666] usb 2-1: USB disconnect, device number 18 11:06:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:06:27 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x4e}) 11:06:27 executing program 0: unshare(0x40000) unshare(0x8000200) 11:06:27 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) flistxattr(r0, &(0x7f0000002f80)=""/207, 0xffffffffffffff4a) 11:06:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME]}, 0x3c}}, 0x0) 11:06:27 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x202002, 0x0) connect$inet6(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2d7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x0, 0x1, 0x200, 0x8, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x0, 0x0, 0x81, 0x21, 0x0, @broadcast, @loopback}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x44000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x1000) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000340), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1669.246779][T19674] tmpfs: Unknown parameter 'N' 11:06:28 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x4e}) 11:06:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{}]}) 11:06:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="050026bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e8e00030000000e0001006e65"], 0xd4}}, 0x0) 11:06:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xfffffd33, &(0x7f0000000300)={0x0}}, 0x0) 11:06:28 executing program 2: unshare(0x20002) 11:06:28 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x4e}) [ 1669.555191][T19721] tmpfs: Unknown parameter 'N' [ 1669.656553][T17666] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1669.745790][T19735] tmpfs: Unknown parameter 'N' [ 1670.016417][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1670.025665][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.035815][T17666] usb 2-1: config 0 descriptor?? [ 1670.079719][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1672.046984][T17666] gspca_ov534_9: reg_w failed -71 [ 1672.366260][T17666] gspca_ov534_9: Unknown sensor 0000 [ 1672.366329][T17666] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1672.382812][T17666] usb 2-1: USB disconnect, device number 19 11:06:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:06:31 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) fork() 11:06:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fgetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)=""/33, 0x21) 11:06:31 executing program 5: r0 = socket(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001140)={'ip6gre0\x00', 0x0}) 11:06:31 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) dup(r0) 11:06:31 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35]}}}, 0x2f}], [], 0x4e}) 11:06:31 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35]}}}, 0x2f}], [], 0x4e}) [ 1672.621075][T19757] tmpfs: Bad value for 'mpol' 11:06:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000180)) 11:06:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 11:06:31 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 11:06:31 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) flistxattr(r0, 0x0, 0x0) 11:06:31 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x35]}}}, 0x2f}], [], 0x4e}) [ 1672.794276][T19767] tmpfs: Bad value for 'mpol' [ 1672.904293][T19781] tmpfs: Bad value for 'mpol' [ 1672.996262][T17666] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1673.396571][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1673.405620][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.417436][T17666] usb 2-1: config 0 descriptor?? [ 1673.468483][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1675.426358][T17666] gspca_ov534_9: reg_w failed -71 [ 1675.745958][T17666] gspca_ov534_9: Unknown sensor 0000 [ 1675.746026][T17666] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1675.760342][T17666] usb 2-1: USB disconnect, device number 20 11:06:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11:06:34 executing program 0: openat$vcsu(0xffffffffffffff9c, 0x0, 0x311300, 0x0) 11:06:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:34 executing program 2: select(0x40, &(0x7f0000000540), 0x0, &(0x7f00000005c0)={0x3}, 0x0) 11:06:34 executing program 5: setuid(0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x8936, 0x0) 11:06:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) 11:06:34 executing program 0: syz_io_uring_setup(0x13f7, &(0x7f0000000540)={0x0, 0x6000000, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) 11:06:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1676.015403][T19803] tmpfs: Bad value for 'mpol' 11:06:34 executing program 5: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20031, 0xffffffffffffffff, 0x8000000) 11:06:34 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:35 executing program 0: syz_io_uring_setup(0x7a3e, &(0x7f00000003c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x0) [ 1676.195654][T19822] tmpfs: Bad value for 'mpol' 11:06:35 executing program 5: setuid(0xee01) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1676.326087][T19827] tmpfs: Bad value for 'mpol' [ 1676.346602][T17666] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1676.705921][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1676.715098][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.728791][T17666] usb 2-1: config 0 descriptor?? [ 1676.768263][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1678.755948][T17666] gspca_ov534_9: reg_w failed -71 [ 1679.075711][T17666] gspca_ov534_9: Unknown sensor 0000 [ 