0x1, 0x0, 0x0, 0x500}, 0x0) 08:58:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffad11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="640000002c00270d0000000000000000000000f9", @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028020000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 3035.388320][ T28] audit: type=1804 audit(1710233906.279:1389): pid=13037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6515/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 08:58:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) 08:58:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x400000000000000}, 0x0) 08:58:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffad11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="640000002c00270d0000000000000000000000f9", @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028020000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 08:58:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0x9, 0x20}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x1, 0x2}, {0x7fff, 0x20, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9c4, 0xb9}, {0x7f, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ce"]}]}}]}]}]}}]}, 0x90}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7b8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x94}, 0x40000) 08:58:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x500000000000000}, 0x0) 08:58:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x608}, 0x0) 08:58:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0x9, 0x20}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x1, 0x2}, {0x7fff, 0x20, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9c4, 0xb9}, {0x7f, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ce"]}]}}]}]}]}}]}, 0x90}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7b8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x94}, 0x40000) 08:58:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:27 executing program 2: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) 08:58:27 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0x9, 0x20}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x1, 0x2}, {0x7fff, 0x20, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9c4, 0xb9}, {0x7f, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="ce"]}]}}]}]}]}}]}, 0x90}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7b8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x94}, 0x40000) 08:58:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x700}, 0x0) 08:58:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x600000000000000}, 0x0) 08:58:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:27 executing program 2: io_uring_setup(0x3c2f, &(0x7f0000000d40)={0x0, 0x0, 0x1}) 08:58:27 executing program 2: link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x816) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="1f246e22ed13498340e9799fb93700002dbd0100000000000100", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50803c8cb3640dc5) sched_setscheduler(0x0, 0x0, &(0x7f00000005c0)=0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 08:58:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_DURATION={0xd, 0x57, 0x1}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:28 executing program 2: link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x816) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="1f246e22ed13498340e9799fb93700002dbd0100000000000100", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50803c8cb3640dc5) sched_setscheduler(0x0, 0x0, &(0x7f00000005c0)=0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 08:58:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x700000000000000}, 0x0) 08:58:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) close(r5) recvfrom$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x22100, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x119401, 0x87, 0x20}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x9, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(0xffffffffffffffff) r10 = accept4$netrom(r7, &(0x7f0000000780)={{0x3, @rose}, [@bcast, @bcast, @bcast, @rose, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000800)=0x48, 0x80800) listen(r10, 0xff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xffffffe1}}, './file0\x00'}) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f00000002c0)=0x2000000) pwritev2(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='j', 0x1}], 0x1, 0x0, 0x0, 0x0) close(r13) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x3, 0x0, 0x6, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x8686}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6d46, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x31, r7, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x3, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[r9, 0xffffffffffffffff, r11, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x0, 0xa}, {0x1, 0x3, 0xc}, {0x2, 0x5, 0xb, 0x8}, {0x2, 0x2, 0x4, 0x6}, {0x0, 0x4, 0x1, 0x2}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0xdc4}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x806}, 0x0) [ 3037.563695][ T28] audit: type=1804 audit(1710233908.459:1390): pid=13110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6518/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 08:58:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x800000000000000}, 0x0) 08:58:29 executing program 2: link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x816) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="1f246e22ed13498340e9799fb93700002dbd0100000000000100", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50803c8cb3640dc5) sched_setscheduler(0x0, 0x0, &(0x7f00000005c0)=0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 08:58:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_DURATION={0xd, 0x57, 0x1}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) close(r5) recvfrom$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x22100, 0x0) (async) r6 = open(&(0x7f0000000100)='./file0\x00', 0x22100, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x119401, 0x87, 0x20}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x9, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) close$fd_v4l2_buffer(0xffffffffffffffff) (async) close$fd_v4l2_buffer(0xffffffffffffffff) close$fd_v4l2_buffer(0xffffffffffffffff) (async) close$fd_v4l2_buffer(0xffffffffffffffff) accept4$netrom(r7, &(0x7f0000000780)={{0x3, @rose}, [@bcast, @bcast, @bcast, @rose, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000800)=0x48, 0x80800) (async) r10 = accept4$netrom(r7, &(0x7f0000000780)={{0x3, @rose}, [@bcast, @bcast, @bcast, @rose, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000800)=0x48, 0x80800) listen(r10, 0xff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xffffffe1}}, './file0\x00'}) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f00000002c0)=0x2000000) pwritev2(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='j', 0x1}], 0x1, 0x0, 0x0, 0x0) close(r13) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x3, 0x0, 0x6, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x8686}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6d46, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x31, r7, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x3, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[r9, 0xffffffffffffffff, r11, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x0, 0xa}, {0x1, 0x3, 0xc}, {0x2, 0x5, 0xb, 0x8}, {0x2, 0x2, 0x4, 0x6}, {0x0, 0x4, 0x1, 0x2}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0xdc4}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3038.469595][T13127] __nla_validate_parse: 97 callbacks suppressed [ 3038.469613][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_DURATION={0xd, 0x57, 0x1}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3039.370973][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3039.383114][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x900}, 0x0) 08:58:30 executing program 2: link(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x4004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x816) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="1f246e22ed13498340e9799fb93700002dbd0100000000000100", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50803c8cb3640dc5) sched_setscheduler(0x0, 0x0, &(0x7f00000005c0)=0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) 08:58:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 3039.493400][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3039.514435][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3039.536506][T13148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) close(r5) (async) recvfrom$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x22100, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) r7 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x119401, 0x87, 0x20}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x9, 0x0}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) (async) close$fd_v4l2_buffer(0xffffffffffffffff) (async) close$fd_v4l2_buffer(0xffffffffffffffff) r10 = accept4$netrom(r7, &(0x7f0000000780)={{0x3, @rose}, [@bcast, @bcast, @bcast, @rose, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000800)=0x48, 0x80800) listen(r10, 0xff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xffffffe1}}, './file0\x00'}) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x400, 0x8}, 0xc) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f00000002c0)=0x2000000) (async) pwritev2(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='j', 0x1}], 0x1, 0x0, 0x0, 0x0) close(r13) (async) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffc00}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x3, 0x0, 0x6, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x8686}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6d46, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x31, r7, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xa, 0x3, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x6, &(0x7f0000000600)=[r9, 0xffffffffffffffff, r11, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x1, 0x0, 0xa}, {0x1, 0x3, 0xc}, {0x2, 0x5, 0xb, 0x8}, {0x2, 0x2, 0x4, 0x6}, {0x0, 0x4, 0x1, 0x2}, {0x5, 0x4, 0x7, 0x5}], 0x10, 0xdc4}, 0x90) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3039.606671][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000005200), &(0x7f0000005240)='./file0\x00', 0x0, &(0x7f00000072c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r9, &(0x7f0000000000)={0x28}, 0x28) sendfile(r7, r9, &(0x7f0000000000)=0x7f, 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3040.472241][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 08:58:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) [ 3040.554869][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 3040.635513][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3040.663008][T13173] fuse: Bad value for 'fd' 08:58:31 executing program 2: syz_open_dev$dri(&(0x7f0000001240), 0x0, 0x40) [ 3040.673381][ T28] audit: type=1804 audit(1710233911.569:1391): pid=13176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6521/cgroup.controllers" dev="sda1" ino=1989 res=1 errno=0 08:58:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x80, 0x8000, 0x5, 0x4a1, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5}, 0x48) sendto$packet(r3, &(0x7f0000000440)="1033dad9f5cb55e4c526f368be2b3fa3ff0e4e77dc391da25f05e376421978b596a9dad6b20c06088292ccbe17a449c6159b2958581b865e77f8b4903b857ad643a350e0917ce977a2f911009e717e4d3412d50bdd19277822a730af03cc2d5c18e2982d6d1fbd1bcb794088bf518bd2ba4f3dfd3cb5c53e3783075df04877a95162676f0e013d0476893e7fd0459bc3086d9089473d5c9f2b3a53fd5fba", 0x9e, 0x20040004, &(0x7f0000000500)={0x11, 0xe0, r2, 0x1, 0x1}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x3, '\x00', r2, r8, 0x1, 0x1, 0x1}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:31 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x4008}, 0x18) 08:58:31 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) 08:58:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 08:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xb00000000000000}, 0x0) [ 3040.995626][T13196] QAT: Invalid ioctl 1081126560 08:58:31 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x80, 0x8000, 0x5, 0x4a1, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5}, 0x48) sendto$packet(r3, &(0x7f0000000440)="1033dad9f5cb55e4c526f368be2b3fa3ff0e4e77dc391da25f05e376421978b596a9dad6b20c06088292ccbe17a449c6159b2958581b865e77f8b4903b857ad643a350e0917ce977a2f911009e717e4d3412d50bdd19277822a730af03cc2d5c18e2982d6d1fbd1bcb794088bf518bd2ba4f3dfd3cb5c53e3783075df04877a95162676f0e013d0476893e7fd0459bc3086d9089473d5c9f2b3a53fd5fba", 0x9e, 0x20040004, &(0x7f0000000500)={0x11, 0xe0, r2, 0x1, 0x1}, 0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x3, '\x00', r2, r8, 0x1, 0x1, 0x1}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:32 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) 08:58:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7}, 0x90) [ 3041.165394][T13208] QAT: Invalid ioctl 1081126560 08:58:32 executing program 2: r0 = io_uring_setup(0x59be, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x20040], 0x2) 08:58:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000005200), &(0x7f0000005240)='./file0\x00', 0x0, &(0x7f00000072c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r9, &(0x7f0000000000)={0x28}, 0x28) (async) sendfile(r7, r9, &(0x7f0000000000)=0x7f, 0x5) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:32 executing program 2: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x80080) 08:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xc00000000000000}, 0x0) 08:58:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x80, 0x8000, 0x5, 0x4a1, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5}, 0x48) (async) sendto$packet(r3, &(0x7f0000000440)="1033dad9f5cb55e4c526f368be2b3fa3ff0e4e77dc391da25f05e376421978b596a9dad6b20c06088292ccbe17a449c6159b2958581b865e77f8b4903b857ad643a350e0917ce977a2f911009e717e4d3412d50bdd19277822a730af03cc2d5c18e2982d6d1fbd1bcb794088bf518bd2ba4f3dfd3cb5c53e3783075df04877a95162676f0e013d0476893e7fd0459bc3086d9089473d5c9f2b3a53fd5fba", 0x9e, 0x20040004, &(0x7f0000000500)={0x11, 0xe0, r2, 0x1, 0x1}, 0x14) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x3, '\x00', r2, r8, 0x1, 0x1, 0x1}, 0x48) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 08:58:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000005200), &(0x7f0000005240)='./file0\x00', 0x0, &(0x7f00000072c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_INODE(r9, &(0x7f0000000000)={0x28}, 0x28) (async, rerun: 32) sendfile(r7, r9, &(0x7f0000000000)=0x7f, 0x5) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:32 executing program 2: bpf$OBJ_GET_PROG(0x18, 0x0, 0x0) 08:58:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) 08:58:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00210000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xf00000000000000}, 0x0) 08:58:32 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'dvmrp0\x00'}}, 0x1e) 08:58:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @private}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@ipv6_deladdrlabel={0x68, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x7d662c46e22bb830, 0x0, r5}, [@IFAL_LABEL={0x5, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000894}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) dup3(r4, r4, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3041.766542][ T28] audit: type=1804 audit(1710233912.659:1392): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6523/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 08:58:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 08:58:32 executing program 2: io_uring_setup(0x4268, &(0x7f0000000180)={0x0, 0xfffffffc, 0x7ff}) 08:58:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, 0x0, 0x0) 08:58:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x1000000000000000}, 0x0) 08:58:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00210000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:33 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:58:33 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x2102, 0x0) 08:58:33 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xff13) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xff13) [ 3042.193855][ T28] audit: type=1804 audit(1710233913.089:1393): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6524/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 08:58:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 08:58:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b80)={0x34, 0x0, &(0x7f0000000a80)=[@request_death, @acquire_done, @clear_death], 0x0, 0x0, 0x0}) 08:58:33 executing program 2: socket$inet6(0xa, 0x801, 0x106) 08:58:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00210000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x1100000000000000}, 0x0) 08:58:33 executing program 2: bpf$OBJ_GET_PROG(0x1b, 0x0, 0x0) 08:58:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @private}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@ipv6_deladdrlabel={0x68, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x7d662c46e22bb830, 0x0, r5}, [@IFAL_LABEL={0x5, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000894}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) dup3(r4, r4, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @private}, &(0x7f0000000280)=0xc) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@ipv6_deladdrlabel={0x68, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x7d662c46e22bb830, 0x0, r5}, [@IFAL_LABEL={0x5, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000894}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r10, r9, 0x0, 0x10000a014) (async) dup3(r4, r4, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 08:58:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1400}, 0x0) 08:58:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) socket(0x2c, 0x1, 0x5) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c001200100000fee2bca2fcceb1ffff6864aea6", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000), r0, 0x0, 0x0, 0x0) 08:58:33 executing program 2: bpf$OBJ_GET_PROG(0x23, &(0x7f0000000bc0)=@o_path={0x0}, 0x18) 08:58:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x1400000000000000}, 0x0) 08:58:33 executing program 2: syz_io_uring_setup(0xc66, &(0x7f0000000080)={0x0, 0x8, 0x2a}, 0x0, 0x0) 08:58:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async) socket(0x2c, 0x1, 0x5) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c001200100000fee2bca2fcceb1ffff6864aea6", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1500}, 0x0) 08:58:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) [ 3042.950204][ T28] audit: type=1804 audit(1710233913.839:1394): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6525/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 08:58:33 executing program 2: syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x55a1, &(0x7f0000005b00)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMOq4O34UR/Qzawz76b51iqpbXXYhoLTz/f7Rdap+53nr0XXuvXUuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH8P6x28+6u8ueXr0qA3zBix/7cj//nH94csWvfe//vD8DXfsO+8H61ctWVL5hxc3njL5ezcd2bhh5YSXQmjpLFeWFC87c/GKH6266FvfefiMW+59f+/ZS6sy9WbioW/Hn/LMnatjq7/vF8LKshAq0oHBtUmgMnO/NtY3sDaEXcKWQLZEW5+kRLrh8ERNCAvDlkC2qp/UhFCbExj368dWz+tI3FgTwoEhhOp0G/9cnbRRkw1sThKNVUmgT7rEtIok8NHmRDawqjwJwDaLb4bsi355S36G+q7LFXn9VW63jn2x0sPrFRP1xfO9c/wO7lSOqvQDLdv0tBVUxw5R8PZY493WA95tBdv5Ok9b7hepzDeUzVtC1aF8UtvkCbPaZ8ZHykNTU69iNe2g5/nljZdN3Jp0j3kdxg7Ub5fX4ZMXDrx7QeOY3W99dMPkN6ueX7Ct3Sy2eXe06pB5zfWY5zEa6fOkB7z9Cr4lNfjSFUK488RN7/7+lbH/9zcPPzv4g28PPWfIS68Nrbv1+9P6/fm5/6fytqkbC+b/9Z8+/48v53hbnpc7tvpxXTI3j4/UxsS7dcncHAAAAHqMnrDX9K0Rh7xbu67h0f2/uWLyBYvmvXHm+X+s+nnfCYecfNrQH95189QzCub/DaUd/4+H/GtzR7smhJGdiav6h7Bn5+NJYGnszjn9Q9ivM9WSHzg+FVgTwl6diUHZqlIlescSDanAW3WZwMhUYG0MtKQCi2PgulTg6hhYngpMjIE1qcAJMRCm5I/jkLrMOEoO1MRAa7IRl8ezEP6tLraW2lavZKsCAADYTjKzw8r8uznnOmxrhji9XF7TXYZ4BnbRDNWpGtIz2Oy0qmgNFd3VUN5dDdlxz/n04RfUXNZdzQWnYZTlZ/jg4Afmrn7on35684Qjnjnk49azXl2/6vHRm3r91Xtjfnr5uPnDxhfM/5s/ff5f3UVHygqO/4cwtvNvzF2eibRn460teRkAAACAbVDxxtJTfzX3k7Ilvzhv44F/esa4a3uv2H//AWsPfeD/Nbw94MRVBxbM/0eWdv5/3CfSKydzWBd3Q0ztH0JzfiCpdkRhIDnq3TcTAAAAgJ4gezw+eyx8SuY2OUU7PZ8uzN+ylfnjgf+RXeYfPO7adc2r7zxtyojD16zZdNbury7b8MxuB7730sGnnnnSg1Mb7iuY/7eUdv5/n/zbpBNrYy9u6B9C75zAk7GXHYFODTGw/rj8QGb8a+MGuCZWlTkxIVvVNbFEaww0pwILi5V4Lltiz/xA5snKNn5VdhxTMiVyAgAAAPC5i7sD4nH5eP7/s+f3e/xvl9122cNL1oW+5y7/1RXHDh84f3Dvd6Y9d9hjf/n+qVML5v+tW3f+f+c8uOD0/va+IQypCKFX+ocB6/okCwPGQG1ZJvHTPkldvdJVXdknhBEdA0tXtSGz/n9Feo3BF2qSqmJgz/3v2tjYkbizJoQhuYGXxi8a3pGYlQpkG/+zmhD27RhtuvEVvZPGK9ON39w7hK/lBLJVTewdQkdjVemqHq/OXMcgXdXy6hB2zQlkqzqyOoTZAYCeKv4vnZT74MWzL506ob29bcYOTMSd+DVh8pT2tqaJ09onVRfp06RUn/PWMZpbOKZSL33zamaNontGNfUvJZ39oWBzbluZHfkFZw5m7scvQ5Wd4xxWmXf3sPSQDz6gsImQ81Wq2JDLd/CQ++RWsuVJLKg/5q8KfUPvWRe3zWi6ZMLMmTOGJn9LzT4s+RuPMyXbamh6W/Xpqm8lvDyKLpeV8lm3VWNuJUNmXjB9yMWzLx085YIJ57ad23bhEcOPOOqoYYcfPnxIx6Cak7/djLSxq5pTI928qMRhbceRfrUip5LP40NDQkKipyVW/cterx6729IfrLht8Yxfth/T9stv7rrrmCVV335p0+VXHPjs//ioYP4//dPn//FTJ37wZ9ZnKHb8vz4e5k8e33KYvzUGFpZ6/L++2NH87IkBDanAnBiY4zA/AAAAXw5xd2Tcmxl3Sj82f49/uHvcA2Pmrz/06XUvlK3vc+hff/yv5ZVXjPsvxz3UcMf3/6Jg/j+ntN//b6f1/7NL148qtsz/oFiiudj6/+ll/rPr/88ptv5/epn/7Pr/C7+A9f9nZQOpTfJv1v8HAAC+DD6/9f+7Xd4/fYGAggzdLu+fvkBAQYZul/Ev9QIBW73+/2MNh4z82erv/a5x2UXT3vtvQx4YPWDvhn95bJ+rJ00dOXr0iMH/UDD/v660+b+F+wEAAGDncdDE45/ZOGnf46/9n3fsstfPWr+7+xG7/XDZ0W3zN62f+Bd3vH/enxfM/xeWNv///Nf/C8XO/28oFmgptjCg9f8AAADooYqt/zf05u9c+friEx6878ppo1pbx8++6toDVh9UfXp4ZfT8hj+Zcf8nBfP/5aXN/+NpF+V5uWNvPq5L1rQL6TXt3q3L/mQAAAAAeoby0NRUWWLevIVRj//sbb6cWQr009K5nn74gBcf+vqIk+cvrrr2jbI9hm1+5saZh574jR+/vnGfy+46/4IDCub/a0qb/+f9LuPJCwfevaBxzO4f3/rohslvVj2/YMvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8MU76dGfXfvuxCXfmLPw17v/vNfY55dvmDWnaXbtja//+PrfHHX3o+MKfv8fxnaWK/b7/3jdv/j7gq/k5Y6tdr/+X+b+uNH3zu5csnBdXQgH5AamXjl1l5C5Nv9BuYHVZw7aoyNxZbrEI6+d8EZH4ux04OTBAz7sSBydCrTGRRL3SgfiVRU/7JcKxOUVX0gH4vZYng5UZQI/6JeMoyy9rd6uTbZVWXpbvVwbQv+cQHZbraxN2ihLD/DGVCA7wIvSgTjAUzKB8nSv7u2b9CoGamPR2/smvQIAYKcVvwVWhslT2tua41f4ePvVivzbKG/JsrmF1ZaV2PyrmaXJ7hnV1L+UdK/0d9Et1xqvDNUdQxha8HU1N0tZ5yi3Ty3dbLqvFBlyd6u9lRcpl7a1m66q+IhqkhE1TZzWPqmy24Ef1n2WYRXdZhlaMNnJzVLeuUlLqKWEvpQwohK3TQldjvfLQ1NTr1Sur8dgfcjT3Sui1N/r567zV+xVkJvn6bfbn3nq719cud+Tf3z23I/+bNJ3L593zlnvH31e9d/857Jn/+vAXQvm//Wlzf+rc8f1YeZiAHPilfVG9A+htcQRAQAAwJffeRe+Nv/7j1//1vqWxjemDbl+9T/OvvnSirqlV//py4/85abx1569rfG3f3nXfo9OnvDcV84/bNlJb+536BWNZ7/zwJ/MG/fwNX1v+/H8u35UMP9vKG3+H/dgZQ4FJ3s71sTr/1/VP4TOS+vXJ4Glcbjn9A9hv85USyyRXFB/VCzRnASWxh0mg2KJ1pb8qnrHwPJU4K26TGBNKrA2BjJ7Ke4KmV0519eFMLwzNTa/xPRYoj4V+HYMNKQCTTHQnAr0i4GRqcC/9ssEWlKBp2MgTMnfVg/0y2wrAACArZGZZ1Xm3w3ped7yiu4ylHWXoU93Gcq7y1DdXYZio4j3748ZKlMnr5TlZKpM11qTqqUgQ7wY/lb3qyBDeC4/Z7pgQdPx/IPs+QZl+RkeOvXr912zYPKg8t98snZp6wcPTlxx++xjV573yF89NWn/RffcuG/B/L+5tPl/n/zbpPW1cf6/5fp/SeDJ2L0b4qnjDTGw/rj8QGbHwNo42b0mW1VLpkRm0n5NLDEyBhpSgekxMDIVaB2bCSzcIz+QmWlnG78q2/iUTImcAAAAAHzu4g6CuJsmzv//fdnzxzxRseief3x9/D33z3nnvvt/ft99t98/+s5N33zhqkvfv+STgvn/yNLm/7G9vrmNXR178/t+Iaws29KbbGBwbRKI+zFq48/jB9aGsEvODo5sibY+SYmqVMPhiZrkF+pV6ap+UpOsMRDvj/v1Y6vndSRurAnhwJy9L9k2/rk6aaMmHWisSgJ90oFpFUkg7vnJBlaVJwHYZtm9gvEFlTnVJau+63JFXn9flmuCpodXsA+0i3xd/eZqR6lOP5DZp5q1dU9bQXXsEAVvjzXebT3x3Vbv3Zb7RSrzDWXzllB1KJ/UNnnCrPaZ8ZHcX7IW2EHPc+6vVEtJb4fX4ZzP3tvuVac70Jz6+GjuulzXr8OyWN2TFw68e0HjmN1vfXTD5Dernl9QcjeKiD8Ufq5qQH3u5t3RqkPmNdfjPk9afJ70xH8DDZ62EMKGy0+6YWTV9KtWjj7s6H3eOOO06pkfzPvrB1956P39/3bFxGHfGFAw/28pbf5fkbrt9O9xY17cP4SDczbuurj5T+yffA7mBJJPyV0LA8kh99frin5yAgAAwPaW3d2R3V8wJXObnBCenicX5m/Zyvxxf8XILvOX2u+fDDptnwf3uHfc9acfc8vf/25sv43jX15y3IrWYxqXHvuL/3R2zbyC+X/rp8//e6e66fi/4//sII7/d2ln3xXdO/3AnG3aFV1QHTuE4/9d2tnfbY7/d8nxf8f/u+L4fzcc/+/Szv60FXxLmu5LVwhh2JizBtfeM/ipDweu/u1Tz0z5p7mtE+771jW37b35u/WLF9Tv3rdg/j+9tPm/9f+6XrQvu/5fa7H1/6YXW/9vjvX/AACAHarIQnPpeV7B6n0FGdKr9xVk6HaBwG6XGLT+31av//fEMUePXz568W/X7DvmoCv6zp17+m5P3/Jyy8wPa+746MM9fnXwqIL5/5zS5v/x5dA3t/Wesv5fw9giVV0XA9MtDAgAAMDOqNgOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL5Ye950w/jjmqtP+d2Jl9eM/uEj6w6qvu610y9fNuH2SV+788JBs1YsWVL5hxc3njL5ezcd2bhh5YSXQpjSWa4sKV525uIVP1p10be+8/AZt9z7/t6zl1Zn6q3M3O6dlzu2+nFdCAtzHqmNiXfrOu5sCYwbfe/sio7EuroQDsgNTL1y6i4dicV1IRyUG1h95qA9OhJXpks88toJb3Qkzk4HTh484MOOxNGZQFm6u3/TL+luWbq78/qF0D8nkO3u+f3yq8q2cVImUJ5u4+9qkzZioDYWvbk2aSMG2mOJKb1DGFIRQq90Vb+oTqrqla7qf1cnVfVKV3VFdQgjQggV6ap+W5VUVZEe+XNVSVUxsOf+d21s7EgsqgphSG7gpfGLhnckZqQC2cZPqwph346XTLrxByqTxivTjd9UGcLXQghV6RKbKpISVekSGypC2DUnsGUjVoQwO/DlED99JuU+ePHsS6dOaG9vm7EDE1WZtmrC5CntbU0Tp7VPqk71qZiynPTmuZ997K9uvGxix+09o5r6l5KuyJSr7OzysMq8u4ft7L2P/eqTW8mW56Og/pi/KvQNvWdd3Daj6ZIJM2fOGJr8LTX7sORvr0w02VZDe8q2asytZMjMC6YPuXj2pYOnXDDh3LZz2y48YvgRRx017PDDhw/pGFRz8nd7jHTR5z/Sr1bkVPJ5vP8lJCR6WqI879OteWf/HC/4or+lo5WhuvMDumBakZulrHOU22PQx3/GEX+WryndjmhowcShIMuw7rMcVjCZ2JKlJsnS+bWuYHKYW1N55yaN98tDU1OvYtuhPv9u7uZ9Zxs278uZTVdqGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3D6NkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8/pyM3") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0x5000940b, &(0x7f0000000080)) 08:58:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x1500000000000000}, 0x0) 08:58:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @private}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=@ipv6_deladdrlabel={0x68, 0x49, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x7d662c46e22bb830, 0x0, r5}, [@IFAL_LABEL={0x5, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000894}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) dup3(r4, r4, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async) socket(0x2c, 0x1, 0x5) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c001200100000fee2bca2fcceb1ffff6864aea6", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/20, 0x14, 0x62, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 3043.429832][ T28] audit: type=1804 audit(1710233914.319:1395): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6526/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 08:58:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e00001e", @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x13) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x2000000000000000}, 0x0) [ 3043.497732][T13351] __nla_validate_parse: 35 callbacks suppressed [ 3043.497752][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3043.543713][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/20, 0x14, 0x62, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) recvfrom(r0, &(0x7f0000000080)=""/20, 0x14, 0x62, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) [ 3043.618258][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3043.772652][ T28] audit: type=1804 audit(1710233914.669:1396): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6527/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 3043.810905][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x2c00000000000000}, 0x0) [ 3043.893917][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3043.931958][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x3580}, 0x0) [ 3043.957420][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/20, 0x14, 0x62, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3044.093326][T13374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) [ 3044.244322][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x4000000000000000}, 0x0) 08:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x9, 0x800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/105, 0x69}], 0x1) [ 3044.367461][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4788}, 0x0) 08:58:35 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e00001e", @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x13) (async) socket$netlink(0x10, 0x3, 0x13) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x6000000000000000}, 0x0) 08:58:35 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x55, &(0x7f0000000200)={0x1, {{0x1c, 0x1c, 0x3}}, {{0x1c, 0x1c, 0x1}}}, 0x108) 08:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x9, 0x800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4888}, 0x0) 08:58:35 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 3044.813760][ T28] audit: type=1804 audit(1710233915.709:1397): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6528/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 08:58:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x6558000000000000}, 0x0) 08:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x9, 0x800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:35 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0xc2}) [ 3044.919317][ T28] audit: type=1804 audit(1710233915.739:1398): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6528/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 08:58:35 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3}) 08:58:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 08:58:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e00001e", @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2e00001e", @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x13) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:36 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000000)}) 08:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x8100000000000000}, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x80, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}}}}]}, 0x78}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={r6}, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r6, 0x80, 0x74aab494, 0x2792}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc}]}]}]}}]}, 0x50}}, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 3045.504738][ T28] audit: type=1804 audit(1710233916.399:1399): pid=13447 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6529/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 08:58:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 08:58:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) close_range(r0, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000c8553a2ed54bbdca000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x8847000000000000}, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x80, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}}}}]}, 0x78}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={r6}, 0x8) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r6, 0x80, 0x74aab494, 0x2792}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc}]}]}]}}]}, 0x50}}, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x80, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}}}}]}, 0x78}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000000)={r6}, 0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r6, 0x80, 0x74aab494, 0x2792}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc}]}]}]}}]}, 0x50}}, 0x0) 08:58:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:36 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:58:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6488}, 0x0) [ 3046.072823][ T28] audit: type=1804 audit(1710233916.969:1400): pid=13481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6530/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 08:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x8848000000000000}, 0x0) 08:58:37 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:58:37 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000c8553a2ed54bbdca000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:37 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:58:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b80080001000700000024000280030000000000fcc3852d5a8a3911b48551fde2b40609000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:37 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:37 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:37 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 08:58:37 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3046.601173][ T28] audit: type=1804 audit(1710233917.489:1401): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6531/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 08:58:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 08:58:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b80080001000700000024000280030000000000fcc3852d5a8a3911b48551fde2b40609000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:37 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:58:37 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:58:37 executing program 2: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6bc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00002c4000/0x4000)=nil, 0x4000, 0x4) read(r0, &(0x7f00000001c0)=""/168, 0xa8) 08:58:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xa9dd674dee7f0000}, 0x0) 08:58:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b80080001000700000024000280030000000000fcc3852d5a8a3911b48551fde2b40609000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b80080001000700000024000280030000000000fcc3852d5a8a3911b48551fde2b40609000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) (async) 08:58:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x7300}, 0x0) 08:58:38 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000240)) 