1679.075778][T17666] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1679.090682][T17666] usb 2-1: USB disconnect, device number 21 11:06:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11:06:38 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x0, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) 11:06:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 11:06:38 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x511100, 0x0) 11:06:38 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 11:06:38 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x0, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1679.324757][T19853] tmpfs: Bad value for 'mpol' 11:06:38 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x311300, 0x0) 11:06:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x300}, 0x0) 11:06:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="050026bd7000ffdbdf2545"], 0xd4}}, 0x0) 11:06:38 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x2d, 0x0, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1679.528705][T19863] tmpfs: Bad value for 'mpol' [ 1679.612847][T19873] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. 11:06:38 executing program 5: unshare(0x24000000) [ 1679.663651][T19875] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1679.714946][T19876] tmpfs: Bad value for 'mpol' [ 1679.756143][T15707] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1680.125839][T15707] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1680.134957][T15707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.154665][T15707] usb 2-1: config 0 descriptor?? [ 1680.208529][T15707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1682.155640][T15707] gspca_ov534_9: reg_w failed -71 [ 1682.475528][T15707] gspca_ov534_9: Unknown sensor 0000 [ 1682.475575][T15707] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1682.492314][T15707] usb 2-1: USB disconnect, device number 22 11:06:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11:06:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:41 executing program 0: r0 = io_uring_setup(0x1744, &(0x7f00000005c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 11:06:41 executing program 3: clock_gettime(0x7, &(0x7f00000003c0)) 11:06:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "ab807e841dfe7e49ddaeda87d33d5eef6b950e0dfda01a9cc31e6b8dd3f4c685484e0753c5c87d778c54e80c4a852d9e8d52f236949f89ad2163b0eff954b93c"}, 0x48, r0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r1, 0x0, 0x0) 11:06:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) 11:06:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1682.730235][T19905] tmpfs: Bad value for 'mpol' 11:06:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) 11:06:41 executing program 0: mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000000000)=0x4, 0x1b, 0x0) 11:06:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fallocate(r0, 0x8, 0x0, 0x9) 11:06:41 executing program 5: setuid(0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001400)={&(0x7f0000001300), 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r1, 0x323}, 0x14}}, 0x0) 11:06:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1682.937481][T19920] tmpfs: Bad value for 'mpol' [ 1683.078983][T19929] tmpfs: Bad value for 'mpol' [ 1683.115989][T15707] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1683.475616][T15707] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1683.484849][T15707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.504026][T15707] usb 2-1: config 0 descriptor?? [ 1683.547639][T15707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1685.545353][T15707] gspca_ov534_9: reg_w failed -71 [ 1685.875388][T15707] gspca_ov534_9: Unknown sensor 0000 [ 1685.875457][T15707] ov534_9: probe of 2-1:0.0 failed with error -22 [ 1685.890385][T15707] usb 2-1: USB disconnect, device number 23 11:06:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x0, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:44 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 11:06:44 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) getresgid(&(0x7f0000004400), &(0x7f0000004440), &(0x7f0000004480)) 11:06:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001680)) 11:06:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:06:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf) 11:06:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x0, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1686.124802][T19956] tmpfs: Bad value for 'mpol' 11:06:44 executing program 2: shmget(0x0, 0x1000, 0xf02, &(0x7f0000ffc000/0x1000)=nil) 11:06:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', 0x0}) 11:06:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0xea0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe99, 0x4, "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"}]}]}, 0xec4}}, 0x0) 11:06:45 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x38}}, 0x0) 11:06:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x39, 0x0, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1686.281869][T19962] tmpfs: Bad value for 'mpol' 11:06:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)='&@!,(]%+\x00') 11:06:45 executing program 5: bpf$ITER_CREATE(0x6, 0x0, 0x0) 11:06:45 executing program 3: prctl$PR_SET_MM_MAP(0x29, 0xe, 0x0, 0x0) 11:06:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1686.473294][T19977] tmpfs: Bad value for 'mpol' [ 1686.525237][T15707] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1686.640890][T19985] tmpfs: Bad value for 'mpol' [ 1686.905251][T15707] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1686.914359][T15707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.930568][T15707] usb 2-1: config 0 descriptor?? [ 1686.977328][T15707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1688.495198][T15707] gspca_ov534_9: reg_r err -32 [ 1688.845029][T15707] gspca_ov534_9: Unknown sensor 0000 [ 1688.845097][T15707] ov534_9: probe of 2-1:0.0 failed with error -22 11:06:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:06:48 executing program 2: rt_sigprocmask(0x2, &(0x7f0000000200), 0x0, 0x8) 11:06:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:06:48 executing program 3: setuid(0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 11:06:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:48 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1689.492901][T17666] usb 2-1: USB disconnect, device number 24 [ 1689.534520][T20004] sctp: [Deprecated]: syz-executor.0 (pid 20004) Use of int in maxseg socket option. [ 1689.534520][T20004] Use struct sctp_assoc_value instead 11:06:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:48 executing program 5: bpf$ITER_CREATE(0x15, 0x0, 0x0) [ 1689.623406][T20011] tmpfs: Bad value for 'mpol' 11:06:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000001440), 0x4) 11:06:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x558, 0x1e0, 0x1e0, 0xffffffff, 0x1e0, 0x398, 0x488, 0x488, 0xffffffff, 0x488, 0x488, 0x5, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@private1, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@private1, @icmp_id}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_macvtap\x00', 'veth0_macvtap\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@ah={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [], @ipv4=@dev, [], @ipv4=@local, [], @ipv4=@multicast2}}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 11:06:48 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x0, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@dev]}, 0x18) [ 1689.773664][T20023] tmpfs: Bad value for 'mpol' [ 1689.807543][T20026] x_tables: duplicate underflow at hook 1 [ 1689.931221][T20032] tmpfs: Bad value for 'mpol' [ 1690.125204][T17666] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1690.505060][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1690.514168][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.535263][T17666] usb 2-1: config 0 descriptor?? [ 1690.587300][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1692.074947][T17666] gspca_ov534_9: reg_r err -32 [ 1692.424938][T17666] gspca_ov534_9: Unknown sensor 0000 [ 1692.425000][T17666] ov534_9: probe of 2-1:0.0 failed with error -22 11:06:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:06:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1d0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@private2, @local, [], [], 'veth0_vlan\x00', 'batadv_slave_1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x63f}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000001240)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e23, @multicast2}, 0x20c, 0x0, 0x0, 0x0, 0x80, &(0x7f00000000c0)='virt_wifi0\x00', 0x2, 0x0, 0xffff}) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x0, @desc1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001880)={0x0, [], 0x0, "fc036d9514207e"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbfe4e6bfffc378e441463eaf4a2d3f71f7eb6b37e57aac9"], 0x58) 11:06:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@empty}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe8) 11:06:51 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x0, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) 11:06:51 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 11:06:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00'}) [ 1693.088867][T12395] usb 2-1: USB disconnect, device number 25 [ 1693.158464][T20055] x_tables: duplicate underflow at hook 2 11:06:52 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x0, 0x2d, 0x35, 0x0]}}}, 0x2f}], [], 0x4e}) [ 1693.216556][T20061] x_tables: duplicate underflow at hook 2 [ 1693.220866][T20057] tmpfs: Bad value for 'mpol' 11:06:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}, 0x0) 11:06:52 executing program 5: syz_open_dev$loop(&(0x7f0000000040), 0x80000001, 0x28502) 11:06:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001780)={'vcan0\x00'}) 11:06:52 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 11:06:52 executing program 0: r0 = msgget(0x0, 0x201) msgctl$IPC_RMID(r0, 0x0) [ 1693.441075][T20073] tmpfs: Bad value for 'mpol' [ 1693.665820][T12395] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1694.024808][T12395] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1694.034220][T12395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.044714][T12395] usb 2-1: config 0 descriptor?? [ 1694.087243][T12395] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1694.706691][T18769] device hsr_slave_0 left promiscuous mode [ 1694.713032][T18769] device hsr_slave_1 left promiscuous mode [ 1694.721386][T18769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1694.729087][T18769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.739155][T18769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.747147][T18769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.761761][T18769] device bridge_slave_1 left promiscuous mode [ 1694.767975][T18769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.778700][T18769] device bridge_slave_0 left promiscuous mode [ 1694.785073][T18769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.800611][T18769] device veth1_macvtap left promiscuous mode [ 