08:58:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') pread64(r0, &(0x7f0000000200)=""/150, 0x96, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/136, 0x88}], 0x1) 08:58:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) close_range(r0, r0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000c8553a2ed54bbdca000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xb105000000000000}, 0x0) 08:58:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="fd7061dff0edce65691d3caf6744b4272585bb6dc14dc7d9c72106a51d22bc74d35c160255617d45226e8762736373f3ab62e0ecb773f55669", @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x46900) ftruncate(r11, 0x800) lseek(r11, 0x20400, 0x1) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x80001d00c0d0) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x80049367, &(0x7f0000000000)) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8035}, 0x0) 08:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xb8a0938c00000000}, 0x0) [ 3047.687465][ T28] audit: type=1804 audit(1710233918.569:1402): pid=13583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6533/bus" dev="sda1" ino=1991 res=1 errno=0 08:58:38 executing program 2: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) [ 3047.747866][ T28] audit: type=1804 audit(1710233918.629:1403): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6533/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 08:58:38 executing program 2: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 08:58:38 executing program 2: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 08:58:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="fd7061dff0edce65691d3caf6744b4272585bb6dc14dc7d9c72106a51d22bc74d35c160255617d45226e8762736373f3ab62e0ecb773f55669", @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x46900) ftruncate(r11, 0x800) (async) lseek(r11, 0x20400, 0x1) (async) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x80001d00c0d0) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x80049367, &(0x7f0000000000)) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 08:58:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8847}, 0x0) 08:58:39 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) [ 3048.513723][T13624] __nla_validate_parse: 52 callbacks suppressed [ 3048.513743][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, 0x0, 0x0) 08:58:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="fd7061dff0edce65691d3caf6744b4272585bb6dc14dc7d9c72106a51d22bc74d35c160255617d45226e8762736373f3ab62e0ecb773f55669", @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) r11 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x46900) ftruncate(r11, 0x800) lseek(r11, 0x20400, 0x1) (async) r12 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x80001d00c0d0) ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x80049367, &(0x7f0000000000)) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, 0x0, 0x0) [ 3048.678159][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 08:58:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) ftruncate(r3, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, 0x0, 0x0) 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0), 0x0) [ 3048.864828][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3048.880834][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x0) [ 3048.912818][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0), 0x0) [ 3049.012414][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0), 0x0) [ 3049.060884][ T28] audit: type=1804 audit(1710233919.949:1404): pid=13668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6536/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 08:58:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 3049.191147][T13674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 08:58:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8864}, 0x0) [ 3049.375596][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3049.393817][T13683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) 08:58:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}}, 0x0) [ 3049.530630][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) 08:58:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x40}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="640000000176ee00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) 08:58:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) ftruncate(r3, 0x9) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:40 executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800414, &(0x7f00000001c0)=ANY=[], 0x1, 0xbf4, &(0x7f0000001840)="$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") creat(&(0x7f0000000100)='./file3\x00', 0x0) 08:58:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8902}, 0x0) 08:58:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 3050.020173][T13712] sch_fq: defrate 9 ignored. 08:58:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x40}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="640000000176ee00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x40}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="640000000176ee00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) (async) 08:58:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') lseek(r0, 0xd7, 0x0) read$FUSE(r0, &(0x7f0000005fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f00000005c0)=ANY=[@ANYRES64=r1, @ANYRES64, @ANYRES32=r2, @ANYRESHEX, @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x14e6, &(0x7f0000002a80)="$eJzs3Au4jdX2MPAx5pwvm6SV5LKZY46XlVwmSZJLklySJEmS3BKSJElCYpNbEpKQe5J7SG4hud9vuSfJkSRJSEgyv0enc5zz73xP/++cvs/3fXv8nmc+e479rjHXmGusvdf7rmfv9W2HQVXqVa1Yh5nhP4J//ZIGACkA0BcArgGACABKZiuZ7dLxTBrT/rM7EX+uh6Ze6QrElST9T9+k/+mb9D99k/6nb9L/9E36n75J/9M36b8Q6dnWabmvlZF+h7z/n57J63/6Jv1P36T/6Zv0P32T/qdv0v//D5h/P1X6n75J/9M36b8Q6dmVfv/5/52R8bdH7ErX8eeOK/z0E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRTpwLlxkA+Nv8StclhBBCCCGEEEKIP0/IeKUrEEIIIYQQQgghxP9+CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQCnkgL1ggcMAQQz7ID0m4AQrAjVAQCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw4NQBx6CuvAw1INHoD48Cg2gITSCxtDk38p/EbrAS9AVukEadIce8DL0hF7QG/pAX3gF+sGr0B9egwEwEAbB6zAY3oAh8CYMhWEwHN6CETASRsFoGANjYRy8DePhHZgA78JEmASTYQpMhWkwHd6DGTATZsH7MBs+gDkwF+bBfFgAH8JCWASL4SNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//F/LP/Jb8jAgIqVGjQYAbMgCmYgpkxM2bBLJgVs2ICE5gNs/39yZILc2EqpmJezIuEhIyM+TAfJjGJBbAAFsSCWBgLo0ePxbAYFsebsQSWwJJYEkthKSyNZbAMlsNyWB7LYwWsgBWxIlbCSlgFq+DdeDfeg9WxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsAG2AgbYRNsgk2xKTbDZtgCW2BLbImtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wRXwRX8KXsBtWUt2xB/bAntgTe2Mf7IOvYD98FV/F13AADsRB+Dq+jm/gEDyDQ3EYDsfhWF6NxFE4GlmNxXE4DsfjeJyAE3AiTsJJOAWn4jScjtNxBs7Emfg+zsYP8AOci3NxPi7ABbgQF+FiXIxL8CwuxWW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BT/AT3I7bcSfuxN24Gz/FT/Ez/AwH4H7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyOJ/AknsKTeBpP4xk8i+fwHJ7H83gBn0/9uu7uQusGgLrEKKMyqAwqRaWozCqzyqKyqKwqq0qohMqmsqnsKrvKoXKoXCqXSlWpKq/Kq0iRYhWrfCqfSqqkKqAKqIIKVGFVWHnlVTFVTBVXxVUJVUKVVLeqUuo2VVqVUc19OVVOlVctfAV1p6qoKqpKqrKqoqqqqqqaqqaqq+qqhqqhaqqaqpZ6QNVW3bE3PqQudaaeGoj11SBsoBqqRqqxegMfU03VEGymmqsW6gk1DIdiK9XUt1ZPqzZqFLZVz6rR+Jxqr8ZiB/WC6qg6qc7qRdVFNfNdVTc1EburHmoK9lS9VG/VR83AyupSx6qo19QANVANUq+r+fiGGqLeVEPVMDVcvaVGqJFqlBqtxqixapx6W41X76gJ6l01UU1Sk9UUNVVNU9PVe2qGmqlmqffVbPWBmqPmqnlqvlqgPlQL1SIF8JFaoj5WS9UytVytUCvVKrVarVFr1Tq1Xm1QG9UmtVltUVvVJ2qb2q52qJ1ql9qt9qhP1V71mdqnPlf71RfqgPqLOqi+VIfUV+qw+lodUd+oo+pbdUx9p46r79UJdVKdUj+o0+pHdQbxrz/F6md1Qf2iLqqgQKNWWmujI51BZ9QpOpPOrK/SWfTVOqu+Rif0tTqbvk5n19frHDqnzqVz61SdR+fVVpN2mnWs8+n8Oqlv0AX0jbqgLqQL6yLa66K6mL5JF9c36xL6Fl1S36pL6dt0aV1Gl9Xl9O26vL5DV9B36or6Ll1JV9ZVdFV9t66m79HV9b26hr5P19T361r6AV1bP6jr6Id0Xf2wrqcf0fX1o7qBbqgb6ca6iX5MN9WP62a6uW6hn9At9ZO6lX5Kt9ZP6zb6Gd1WP6vb6ed0e/287qBf0B11J91Z/6Iv6qC76m46TXfXPfTLuqfupXvrPrqvfkX306/q/vo1PUAP1IP063qwfkMP0W/qoXqYHq7f0iP0SD1Kj9Zj9Fg9Tr+tx+t39AT9rp6oJ+nJeoqeqqfp3r+tNOu/kf/Ov8jv/+u9b9Fb9Sd6m96ud+idepferffoPXqv3qv36X16v96vD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/ok/on/YM+rX/UZ/RZfVb/pM/r8/rCb48BGDTKaGNMZDKYjCbFZDKZzVUmi7naZDXXmIS51mQz15ns5nqTw+Q0uUxuk2rymLzGGjLOsIlNPpPfJM0NpoC50RQ0hUxhU8R4U9QUMzf9x/l/VF8T08Q0NU1NM9PMtDAtTEvT0rQyrUxr09q0MW1MW9PWtDPtTHvT3nQwHUxH09F0Np1NF9PFdDVdTZpJMz3My6an6WV6mz6mr3nF9DP9TH/T3wwwA8wgM8gMNoPNEDPEDDVDzXAz3IwwI8woM8qMMWPMODPOjDfjzQQzwUw0E81kM9lMNVPNdDPdzDAzzCwzy8w2s80cM8fMM/PMArPALDQLzWKz2CwxS8xSs8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMkvNVrPVbDPbzA6zw+wyu8wes8fsNXvNPrPP7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcMqfMaXPanDFnzDlzzpw3580Fc8FcNBcvnfZFKlKRiUyUIcoQpUQpUeYoc5QlyhJljbJGiSgRZYuyRdmj66McUc4oV5Q7So3yRHkjG1HkIo7iKF+UP0pGN0QFohujglGhqHBUJPJR0ahYdFNUPLo5KhHdEpWMbo1KRbdFpaMyUdmoXHR7VD66I6oQ3RlVjO6KKkWVoypR1ejuqFp0T1Q9ujeqEd0X1Yzuj2pFD0S1owejOtFDUd3o4ahe9EhUP3o0ahA1jBpFjaMmf+r6IZzJ+bjvarvZNNvd9rAv2562l+1t+9i+9hXbz75q+9vX7AA70A6yr9vB9g07xL5ph9phdrh9y46wI+0oO9qOsWPtOPu2HW/fsRPsu3ainWQn2yl2qp1mp9v37Aw7086y79vZ9gM7x8618+x8u8B+aBfaRXax/cgusR/bpXaZXW5X2JV2lV1t19i1dp1dbzfYjXaT3Wy32K32E7vNbrc77E67y+62e+yndq/9zO6zn9v99gt7wP7FKvjSHrJf2cP2a3vEfmOP2m/tMfudPW6/tyfsSXvK/mBP2x/tGXvWnrM/2fP2Z3vB/mIv2nDp5P7SyzsZMpSBMlAKpVBmykxZKAtlpayUoARlo2yUnbJTDspBuSgXpVIq5aW8dAkTUz7KR0lKUgEqQAWpIBWmwuTJUzEqRsWpOJWgElSSSlIpKkWlqTSVpbJ0O91Od9AddCfdSXfRXVSZKlNVqkrVqBpVp+pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSAGlAjakRNqAk1pabUjJpRC2pBLakltaJW1JpaUxtqQ22pLbWjdtSe2lMH6kAdqSN1ps7UhbpQV+pKaZRGPagH9aSe1Jt6U1/qS/2oH/Wn/jSABtAgGkSDaTANoSE0lIbRcHqLRtBIGkWjaQyNpXE0jsbTeJpAE2giTaTJNJmm0lSaTtNpBs2gWTSLZtNsmkNzaB7NowW0gBbSQlpMi2kJLaGltJSW03JaSStpNa2mtbSW1tN62kgbaTNtpq20lbbRNtpBO2gX7aI9tIf20l7aR/toP+2nA3SADtJBOkSH6DAdpiN0hI7SUTpGx+g4HacTdIJO0Sk6TafpDJ2hc3SOztPPdIF+oYsUKMVlcpndVS6Lu9pldde4/xrncrldqsvj8jrrcric/xSTc66gK+QKuyLOu6KumLvpd3FpV8aVdeXc7a68u8NV+F1czd3jqrt7XQ13n6vq7v6nuKa739Vyj7ja7lFXxzV0dV1jV8894uq7R10D19A1co1dS/eka+Wecq3d066Ne+Z38UK3yK1169x6t8HtdZ+5c+4nd9R96867n11X1831da+4fu5V19+95ga4gb+Lh7u33Ag30o1yo90YN/Z38WQ3xU1109x0956b4Wb+Ll7gPnSz3WI3x81189z8X+NLNS12H7kl7mO31C1zy90Kt9Ktcqvdmr/XusJtcpvdFrfHfeq2ue1uh9vpdrndv8aX9rHPfe72uy/cEfeNO+i+dIfcMXfYff1rfGl/x9x37rj73p1wJ90p94M77X50Z9zZX/d/ae8/uF/cRRccMLJizYYjzsAZOYUzcWa+irPw1ZyVr+EEX8vZ+DrOztdzDs7JuTg3p3IezsuWiR0zx5yP83OSb+ACfCMX5EJcmIuw56JcjG/i4nwzl+BbuCTfyqX4Ni7NZbgsl+PbuTzfwRX4Tq7Id3ElrsxVuCrfzdX4Hq7O93INvo9r8v1cix/g2vwg1+GHuC4/zPX4Ea7Pj3IDbsiNuDE34ce4KT/Ozbg5t+AnuCU/ya34KW7NT3Mbfobb8rPcjp/j9vw8d+AXuCN34s78Infhl7grd+M07s49+GXuyb24N/fhvvwK9+NXuT+/xgN4IA/i13kwv8FD+E0eysN4OL/FI3gkj+LRPIbH8jh+m8fzOzyB3+WJPIkn8xSeytN4Or/HM3gmz+L3eTZ/wHN4LgPM5wX8IS/kRbyYP+Il/DEv5WW8nFfwSl7Fq3kNr+V1vJ438EbexJt5C2/lT3gbb+cdvJN38W7ew5/yXv6M9/HnvJ+/4AP8Fz7IX/Ih/ooP89d8hL/ho/wtH+Pv+Dh/zyf4JJ/iH/g0/8hn+Cyf45/4PP/MF/gXvsiBIcZYxTo2cRRniDPGKXGmOHN8VZwlvjrOGl8TJ+Jr42zxdXH2+Po4R5wzzhXnjlPjPHHe2MYUu5jjOM4X54+T8Q1xgfjGuGBcKC4cF4l9XDQuFt8UF49vjkvEt8Ql41vjUvFtcem4TPzIfeXi2+Py8R1xhfjOuGJ8V1wprhxXiavGd8fV4nvi6vG9cY34vrhEfH9cK34grh0/GNeJH4rrxg/H9eJH4vrxo3GDuGHcKG4cN4kfi5vGj8fN4uZxi/iJuGX8ZNwqfipuHT8dt4mf+cPjaXH3uEf8cvxyHMK9el5yfnJB8sPkwuSi5OLkR8klyY+TS5PLksuTK5Irk6uSq5NrkmuT65LrkxuSG5ObkpuTW5IhVM0IHr3y2hsf+Qw+o0/xmXxmf5XP4q/2Wf01PuGv9dn8dT67v97n8Dl9Lp/bp/o8Pq+3nrzz7GOfz+f3SX+DL+Bv9AV9IV/YF/HeF/XFfGPfxDfxTf3jvplv7lv4J/wT/kn/pH/KP+Wf9m38M76tf9a388/59v55/7x/wXf0nXxn/6Lv4l/yXX03n+bTfA/fw/f0PX1v39v39X19P9/P9/f9/QA/wA/yg/xgP9gP8UP8UD/UD/fD/Qg/wo/yo/wYP8aP8+P8eD/eT/AT/EQ/0U/2k/1UP9VP99P9DD/Dz/Kz/OyCs/0cP8fP8/P8Ar/AL/QL/WK/2C/xS/xSv9Qv98v9Sr/Sr/ar/Vq/1q/36/1Gv9Fv9pv9Vr/Vb/Pb/A6/w+/yu/wev8fv9Xv9Pr/P7/f7/QF/wB/0B/0h/5U/7L/2R/w3/qj/1h/z3/nj/nt/wp/0p/wP/rT/0Z/xZ/05/5M/73/2F/wv/qIPflzi7cT4xDuJCYl3ExMTkxKTE1MSUxPTEtMT7yVmJGYmZiXeT8xOfJCYk5ibmJeYn1iQ+DCxMLEosTjxUWJJ4uPE0sSyxPLEisTKxKpECHm2xSFfyB+S4YZQINwYCoZCoXAoEnwoGoqFm0LxcHMoEW4JJcOtoVS4LZQOZULZ8GhoEBqGRqFxaBIeC03D46FZaB5ahCdCy/BkaBWeCq3D06FNeCa0Dc+GduG50D48HzqEF0LH0Cl0Di+GLuGl0DV0C2mhe+gRXg49Q6/QO/QJfcMroV94NfQPr4UBYWAYFF4Pg8MbYUh4MwwNw8Lw8FYYEUaGUWF0GBPGhnHh7TA+vBMmhHfDxDApTA5TwtQwLUwP74UZYWaYFd4Ps8MHYU6YG+aF+WFB+DAsDIvC4vBRWBI+DkvDsrA8rAgrw6qwOqwJa8O6sD5sCBvDprA5bAlbwydhW9gedoSdYVfYHfaET8Pe8FnYFz4P+8MX4UD4SzgYvgyHwlfhcPg6HAnfhKPh23AsfBeOh+/DiXAynAo/hNPhx3AmnA3nwk/hfPg5XAi/hIvyP2tCCCGEEP8tff/gePd/8T3127ikBwBcvT334X88rgFgY46/znup1JYJAHi6W4eH/jYqVUpLS/vttks1RPnnAkDicn4GuBwvgxbwJLSG5pl+/VOF3+mlOp3nP1g/eStA5n/ISYHL8d/Xh5v/5f57qZGz/3D9uQAF81/OuVTq3+LL65f4n6yfs+kfrJ/py3EAzf4hJwtcji+vXwweh2eg9T/dUgghhBBCCCGE+Kteqmy7P7q+vXR9nmou52SEy/Hl68/iV6R+IYQQQgghhBBC/LHnOnV+6rHWrZu3k8n/jZPd0iaZXJnJFf7FJIQQQgghhPjTXT7pv9KVCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ6df/iY8Tu9J7FEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIa60/xEAAP//VQoqcA==") mount(0x0, &(0x7f0000000440)='./bus\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x64842, 