1694.806742][T18769] device veth0_macvtap left promiscuous mode [ 1694.812772][T18769] device veth1_vlan left promiscuous mode [ 1694.818763][T18769] device veth0_vlan left promiscuous mode [ 1695.051309][T18769] team0 (unregistering): Port device team_slave_1 removed [ 1695.077776][T18769] team0 (unregistering): Port device team_slave_0 removed [ 1695.091651][T18769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1695.112138][T18769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.200408][T18769] bond0 (unregistering): Released all slaves [ 1695.595323][T12395] gspca_ov534_9: reg_r err -32 [ 1695.944502][T12395] gspca_ov534_9: Unknown sensor 0000 [ 1695.944552][T12395] ov534_9: probe of 2-1:0.0 failed with error -22 11:06:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:06:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000001fc0)='bridge0\x00') 11:06:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005d9c0)) 11:06:55 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "748221", 0x18, 0x0, 0x0, @local, @private2, {[@dstopts={0x33, 0x2, '\x00', [@pad1, @generic={0x0, 0xb, "daeb6f6a8a8387c9f35a5f"}]}]}}}}}, 0x0) 11:06:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 11:06:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 1696.604161][T17666] usb 2-1: USB disconnect, device number 26 11:06:55 executing program 5: pipe2(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 11:06:55 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x404c0, 0x0) 11:06:55 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000b00)='id_legacy\x00', 0x0, 0xfffffffffffffffa) 11:06:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008801, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 11:06:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 11:06:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000003d80)=r0) [ 1697.254724][T17666] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1697.624600][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1697.633665][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.643833][T17666] usb 2-1: config 0 descriptor?? [ 1697.688032][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1699.214362][T17666] gspca_ov534_9: reg_r err -32 [ 1699.564361][T17666] gspca_ov534_9: Unknown sensor 0000 [ 1699.564429][T17666] ov534_9: probe of 2-1:0.0 failed with error -22 11:06:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:06:58 executing program 2: r0 = socket$inet(0x2, 0x3, 0x94) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @remote}, 0x10) 11:06:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="03"], 0x1c}}, 0x0) 11:06:59 executing program 5: select(0xc, &(0x7f0000000000), 0x0, 0x0, 0x0) 11:06:59 executing program 3: shmat(0x0, &(0x7f0000ff6000/0x3000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) shmat(r0, &(0x7f0000ff6000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff8000/0x4000)=nil, 0x4000) 11:06:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x30}}], 0x1, 0xc000) pipe2(&(0x7f00000000c0), 0x0) [ 1700.212553][T12395] usb 2-1: USB disconnect, device number 27 11:06:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 11:06:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f00000013c0)={0x2, 0x0, @broadcast}, 0x10) 11:06:59 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x86100, 0x0) 11:06:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2022) 11:06:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000005680)={&(0x7f0000000880)=@file={0x0, './file1\x00'}, 0x200008ee, 0x0}, 0x0) 11:06:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xb}]}}, &(0x7f0000001100)=""/224, 0x26, 0xe0, 0x1}, 0x20) [ 1700.694407][T12395] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1701.054375][T12395] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1701.063561][T12395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.083341][T12395] usb 2-1: config 0 descriptor?? [ 1701.126483][T12395] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1702.664198][T12395] gspca_ov534_9: reg_r err -32 [ 1703.014085][T12395] gspca_ov534_9: Unknown sensor 0000 [ 1703.014158][T12395] ov534_9: probe of 2-1:0.0 failed with error -22 11:07:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:07:02 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f0000000440)) 11:07:02 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/net\x00') 11:07:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = getpid() sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x40}, 0x0) 11:07:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2f8186532285049, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 11:07:02 executing program 3: socketpair(0x1d, 0x0, 0x7, &(0x7f0000000040)) [ 1703.664538][T17668] usb 2-1: USB disconnect, device number 28 11:07:02 executing program 0: perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:07:02 executing program 5: socketpair(0x23, 0x0, 0x0, &(0x7f0000000500)) 11:07:02 executing program 2: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000480)) 11:07:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) 11:07:02 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') 11:07:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x300}, 0x0) [ 1704.254630][T17668] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1704.614283][T17668] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1704.623348][T17668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.633545][T17668] usb 2-1: config 0 descriptor?? [ 1704.676682][T17668] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1706.214164][T17668] gspca_ov534_9: reg_r err -32 [ 1706.563853][T17668] gspca_ov534_9: Unknown sensor 0000 [ 1706.563922][T17668] ov534_9: probe of 2-1:0.0 failed with error -22 11:07:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)) 11:07:06 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xb701, 0x0) 11:07:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:07:06 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000004700)='ns/mnt\x00') 11:07:06 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(0x0, 0x0, 0x0) sendfile(r3, r0, &(0x7f00000002c0)=0x9, 0x7fffffff) mmap(&(0x7f00006e1000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0xff}, {0x1ff, 0x7}]}, 0x14, 0x1) renameat2(r2, 0x0, 0xffffffffffffffff, 0x0, 0x325d92bf8f456bb1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x80800, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030300d3030303030303036302bcde06b757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,fowner<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000600), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11:07:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=""/161, 0x130, 0xa1, 0x1}, 0x20) [ 1707.211232][T12395] usb 2-1: USB disconnect, device number 29 11:07:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1, 0x0, 0x0, 0xc}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/151, 0x27, 0x97, 0x1}, 0x20) 11:07:06 executing program 3: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)={0x10, 0x4, 0x4, 0xff}, 0x40) 11:07:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x40) 11:07:06 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010328bd7000fddbdf2503"], 0x1c}}, 0x0) 11:07:06 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x101, 0x0) 11:07:06 executing program 3: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xedc0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@dmode}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}], [{@smackfshat={'smackfshat', 0x3d, ',)\\#]\\-!-]+.+--['}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 11:07:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8953, 0x0) [ 1707.754674][T12395] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1708.115665][T12395] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1708.124937][T12395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.167688][T12395] usb 2-1: config 0 descriptor?? [ 1708.206492][T12395] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1709.743662][T12395] gspca_ov534_9: reg_r err -32 [ 1710.123577][T12395] gspca_ov534_9: Unknown sensor 0000 [ 1710.123652][T12395] ov534_9: probe of 2-1:0.0 failed with error -22 11:07:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:07:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'wlan0\x00', @ifru_flags}) 11:07:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000000040)={'veth1_virt_wifi\x00', @ifru_flags}) 11:07:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc00, &(0x7f00000001c0)) 11:07:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(0x0, 0x0, 0x0) sendfile(r3, r0, &(0x7f00000002c0)=0x9, 0x7fffffff) mmap(&(0x7f00006e1000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0xff}, {0x1ff, 0x7}]}, 0x14, 0x1) renameat2(r2, 0x0, 0xffffffffffffffff, 0x0, 0x325d92bf8f456bb1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x80800, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030300d3030303030303036302bcde06b757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,fowner<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000600), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11:07:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x4000400, 0x4) [ 1710.769753][T14991] usb 2-1: USB disconnect, device number 30 11:07:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 11:07:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'lo\x00', @ifru_flags}) 11:07:09 executing program 4: bpf$MAP_CREATE(0x17, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 11:07:09 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)="d1", &(0x7f0000000400)='T'}, 0x48) 11:07:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/151, 0x27, 0x97, 0x1}, 0x20) 11:07:10 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') [ 1711.283866][T14991] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1711.714918][T14991] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1711.724098][T14991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.775856][T14991] usb 2-1: config 0 descriptor?? [ 1711.816122][T14991] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1713.323545][T14991] gspca_ov534_9: reg_r err -32 [ 1713.673366][T14991] gspca_ov534_9: Unknown sensor 0000 [ 1713.673417][T14991] ov534_9: probe of 2-1:0.0 failed with error -22 11:07:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:07:13 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 11:07:13 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[]) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000180)="17e47cd30be5ee12d40c9338161be35ac46502a1b1d5fc61c2f288d906d04279079a5af6d1f7d2c15963380cb813106a869fcb7a620d120f1ca889cac8dc4f8b75c76f9c10b9d0fcb6ebe5549f651c4833bd8ce608eb7fee5c", 0x59}, {&(0x7f0000000240)="a12d09f69708f595b459ab3375c482b55a5d0ddebb549aec788c71072268be6fd85d3946bb653d82910cf76e99fbbdfe060b97d6999e54", 0x37, 0xce74}, {0x0}, {&(0x7f00000002c0)=')', 0x1, 0x7fffffff}], 0x93462, &(0x7f00000004c0)={[{@volume}, {@gid}, {@longad}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'tmpfs\x00'}}]}) 11:07:13 executing program 3: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize}], [{@uid_lt}]}}) 11:07:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x80108906, 