0x0) 08:58:41 executing program 2: prctl$PR_SET_TSC(0x4, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)) 08:58:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async, rerun: 32) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async, rerun: 32) ftruncate(r3, 0x9) (rerun: 32) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3050.201251][ T28] audit: type=1800 audit(1710233921.099:1405): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1994 res=0 errno=0 08:58:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x3}, 0x0) 08:58:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 3050.332671][T13734] sch_fq: defrate 9 ignored. 08:58:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xa}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xf5}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x10000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x40}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x9}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="640000000176ee00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:41 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0xffffffff, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 08:58:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x975abd1fc7fa4c1b}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r8, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x4008014) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:41 executing program 2: openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 08:58:41 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f05040000000905830300b339baa458af6f61e8696ce34b659a3ffbd15fe307cd6607e6ab0a2aa64db8642705c9"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 08:58:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 3050.687427][T13750] sch_fq: defrate 9 ignored. 08:58:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getneigh={0x14, 0x1e, 0x10, 0xc0, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009081}, 0xc051) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@ipv6_getaddr={0xa4, 0x16, 0x10, 0x70bd2a, 0x25dfdbff, {0xa, 0x8, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x8, 0x401, 0x401}}, @IFA_CACHEINFO={0x14, 0x6, {0x3786db0e, 0x8f, 0x1, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000340)={@dev, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000002d00000428bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="f3ff05000600f3ff04000200060005000408000008000b00010000000b000100666c6f7f657200000c00020006002400001d927d4f000500018100000600050009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@getqdisc={0x30, 0x26, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xffe7}, {0x7, 0xfff3}, {0x6, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv4_getnexthop={0x40, 0x6a, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x48000) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x400, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xb0, 0xff, 0x0, 0xfd, 0xf, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8045) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="e8ffffff1f000000", @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) 08:58:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 08:58:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getneigh={0x14, 0x1e, 0x10, 0xc0, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009081}, 0xc051) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@ipv6_getaddr={0xa4, 0x16, 0x10, 0x70bd2a, 0x25dfdbff, {0xa, 0x8, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x8, 0x401, 0x401}}, @IFA_CACHEINFO={0x14, 0x6, {0x3786db0e, 0x8f, 0x1, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000340)={@dev, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000002d00000428bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="f3ff05000600f3ff04000200060005000408000008000b00010000000b000100666c6f7f657200000c00020006002400001d927d4f000500018100000600050009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@getqdisc={0x30, 0x26, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xffe7}, {0x7, 0xfff3}, {0x6, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv4_getnexthop={0x40, 0x6a, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x48000) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x400, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xb0, 0xff, 0x0, 0xfd, 0xf, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8045) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="e8ffffff1f000000", @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) [ 3050.906455][ T28] audit: type=1804 audit(1710233921.799:1406): pid=13760 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6539/cgroup.controllers" dev="sda1" ino=1985 res=1 errno=0 08:58:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) 08:58:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getneigh={0x14, 0x1e, 0x10, 0xc0, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009081}, 0xc051) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@ipv6_getaddr={0xa4, 0x16, 0x10, 0x70bd2a, 0x25dfdbff, {0xa, 0x8, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x8, 0x401, 0x401}}, @IFA_CACHEINFO={0x14, 0x6, {0x3786db0e, 0x8f, 0x1, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000340)={@dev, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000002d00000428bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="f3ff05000600f3ff04000200060005000408000008000b00010000000b000100666c6f7f657200000c00020006002400001d927d4f000500018100000600050009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@getqdisc={0x30, 0x26, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xffe7}, {0x7, 0xfff3}, {0x6, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv4_getnexthop={0x40, 0x6a, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x48000) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x400, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xb0, 0xff, 0x0, 0xfd, 0xf, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8045) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="e8ffffff1f000000", @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getneigh={0x14, 0x1e, 0x10, 0xc0, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4009081}, 0xc051) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=@ipv6_getaddr={0xa4, 0x16, 0x10, 0x70bd2a, 0x25dfdbff, {0xa, 0x8, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x8, 0x401, 0x401}}, @IFA_CACHEINFO={0x14, 0x6, {0x3786db0e, 0x8f, 0x1, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000340)={@dev, @private}, &(0x7f0000000380)=0xc) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000002d00000428bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="f3ff05000600f3ff04000200060005000408000008000b00010000000b000100666c6f7f657200000c00020006002400001d927d4f000500018100000600050009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@getqdisc={0x30, 0x26, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xffe7}, {0x7, 0xfff3}, {0x6, 0x3}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv4_getnexthop={0x40, 0x6a, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_OIF={0x8}, @NHA_MASTER={0x8}, @NHA_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x48000) (async) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x400, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xb0, 0xff, 0x0, 0xfd, 0xf, 0x800}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8810}, 0x8045) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="e8ffffff1f000000", @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) (async) 08:58:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 08:58:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x975abd1fc7fa4c1b}, 0x40) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r8, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x4008014) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3051.086686][ T1540] usb 3-1: new high-speed USB device number 18 using dummy_hcd 08:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 3051.241608][T13784] syz-executor.4 (13784) used greatest stack depth: 16080 bytes left [ 3051.356140][ T1540] usb 3-1: Using ep0 maxpacket: 8 08:58:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x240, r5, 0xa02, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "b81c1c47719b7473cc749f0ae6a0bbf6a685e3109150264d980b26424dac771a7c4d91b91cacb94e0001436d30eb0ce81b9a01ddc04b741928573667cdbb1d2dc4695ba9eec17e28bb1420d390210dc9f6d8fc6c12435d1940b1e863be43f901f9156b901e3c733108514d3cd9ee255870f1cd0807376226fe2dc6362f42d265d1bbde0bcdef927cdc2096164db2a8e0a03a0263f92857f0322e54de"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'flow\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sfq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\xaf[@-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '!#{#%}\r%&[*^@\xb8:-,].$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "f99144285fded20dcafea0470236a45d3e1795b8995bf4b17d89bd81b263a062ceb351451e648e956e1dd84a15c8a7a27d786c835e2697cefdba88d0525ee7689a83ce02830dec9bc942e8549265ea8a431d37fabbc71bfa287fd8cae4b2c165efc7f95266908b766ac5f6df7400a923"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) 08:58:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x975abd1fc7fa4c1b}, 0x40) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r8, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x4008014) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3051.476349][ T1540] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3051.494653][ T1540] usb 3-1: config 179 has no interface number 0 [ 3051.512752][ T1540] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 08:58:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 3051.521467][ T28] audit: type=1804 audit(1710233922.409:1407): pid=13811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6541/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0 [ 3051.540369][ T1540] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 3051.581078][ T1540] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 3051.612774][ T1540] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 08:58:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000240)="920c61f908786126732af064ff1dce07400b0177de5489c93de78897332c78880520138976f093e4dffe710da1879fe39dfc455510aac4889fc2ead5a54c476fae58498b137975a69a8797d4758f291a3f31122a06892d95d1ea18783c6e61907aec67888b2ae212eef654873ead8e0a92f6e26d736196e16ddfed2172035e0a247440cab1989d912e33a323", 0x8c}, {&(0x7f0000000300)="9743ed5996b3b96ef44f0b20622d298171647eeb5537af10e57308b4614b9e5b930ebc44c58b3354551a47e8e11addaa9ed8aea0d89d463418fb5fe06b0d3198c46ebec8c40298c8d3309ef1cbbb5d76c7", 0x51}], 0x2) 08:58:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 3051.692480][ T1540] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3051.713878][ T1540] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 08:58:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x240, r5, 0xa02, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "b81c1c47719b7473cc749f0ae6a0bbf6a685e3109150264d980b26424dac771a7c4d91b91cacb94e0001436d30eb0ce81b9a01ddc04b741928573667cdbb1d2dc4695ba9eec17e28bb1420d390210dc9f6d8fc6c12435d1940b1e863be43f901f9156b901e3c733108514d3cd9ee255870f1cd0807376226fe2dc6362f42d265d1bbde0bcdef927cdc2096164db2a8e0a03a0263f92857f0322e54de"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'flow\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sfq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\xaf[@-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '!#{#%}\r%&[*^@\xb8:-,].$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "f99144285fded20dcafea0470236a45d3e1795b8995bf4b17d89bd81b263a062ceb351451e648e956e1dd84a15c8a7a27d786c835e2697cefdba88d0525ee7689a83ce02830dec9bc942e8549265ea8a431d37fabbc71bfa287fd8cae4b2c165efc7f95266908b766ac5f6df7400a923"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x240, r5, 0xa02, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "b81c1c47719b7473cc749f0ae6a0bbf6a685e3109150264d980b26424dac771a7c4d91b91cacb94e0001436d30eb0ce81b9a01ddc04b741928573667cdbb1d2dc4695ba9eec17e28bb1420d390210dc9f6d8fc6c12435d1940b1e863be43f901f9156b901e3c733108514d3cd9ee255870f1cd0807376226fe2dc6362f42d265d1bbde0bcdef927cdc2096164db2a8e0a03a0263f92857f0322e54de"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'flow\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sfq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\xaf[@-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '!#{#%}\r%&[*^@\xb8:-,].$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "f99144285fded20dcafea0470236a45d3e1795b8995bf4b17d89bd81b263a062ceb351451e648e956e1dd84a15c8a7a27d786c835e2697cefdba88d0525ee7689a83ce02830dec9bc942e8549265ea8a431d37fabbc71bfa287fd8cae4b2c165efc7f95266908b766ac5f6df7400a923"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) [ 3051.748916][ T1540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3051.798805][T13771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3051.865337][ T1540] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input28 [ 3051.960394][ T4493] input input28: unable to receive magic message: -110 [ 3052.000842][ T28] audit: type=1804 audit(1710233922.899:1408): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6542/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 [ 3052.027104][ T4493] input input28: unable to receive magic message: -32 08:58:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 08:58:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 3052.107046][T12569] input input28: unable to receive magic message: -32 08:58:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x240, r5, 0xa02, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "b81c1c47719b7473cc749f0ae6a0bbf6a685e3109150264d980b26424dac771a7c4d91b91cacb94e0001436d30eb0ce81b9a01ddc04b741928573667cdbb1d2dc4695ba9eec17e28bb1420d390210dc9f6d8fc6c12435d1940b1e863be43f901f9156b901e3c733108514d3cd9ee255870f1cd0807376226fe2dc6362f42d265d1bbde0bcdef927cdc2096164db2a8e0a03a0263f92857f0322e54de"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'flow\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sfq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\xaf[@-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '!#{#%}\r%&[*^@\xb8:-,].$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "f99144285fded20dcafea0470236a45d3e1795b8995bf4b17d89bd81b263a062ceb351451e648e956e1dd84a15c8a7a27d786c835e2697cefdba88d0525ee7689a83ce02830dec9bc942e8549265ea8a431d37fabbc71bfa287fd8cae4b2c165efc7f95266908b766ac5f6df7400a923"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x240, r5, 0xa02, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x22c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "b81c1c47719b7473cc749f0ae6a0bbf6a685e3109150264d980b26424dac771a7c4d91b91cacb94e0001436d30eb0ce81b9a01ddc04b741928573667cdbb1d2dc4695ba9eec17e28bb1420d390210dc9f6d8fc6c12435d1940b1e863be43f901f9156b901e3c733108514d3cd9ee255870f1cd0807376226fe2dc6362f42d265d1bbde0bcdef927cdc2096164db2a8e0a03a0263f92857f0322e54de"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'flow\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sfq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'policy\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x03\xaf[@-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '!#{#%}\r%&[*^@\xb8:-,].$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "f99144285fded20dcafea0470236a45d3e1795b8995bf4b17d89bd81b263a062ceb351451e648e956e1dd84a15c8a7a27d786c835e2697cefdba88d0525ee7689a83ce02830dec9bc942e8549265ea8a431d37fabbc71bfa287fd8cae4b2c165efc7f95266908b766ac5f6df7400a923"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) (async) [ 3052.207173][ T4493] input input28: unable to receive magic message: -32 [ 3052.247467][ T4493] input input28: unable to receive magic message: -32 [ 3052.287335][ T1540] usb 3-1: USB disconnect, device number 18 [ 3052.307304][ T1540] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 08:58:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0xffe0}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c804}, 0x200000c0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 08:58:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9}, 0x0) 08:58:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000240)="920c61f908786126732af064ff1dce07400b0177de5489c93de78897332c78880520138976f093e4dffe710da1879fe39dfc455510aac4889fc2ead5a54c476fae58498b137975a69a8797d4758f291a3f31122a06892d95d1ea18783c6e61907aec67888b2ae212eef654873ead8e0a92f6e26d736196e16ddfed2172035e0a247440cab1989d912e33a323", 0x8c}, {&(0x7f0000000300)="9743ed5996b3b96ef44f0b20622d298171647eeb5537af10e57308b4614b9e5b930ebc44c58b3354551a47e8e11addaa9ed8aea0d89d463418fb5fe06b0d3198c46ebec8c40298c8d3309ef1cbbb5d76c7", 0x51}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000240)="920c61f908786126732af064ff1dce07400b0177de5489c93de78897332c78880520138976f093e4dffe710da1879fe39dfc455510aac4889fc2ead5a54c476fae58498b137975a69a8797d4758f291a3f31122a06892d95d1ea18783c6e61907aec67888b2ae212eef654873ead8e0a92f6e26d736196e16ddfed2172035e0a247440cab1989d912e33a323", 0x8c}, {&(0x7f0000000300)="9743ed5996b3b96ef44f0b20622d298171647eeb5537af10e57308b4614b9e5b930ebc44c58b3354551a47e8e11addaa9ed8aea0d89d463418fb5fe06b0d3198c46ebec8c40298c8d3309ef1cbbb5d76c7", 0x51}], 0x2) (async) 08:58:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0xffe0}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c804}, 0x200000c0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:43 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f05040000000905830300b339baa458af6f61e8696ce34b659a3ffbd15fe307cd6607e6ab0a2aa64db8642705c9"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 08:58:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xa}, 0x0) 08:58:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 08:58:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0xffe0}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c804}, 0x200000c0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3053.003105][ T28] audit: type=1804 audit(1710233923.899:1409): pid=13861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6543/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 08:58:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xb}, 0x0) 08:58:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000240)="920c61f908786126732af064ff1dce07400b0177de5489c93de78897332c78880520138976f093e4dffe710da1879fe39dfc455510aac4889fc2ead5a54c476fae58498b137975a69a8797d4758f291a3f31122a06892d95d1ea18783c6e61907aec67888b2ae212eef654873ead8e0a92f6e26d736196e16ddfed2172035e0a247440cab1989d912e33a323", 0x8c}, {&(0x7f0000000300)="9743ed5996b3b96ef44f0b20622d298171647eeb5537af10e57308b4614b9e5b930ebc44c58b3354551a47e8e11addaa9ed8aea0d89d463418fb5fe06b0d3198c46ebec8c40298c8d3309ef1cbbb5d76c7", 0x51}], 0x2) 08:58:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2d7df26e31f5a7ea) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x7f) [ 3053.246582][T31662] usb 3-1: new high-speed USB device number 19 using dummy_hcd 08:58:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="671434a6c39471000000", @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x18c, 0x14, 0x400, 0x70bd29, 0x25dfdbfd, {0x1e, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "c4be3ddc637546cde3e83b81058fef31b3f0defddb05c331d1c8a4664bbf967a39ebd85e938c804dece4a46044630f4f1773c3b3b00fbc81689faf4e0d3aff61ad16acdce74e7aa3f5c6fd34b06f4549b50e9edbb49f93797ce7a73b30dc8b553fed764608e965be5a48bdee40f8f574973d740203abbe506a6255ec3c0eaa782dc387586ff446ff62940f766a670e5de7625d422a4e023592556600c62d5747f1dd2249bcb325aa685afb96fc7e33c433b492015f378e1ab386b1a3967ab08e256f40d4f4d348d14799bdc7e17d8fd386eb5bd70bcc3cd1b510b8b1981af5d58222383f9c0636bd3b2d686482f468a561f27c"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "5fb4db39aa9f686e12ff58306ee9d6bc32f7137473f569c57e7d5f997d0f8cac2cab36d4bf7e2fc4025d1941a8eefb6000b161972068f6723a30fea5a85bbe897977b0c23e6b87b13de7eda4150fd95070dfba4f851953eb775494647f82a71b7dcc1e483ae536dc99ed9c4cc1401b196085a48085ed3519c7"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc}, 0x0) 08:58:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 08:58:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2d7df26e31f5a7ea) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x7f) [ 3053.526305][T31662] usb 3-1: Using ep0 maxpacket: 8 08:58:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2d7df26e31f5a7ea) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x7f) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2d7df26e31f5a7ea) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x7f) (async) [ 