0x0) 11:07:13 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(0x0, 0x0, 0x0) sendfile(r3, r0, &(0x7f00000002c0)=0x9, 0x7fffffff) mmap(&(0x7f00006e1000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0xff}, {0x1ff, 0x7}]}, 0x14, 0x1) renameat2(r2, 0x0, 0xffffffffffffffff, 0x0, 0x325d92bf8f456bb1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x80800, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030300d3030303030303036302bcde06b757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,fowner<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000600), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1714.323416][T12395] usb 2-1: USB disconnect, device number 31 11:07:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x28}}, 0x0) 11:07:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x3}, 0x40) 11:07:13 executing program 3: r0 = semget$private(0x0, 0x3, 0x773) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000380)=""/219) 11:07:13 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x48200, 0x0) 11:07:13 executing program 4: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc, &(0x7f00000001c0)) 11:07:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x2, 0x1, 0x20, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x40) [ 1714.884608][T12395] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1715.294614][T12395] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1715.303838][T12395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.346935][T12395] usb 2-1: config 0 descriptor?? [ 1715.386132][T12395] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1716.893330][T12395] gspca_ov534_9: reg_r err -32 [ 1717.243266][T12395] gspca_ov534_9: Unknown sensor 0000 [ 1717.243332][T12395] ov534_9: probe of 2-1:0.0 failed with error -22 11:07:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:07:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x88, 0x23, 0x0, 0x0) 11:07:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KDSETMODE(r0, 0x2, 0x20000000) 11:07:16 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 11:07:16 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000040)=0x4) 11:07:16 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="16", 0x1}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(0x0, 0x0, 0x0) sendfile(r3, r0, &(0x7f00000002c0)=0x9, 0x7fffffff) mmap(&(0x7f00006e1000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0xff}, {0x1ff, 0x7}]}, 0x14, 0x1) renameat2(r2, 0x0, 0xffffffffffffffff, 0x0, 0x325d92bf8f456bb1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x80800, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d303030303030303030300d3030303030303036302bcde06b757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,fowner<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000600), 0x7fff) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1717.909364][T15707] usb 2-1: USB disconnect, device number 32 11:07:16 executing program 3: semop(0x0, &(0x7f00000013c0)=[{}, {}], 0x2) 11:07:16 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x8402, 0x0) writev(r0, &(0x7f0000005540)=[{&(0x7f00000031c0)="c0b445eadb972b685e46d578d22e2b8b206f00c1f747b246d54b004a98af24c28fa7417b103055df76513f", 0x2b}, {&(0x7f0000005840)="2a5a74ee3270119692d9ceae6bb5ea98b42d0c2b48e8cc5f4101c68724e2d8308a055860e19ae21b9517a7fdbaddbe2f740dd27674fce7d16511c797efb70dfe8102bec5a449c61cd08583e43fa487132a6a294df0ea7cba1b158c9eb3294a90baec344f8783125746420cb5c0e0f36e3fbeae4a5f984b30e19c16c6cd1bc5f8d057f9e6a40afac566f976ae08b6c73715e18a6d841070f241c489fd64b6e5f208aa513c5aa2a1818d9f6c54f1009e191d78716a90", 0xb5}, {&(0x7f00000032c0)="716eec77aa27505626408557c658180de3d66e8cf2acee54f25cfd9fba5e192325a4026f27fabb0eaf8a6c0fba393cb92df28b4ff4746c55ebaf5b4f863fc00a9d6399677249780598a61b0807091237296c01af89f7fd042919e5362bddb0ca9c17ec39807a969e487bee647c7a31b1de92b65763bc7e398b8e00bdece6a7a122b5359e11e9471ed184d341e031500769f03c20a130deb014106f16c5b73a42f2fc72d3a18341763e48b26e2a6fb495", 0xb0}, {&(0x7f0000003380)="2fa88878d3139a93951250c351e93836a8075cee1c08c5222e666748441f7acfd181d9418d0fae7476c666d976c75f983e87922bb5e8dddb74937a96a9157864aeaa9cfc1ca33ba06de17f8b669bc51429d18ed2a89e0212114d9ce972fcd06f58282bf89fb041e1845c76a09886f0fb7882aa5e9534577c594a6bcd1e32210a64cac7bb", 0x84}, {&(0x7f0000003440)="19432a614bb3a1b4e9f36266f8b69503e0aaae1ef0bc63575999a12a35bb59a2445e6d7376e45f8538c6c7b6184b4020c287c8732f6ed5648033c04896c870f8c2a49ba3d2c920882980d1c6496a89e5a440ca17a65be70d90ccc97a478ef44a57016d6b52bf082be784d2e8052ab15fa91e3b8846e2836e0da32981fa92b5d761539985e3a3c8cfb21ac28157263fc9852b4a3f5cee9ad20595ea09227540ea9d52b86bc0a926ba5ceb6699803e47ed6c9eead4394feac4466aa39959c2a59febdaf696395b4e5e3f807e3020e05c47c3b3984ba9d8578641cf44e61b715cc84ca2cb39d138fa7fe2c79e6a38ae5f90354fc41a24ebf81e", 0xf8}, {&(0x7f0000003540)="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", 0xc99}], 0x6) 11:07:16 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x8402, 0x0) write(r0, &(0x7f0000000e00)="01765e2a83e640177924", 0xa) 11:07:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff7d) 11:07:17 executing program 4: clone3(&(0x7f0000000000)={0x142080200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000001280)=[0x0], 0x1}, 0x58) 11:07:17 executing program 2: clone(0x40000880, 0x0, 0x0, 0x0, 0x0) [ 1718.543552][T15707] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1718.813011][T20413] vxcan1 speed is unknown, defaulting to 1000 [ 1718.993211][T15707] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1719.002333][T15707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.064294][T15707] usb 