3053.560146][T13903] __nla_validate_parse: 58 callbacks suppressed [ 3053.560165][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3053.606112][ T28] audit: type=1804 audit(1710233924.499:1410): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6545/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0 08:58:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 3053.684053][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3053.693808][T31662] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3053.703743][T31662] usb 3-1: config 179 has no interface number 0 [ 3053.718827][T31662] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 08:58:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) [ 3053.731186][T31662] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 3053.754795][T31662] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 3053.772683][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3053.784156][T31662] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3053.802143][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3053.822264][T31662] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3053.853452][T31662] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3053.865519][T13912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3053.867450][T31662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.906441][T13867] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3053.950980][T31662] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input29 08:58:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010c2b6160673ac1fc80ea713616ea6a68320bab14d7c62f288f3285280681508b83777c872d65781d4ae171251537d6725aab9764cecf7d4170aae681ba4dd82dc9696fd28a3f0d8ad5d4371f075b3eaa48c4617865bd671f100000000000000003fb24b", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000001c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xeeb, 0x1, 0x1f, 0x1000}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003f5ffffff0009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) [ 3054.016385][ T4493] input input29: unable to receive magic message: -110 [ 3054.039893][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3054.086472][ T4493] input input29: unable to receive magic message: -32 [ 3054.156218][ T4493] input input29: unable to receive magic message: -32 [ 3054.206327][ T4493] input input29: unable to receive magic message: -32 [ 3054.245272][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 08:58:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 08:58:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="671434a6c39471000000", @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x18c, 0x14, 0x400, 0x70bd29, 0x25dfdbfd, {0x1e, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "c4be3ddc637546cde3e83b81058fef31b3f0defddb05c331d1c8a4664bbf967a39ebd85e938c804dece4a46044630f4f1773c3b3b00fbc81689faf4e0d3aff61ad16acdce74e7aa3f5c6fd34b06f4549b50e9edbb49f93797ce7a73b30dc8b553fed764608e965be5a48bdee40f8f574973d740203abbe506a6255ec3c0eaa782dc387586ff446ff62940f766a670e5de7625d422a4e023592556600c62d5747f1dd2249bcb325aa685afb96fc7e33c433b492015f378e1ab386b1a3967ab08e256f40d4f4d348d14799bdc7e17d8fd386eb5bd70bcc3cd1b510b8b1981af5d58222383f9c0636bd3b2d686482f468a561f27c"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "5fb4db39aa9f686e12ff58306ee9d6bc32f7137473f569c57e7d5f997d0f8cac2cab36d4bf7e2fc4025d1941a8eefb6000b161972068f6723a30fea5a85bbe897977b0c23e6b87b13de7eda4150fd95070dfba4f851953eb775494647f82a71b7dcc1e483ae536dc99ed9c4cc1401b196085a48085ed3519c7"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="671434a6c39471000000", @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x18c, 0x14, 0x400, 0x70bd29, 0x25dfdbfd, {0x1e, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "c4be3ddc637546cde3e83b81058fef31b3f0defddb05c331d1c8a4664bbf967a39ebd85e938c804dece4a46044630f4f1773c3b3b00fbc81689faf4e0d3aff61ad16acdce74e7aa3f5c6fd34b06f4549b50e9edbb49f93797ce7a73b30dc8b553fed764608e965be5a48bdee40f8f574973d740203abbe506a6255ec3c0eaa782dc387586ff446ff62940f766a670e5de7625d422a4e023592556600c62d5747f1dd2249bcb325aa685afb96fc7e33c433b492015f378e1ab386b1a3967ab08e256f40d4f4d348d14799bdc7e17d8fd386eb5bd70bcc3cd1b510b8b1981af5d58222383f9c0636bd3b2d686482f468a561f27c"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "5fb4db39aa9f686e12ff58306ee9d6bc32f7137473f569c57e7d5f997d0f8cac2cab36d4bf7e2fc4025d1941a8eefb6000b161972068f6723a30fea5a85bbe897977b0c23e6b87b13de7eda4150fd95070dfba4f851953eb775494647f82a71b7dcc1e483ae536dc99ed9c4cc1401b196085a48085ed3519c7"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) [ 3054.257362][ T4493] input input29: unable to receive magic message: -32 [ 3054.277557][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010c2b6160673ac1fc80ea713616ea6a68320bab14d7c62f288f3285280681508b83777c872d65781d4ae171251537d6725aab9764cecf7d4170aae681ba4dd82dc9696fd28a3f0d8ad5d4371f075b3eaa48c4617865bd671f100000000000000003fb24b", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000001c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xeeb, 0x1, 0x1f, 0x1000}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003f5ffffff0009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) [ 3054.338814][ T4493] input input29: unable to receive magic message: -32 [ 3054.369616][T13927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3054.409345][T31661] usb 3-1: USB disconnect, device number 19 [ 3054.416144][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3054.440157][T31661] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 3054.512675][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010c2b6160673ac1fc80ea713616ea6a68320bab14d7c62f288f3285280681508b83777c872d65781d4ae171251537d6725aab9764cecf7d4170aae681ba4dd82dc9696fd28a3f0d8ad5d4371f075b3eaa48c4617865bd671f100000000000000003fb24b", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000001c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xeeb, 0x1, 0x1f, 0x1000}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003f5ffffff0009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:58:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) [ 3054.614296][T13928] syz-executor.4 (13928) used greatest stack depth: 16048 bytes left 08:58:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8060000}, 0x0) [ 3054.653354][ T28] audit: type=1804 audit(1710233925.549:1411): pid=13937 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6546/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 08:58:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "caf96fae7083e5532dd7a53d18266e86e971c7ff3709e266731e38024b634f38eed4040d74adfc1c"}}]}]}]}}]}, 0x78}}, 0x0) 08:58:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x0) 08:58:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="671434a6c39471000000", @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x18c, 0x14, 0x400, 0x70bd29, 0x25dfdbfd, {0x1e, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "c4be3ddc637546cde3e83b81058fef31b3f0defddb05c331d1c8a4664bbf967a39ebd85e938c804dece4a46044630f4f1773c3b3b00fbc81689faf4e0d3aff61ad16acdce74e7aa3f5c6fd34b06f4549b50e9edbb49f93797ce7a73b30dc8b553fed764608e965be5a48bdee40f8f574973d740203abbe506a6255ec3c0eaa782dc387586ff446ff62940f766a670e5de7625d422a4e023592556600c62d5747f1dd2249bcb325aa685afb96fc7e33c433b492015f378e1ab386b1a3967ab08e256f40d4f4d348d14799bdc7e17d8fd386eb5bd70bcc3cd1b510b8b1981af5d58222383f9c0636bd3b2d686482f468a561f27c"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "5fb4db39aa9f686e12ff58306ee9d6bc32f7137473f569c57e7d5f997d0f8cac2cab36d4bf7e2fc4025d1941a8eefb6000b161972068f6723a30fea5a85bbe897977b0c23e6b87b13de7eda4150fd95070dfba4f851953eb775494647f82a71b7dcc1e483ae536dc99ed9c4cc1401b196085a48085ed3519c7"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x4}}}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x90) 08:58:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 08:58:45 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000001680)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 08:58:46 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) write$proc_mixer(r0, &(0x7f00000001c0)=ANY=[], 0xf8) dup3(r1, r0, 0x0) 08:58:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x40080}, 0x4c0d0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) fsetxattr$security_evm(r4, &(0x7f00000009c0), &(0x7f0000000a00)=@ng={0x4, 0x11, "87c239f962463cb291ebd019"}, 0xe, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', r9, 0x700, 0x1, 0x8, 0x58, {{0x20, 0x4, 0x0, 0x22, 0x80, 0x68, 0x0, 0x12, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0x3, 0x66}, @timestamp_addr={0x44, 0x44, 0x41, 0x1, 0xe, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@multicast1, 0x20}, {@local, 0x7}, {@loopback, 0x60000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x57b}, {@local, 0x514}]}, @lsrr={0x83, 0x17, 0xb, [@dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast2, @rand_addr=0x64010102, @empty]}, @ssrr={0x89, 0xb, 0x90, [@multicast1, @multicast2]}]}}}}}) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r11, r10, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "caf96fae7083e5532dd7a53d18266e86e971c7ff3709e266731e38024b634f38eed4040d74adfc1c"}}]}]}]}}]}, 0x78}}, 0x0) 08:58:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x15}, 0x0) 08:58:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 08:58:46 executing program 2: syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000140)='./file0\x00', 0x10044, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0xbf8, &(0x7f0000000c40)="$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") creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) [ 3055.247443][T13976] ALSA: mixer_oss: invalid OSS volume '' 08:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "caf96fae7083e5532dd7a53d18266e86e971c7ff3709e266731e38024b634f38eed4040d74adfc1c"}}]}]}]}}]}, 0x78}}, 0x0) 08:58:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0xad6a, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xffffff80, 0x1, 0x1}) [ 3055.548257][ T28] audit: type=1804 audit(1710233926.449:1412): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6548/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 08:58:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 08:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f80000}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x90}}, 0x24000400) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 08:58:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c}, 0x0) 08:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f80000}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x90}}, 0x24000400) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 08:58:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 08:58:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x60}, 0x0) 08:58:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x40080}, 0x4c0d0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) fsetxattr$security_evm(r4, &(0x7f00000009c0), &(0x7f0000000a00)=@ng={0x4, 