2-1: config 0 descriptor?? [ 1719.105861][T15707] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1719.165885][T20413] vxcan1 speed is unknown, defaulting to 1000 [ 1720.872272][T15707] gspca_ov534_9: reg_r err -32 [ 1721.242951][T15707] gspca_ov534_9: Unknown sensor 0000 [ 1721.243018][T15707] ov534_9: probe of 2-1:0.0 failed with error -22 11:07:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x39, 0x69, 0xcb, 0x40, 0x5a9, 0x1550, 0xdf38, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x20, 0x9b}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:07:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x9) 11:07:20 executing program 5: clone(0x5000400, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 11:07:20 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/242, 0xf2) 11:07:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0) 11:07:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000100)={'wlan0\x00'}) [ 1721.901985][T17666] usb 2-1: USB disconnect, device number 33 11:07:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x0) 11:07:20 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="260abf127d2f5f695320e5385abfbed56c07046a139bc4a4b92998015fc3b688e846bf82a75bddd45c7793e19e", 0x2d}, {&(0x7f00000000c0)="293a96c61fd555bcb04daccee3dd852b133ea8566db163d8b68d492c7d6da514310ed00d", 0x24}], 0x2) 11:07:20 executing program 5: mq_open(&(0x7f0000000000)='&\x00', 0x4000000, 0x0, 0x0) 11:07:20 executing program 0: setfsuid(0xee01) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 11:07:20 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 11:07:21 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x8402, 0x0) write(r0, &(0x7f0000000e00)="01765e2a83e6", 0x6) [ 1722.512794][T17666] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1722.883872][T17666] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=df.38 [ 1722.893093][T17666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.903419][T17666] usb 2-1: config 0 descriptor?? [ 1722.945250][T17666] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1724.613419][ T27] INFO: task syz-executor.5:18321 blocked for more than 143 seconds. [ 1724.621506][ T27] Not tainted 5.15.0-rc4-next-20211011-syzkaller #0 [ 1724.628652][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1724.637401][ T27] task:syz-executor.5 state:D stack:27944 pid:18321 ppid: 5941 flags:0x00004002 [ 1724.646667][ T27] Call Trace: [ 1724.649952][ T27] [ 1724.652935][ T27] __schedule+0x940/0x26f0 [ 1724.657367][ T27] ? io_schedule_timeout+0x140/0x140 [ 1724.662713][ T27] schedule+0xd2/0x260 [ 1724.666789][ T27] schedule_preempt_disabled+0xf/0x20 [ 1724.672149][ T27] __mutex_lock+0xa32/0x12f0 [ 1724.676794][ T27] ? usbdev_release+0x83/0x4b0 [ 1724.681662][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 1724.687260][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1724.693309][ T27] ? __fsnotify_parent+0x488/0x9d0 [ 1724.698472][ T27] ? fsnotify+0x1050/0x1050 [ 1724.703021][ T27] ? locks_remove_file+0x2f7/0x570 [ 1724.708190][ T27] usbdev_release+0x83/0x4b0 [ 1724.712851][ T27] __fput+0x286/0x9f0 [ 1724.716898][ T27] ? free_async+0x4e0/0x4e0 [ 1724.721401][ T27] task_work_run+0xdd/0x1a0 [ 1724.726027][ T27] do_exit+0xc16/0x2b40 [ 1724.730212][ T27] ? mm_update_next_owner+0x7a0/0x7a0 [ 1724.735632][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1724.740494][ T27] do_group_exit+0x125/0x310 [ 1724.745141][ T27] get_signal+0x47d/0x2160 [ 1724.749582][ T27] arch_do_signal_or_restart+0x2a9/0x1c40 [ 1724.755352][ T27] ? do_sys_openat2+0xa1/0x4d0 [ 1724.760124][ T27] ? build_open_flags+0x6f0/0x6f0 [ 1724.765196][ T27] ? get_sigframe_size+0x10/0x10 [ 1724.770142][ T27] ? syscall_enter_from_user_mode+0x1c/0x70 [ 1724.776086][ T27] ? perf_trace_preemptirq_template+0x29d/0x460 [ 1724.782401][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1724.787334][ T27] ? __x64_sys_openat+0x13f/0x1f0 [ 1724.792377][ T27] exit_to_user_mode_prepare+0x17d/0x290 [ 1724.798062][ T27] syscall_exit_to_user_mode+0x19/0x60 [ 1724.803588][ T27] do_syscall_64+0x42/0xb0 [ 1724.808012][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.813948][ T27] RIP: 0033:0x7ff4109107f4 [ 1724.818374][ T27] RSP: 002b:00007ff40de70cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1724.826827][ T27] RAX: 0000000000000005 RBX: 6666666666666667 RCX: 00007ff4109107f4 [ 1724.834857][ T27] RDX: 0000000000000001 RSI: 00007ff40de70d60 RDI: 00000000ffffff9c [ 1724.842883][ T27] RBP: 00007ff40de70d60 R08: 0000000000000000 R09: 0000000000000000 [ 1724.850855][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1724.858877][ T27] R13: 00007ffc23c61ebf R14: 00007ff40de71300 R15: 0000000000022000 [ 1724.866931][ T27] [ 1724.871989][T17666] gspca_ov534_9: reg_r err -32 [ 1724.877015][ T27] [ 1724.877015][ T27] Showing all locks held in the system: [ 1724.884908][ T27] 1 lock held by khungtaskd/27: [ 1724.889864][ T27] #0: ffffffff8bb814a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1724.899993][ T27] 1 lock held by in:imklog/6232: [ 1724.905068][ T27] 2 locks held by rs:main Q:Reg/6233: [ 1724.910441][ T27] #0: ffff888018c54af0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1724.919643][ T27] #1: ffff88807f332460 (sb_writers#5){.+.+}-{0:0}, at: ksys_write+0x12d/0x250 [ 1724.928782][ T27] 5 locks held by kworker/1:59/17666: [ 1724.934208][ T27] 5 locks held by kworker/1:60/17667: [ 1724.939582][ T27] #0: ffff888142f84938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1724.950373][ T27] #1: ffffc90018a2fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1724.961675][ T27] #2: ffff88801d4f7220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4330 [ 1724.970779][ T27] #3: ffff8880a13025c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x2178/0x4330 [ 1724.980794][ T27] #4: ffff88801d400168 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_port_init+0x1b5/0x2f10 [ 1724.990811][ T27] 1 lock held by syz-executor.5/18321: [ 1724.996340][ T27] #0: ffff88801d4f7220 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x83/0x4b0 [ 1725.005577][ T27] [ 1725.007906][ T27] ============================================= [ 1725.007906][ T27] [ 1725.016394][ T27] NMI backtrace for cpu 1 [ 1725.020714][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc4-next-20211011-syzkaller #0 [ 1725.030092][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.040150][ T27] Call Trace: [ 1725.043422][ T27] [ 1725.046356][ T27] dump_stack_lvl+0xcd/0x134 [ 1725.050958][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 1725.056243][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 1725.061519][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 1725.067528][ T27] watchdog+0xcb7/0xed0 [ 1725.071694][ T27] ? trace_sched_process_hang+0x280/0x280 [ 1725.077506][ T27] kthread+0x405/0x4f0 [ 1725.081567][ T27] ? set_kthread_struct+0x130/0x130 [ 1725.086760][ T27] ret_from_fork+0x1f/0x30 [ 1725.091212][ T27] [ 1725.094300][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1725.099510][ C0] NMI backtrace for cpu 0 [ 1725.099520][ C0] CPU: 0 PID: 18809 Comm: kworker/u4:18 Not tainted 5.15.0-rc4-next-20211011-syzkaller #0 [ 1725.099542][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.099555][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1725.099583][ C0] RIP: 0010:kasan_check_range+0x16/0x180 [ 1725.099608][ C0] Code: a8 01 48 0f 45 fa e8 b9 86 ec ff 0f 0b 0f 1f 80 00 00 00 00 48 85 f6 0f 84 70 01 00 00 49 89 f9 41 54 44 0f b6 c2 49 01 f1 55 <53> 0f 82 18 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 c7 0f 86 [ 1725.099627][ C0] RSP: 0018:ffffc900046e7770 EFLAGS: 00000086 [ 1725.099642][ C0] RAX: 0000000000000000 RBX: 000000000000000a RCX: ffffffff815b521d [ 1725.099656][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff3f940 [ 1725.099669][ C0] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffff8ff3f948 [ 1725.099682][ C0] R10: fffffbfff1fe7f28 R11: 000000000000003f R12: 0000000000000004 [ 1725.099695][ C0] R13: ffff88806e228000 R14: ffff88806e228a68 R15: dffffc0000000000 [ 1725.099710][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1725.099728][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1725.099743][ C0] CR2: 00007f8610038078 CR3: 000000000b88e000 CR4: 00000000003526f0 [ 1725.099757][ C0] Call Trace: [ 1725.099763][ C0] [ 1725.099771][ C0] __lock_acquire+0x6ed/0x54a0 [ 1725.099798][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1725.099821][ C0] ? mark_lock+0xef/0x17b0 [ 1725.099843][ C0] lock_acquire+0x1ab/0x510 [ 1725.099863][ C0] ? __get_locked_pte+0x2b6/0x4d0 [ 1725.099981][ C0] ? lock_release+0x720/0x720 [ 1725.100003][ C0] ? __text_poke+0x5d4/0x8c0 [ 1725.100043][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 1725.100066][ C0] _raw_spin_lock+0x2a/0x40 [ 1725.100088][ C0] ? __get_locked_pte+0x2b6/0x4d0 [ 1725.100107][ C0] __get_locked_pte+0x2b6/0x4d0 [ 1725.100127][ C0] ? __kmalloc_track_caller+0xc9/0x310 [ 1725.100148][ C0] __text_poke+0x1ae/0x8c0 [ 1725.100173][ C0] ? text_poke_loc_init+0x340/0x340 [ 1725.100196][ C0] ? __kmalloc_track_caller+0xc9/0x310 [ 1725.100218][ C0] text_poke_bp_batch+0x3d7/0x560 [ 1725.100242][ C0] ? mutex_lock_io_nested+0x1150/0x1150 [ 1725.100263][ C0] ? alternatives_enable_smp+0xf0/0xf0 [ 1725.100286][ C0] ? __jump_label_patch+0x159/0x1b0 [ 1725.100310][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1725.100334][ C0] ? __jump_label_update+0x351/0x400 [ 1725.100360][ C0] text_poke_finish+0x16/0x30 [ 1725.100382][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 1725.100404][ C0] jump_label_update+0x1d5/0x430 [ 1725.100434][ C0] static_key_enable_cpuslocked+0x1b1/0x260 [ 1725.100459][ C0] static_key_enable+0x16/0x20 [ 1725.100480][ C0] toggle_allocation_gate+0x100/0x390 [ 1725.100504][ C0] ? lock_release+0x720/0x720 [ 1725.100524][ C0] ? wake_up_kfence_timer+0x20/0x20 [ 1725.100548][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1725.100575][ C0] process_one_work+0x9b2/0x1690 [ 1725.100603][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1725.100631][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1725.100651][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 1725.100676][ C0] worker_thread+0x658/0x11f0 [ 1725.100705][ C0] ? process_one_work+0x1690/0x1690 [ 1725.100730][ C0] kthread+0x405/0x4f0 [ 1725.100751][ C0] ? set_kthread_struct+0x130/0x130 [ 1725.100775][ C0] ret_from_fork+0x1f/0x30 [ 1725.100804][ C0] [ 1725.101505][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1725.438306][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc4-next-20211011-syzkaller #0 [ 1725.447667][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.457710][ T27] Call Trace: [ 1725.460978][ T27] [ 1725.463899][ T27] dump_stack_lvl+0xcd/0x134 [ 1725.468490][ T27] panic+0x2b0/0x6dd [ 1725.472414][ T27] ? __warn_printk+0xf3/0xf3 [ 1725.477008][ T27] ? watchdog.cold+0x1b9/0x1de [ 1725.481788][ T27] watchdog.cold+0x1ca/0x1de [ 1725.486423][ T27] ? trace_sched_process_hang+0x280/0x280 [ 1725.492150][ T27] kthread+0x405/0x4f0 [ 1725.496233][ T27] ? set_kthread_struct+0x130/0x130 [ 1725.501428][ T27] ret_from_fork+0x1f/0x30 [ 1725.505850][ T27] [ 1725.509413][ T27] Kernel Offset: disabled [ 1725.513739][ T27] Rebooting in 86400 seconds..