0x11, "87c239f962463cb291ebd019"}, 0xe, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', r9, 0x700, 0x1, 0x8, 0x58, {{0x20, 0x4, 0x0, 0x22, 0x80, 0x68, 0x0, 0x12, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0x3, 0x66}, @timestamp_addr={0x44, 0x44, 0x41, 0x1, 0xe, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@multicast1, 0x20}, {@local, 0x7}, {@loopback, 0x60000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x57b}, {@local, 0x514}]}, @lsrr={0x83, 0x17, 0xb, [@dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast2, @rand_addr=0x64010102, @empty]}, @ssrr={0x89, 0xb, 0x90, [@multicast1, @multicast2]}]}}}}}) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r11, r10, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:47 executing program 2: syz_open_dev$sndctrl(&(0x7f0000003800), 0x0, 0x40040) 08:58:47 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001300), 0x200000, 0x0) 08:58:47 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x13}, [@network_terminal={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) 08:58:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f80000}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x90}}, 0x24000400) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x90, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x12}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f80000}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x90}}, 0x24000400) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 08:58:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 08:58:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 3056.440431][ T28] audit: type=1804 audit(1710233927.339:1413): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6549/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 3056.482191][ T28] audit: type=1804 audit(1710233927.369:1414): pid=14024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6549/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 08:58:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 3056.577310][ T1540] usb 3-1: new high-speed USB device number 20 using dummy_hcd 08:58:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x500}, 0x0) 08:58:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0xfb27269682413ffe}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3056.826029][ T1540] usb 3-1: Using ep0 maxpacket: 16 08:58:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0xfb27269682413ffe}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0xfb27269682413ffe}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3056.956819][ T1540] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3056.968910][ T1540] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3056.984399][ T1540] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3057.001206][ T1540] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 08:58:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5b1}, 0x0) 08:58:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0xfb27269682413ffe}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000240)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0xfb27269682413ffe}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) 08:58:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 08:58:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x40080}, 0x4c0d0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r8, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) fsetxattr$security_evm(r4, &(0x7f00000009c0), &(0x7f0000000a00)=@ng={0x4, 0x11, "87c239f962463cb291ebd019"}, 0xe, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', r9, 0x700, 0x1, 0x8, 0x58, {{0x20, 0x4, 0x0, 0x22, 0x80, 0x68, 0x0, 0x12, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0x3, 0x66}, @timestamp_addr={0x44, 0x44, 0x41, 0x1, 0xe, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@multicast1, 0x20}, {@local, 0x7}, {@loopback, 0x60000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x57b}, {@local, 0x514}]}, @lsrr={0x83, 0x17, 0xb, [@dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast2, @rand_addr=0x64010102, @empty]}, @ssrr={0x89, 0xb, 0x90, [@multicast1, @multicast2]}]}}}}}) (async, rerun: 32) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r11, r10, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3057.039923][ T1540] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3057.075271][ T1540] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3057.256279][ T1540] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3057.266794][ T1540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3057.275058][ T1540] usb 3-1: Product: syz [ 3057.280957][ T1540] usb 3-1: Manufacturer: syz [ 3057.286730][ T1540] usb 3-1: SerialNumber: syz 08:58:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008140)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x6, 0xc}, {0x4, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x138}, {0x8, 0xb, 0xe0}, {0x8, 0xb, 0x2}]}, 0x4c}}, 0x10) 08:58:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00f2ff", @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14000000}, 0x0) 08:58:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0) 08:58:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008140)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x6, 0xc}, {0x4, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x138}, {0x8, 0xb, 0xe0}, {0x8, 0xb, 0x2}]}, 0x4c}}, 0x10) [ 3057.574970][ T28] audit: type=1804 audit(1710233928.469:1415): pid=14074 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6551/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0 [ 3057.576247][ T1540] cdc_ncm 3-1:1.0: bind() failure [ 3057.634065][ T1540] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 3057.642120][ T1540] cdc_ncm 3-1:1.1: bind() failure [ 3057.657101][ T1540] usb 3-1: USB disconnect, device number 20 08:58:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x15000000}, 0x0) 08:58:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008140)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x6, 0xc}, {0x4, 0xd}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x138}, {0x8, 0xb, 0xe0}, {0x8, 0xb, 0x2}]}, 0x4c}}, 0x10) 08:58:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x700}, 0x0) 08:58:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@can_delroute={0x298, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x38, 0x2a, 0x78, 0x40, 0x6, "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", 0x1, "6dee9c9e528c8fb17352a93142a47b6e6482d284"}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_CS_CRC8={0x11e, 0x6, {0x76, 0x76, 0x2b, 0x2f, 0x20, "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", 0x0, "998f57d5f8a91428e29275a33e1e9734e952e2c6"}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x2, 0x81}}, @CGW_SRC_IF={0x8, 0x9, r7}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "69bb90ec18503451"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x2}, {0x2, 0x0, 0x0, 0x1}}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@mpls_newroute={0x154, 0x18, 0x4, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x14, 0x14, 0x1, 0xfd, 0x1, 0xc8, 0x8, 0x1000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x80, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x8, 0xb6, r8}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_NEWDST={0x84, 0x13, [{0xb71, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x284e, 0x0, 0x1}, {0x101}, {0x1}, {0xffff, 0x0, 0x1}, {0x51, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x9}, {0x6, 0x0, 0x1}, {}, {0x6}, {0x200}, {}, {0x7f}, {0x9, 0x0, 0x1}, {0x4}, {}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x1000}, {0x101}, {0x9, 0x0, 0x1}, {0x3}, {0x8001}]}, @RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x9}, {0x1ff}, {0x6, 0x0, 0x1}, {0x6}, {0x6, 0x0, 0x1}, {0x1000}, {0xf8000}, {0x20}, {0x0, 0x0, 0x1}, {0x3}, {0x75}, {0x4b, 0x0, 0x1}, {0xb676}, {}, {0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x1}, {0x1}, {0x7e6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x94, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1f, 0x0, 0x1}, {0x344}, {0x2}, {0xffff8, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x154}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:48 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01003300090401001186eee2000905821704"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 08:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@can_delroute={0x298, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x38, 0x2a, 0x78, 0x40, 0x6, "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", 0x1, "6dee9c9e528c8fb17352a93142a47b6e6482d284"}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_CS_CRC8={0x11e, 0x6, {0x76, 0x76, 0x2b, 0x2f, 0x20, "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", 0x0, "998f57d5f8a91428e29275a33e1e9734e952e2c6"}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x2, 0x81}}, @CGW_SRC_IF={0x8, 0x9, r7}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "69bb90ec18503451"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x2}, {0x2, 0x0, 0x0, 0x1}}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@mpls_newroute={0x154, 0x18, 0x4, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x14, 0x14, 0x1, 0xfd, 0x1, 0xc8, 0x8, 0x1000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x80, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x8, 0xb6, r8}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_NEWDST={0x84, 0x13, [{0xb71, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x284e, 0x0, 0x1}, {0x101}, {0x1}, {0xffff, 0x0, 0x1}, {0x51, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x9}, {0x6, 0x0, 0x1}, {}, {0x6}, {0x200}, {}, {0x7f}, {0x9, 0x0, 0x1}, {0x4}, {}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x1000}, {0x101}, {0x9, 0x0, 0x1}, {0x3}, {0x8001}]}, @RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x9}, {0x1ff}, {0x6, 0x0, 0x1}, {0x6}, {0x6, 0x0, 0x1}, {0x1000}, {0xf8000}, {0x20}, {0x0, 0x0, 0x1}, {0x3}, {0x75}, {0x4b, 0x0, 0x1}, {0xb676}, {}, {0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x1}, {0x1}, {0x7e6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x94, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1f, 0x0, 0x1}, {0x344}, {0x2}, {0xffff8, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x154}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 08:58:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x900}, 0x0) 08:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) (async) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@can_delroute={0x298, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x38, 0x2a, 0x78, 0x40, 0x6, "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", 0x1, "6dee9c9e528c8fb17352a93142a47b6e6482d284"}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_CS_CRC8={0x11e, 0x6, {0x76, 0x76, 0x2b, 0x2f, 0x20, "b590f8560cd8985a7fe2fd818eeb471eb842b3cbb8879f028f33d199864db5923192d9516fdb46857729a4b5228b2b09d78113d4190e9b26af268bfebfaf0814919f962a09011cab276c622388bdd3870483a58bc2ce51cbfccf951f5460b1d8f29305dd19edc57e8c5bd13294ee3a6818b1d79bd66bdf62cfe3c0b7578a7de7a6ad3f4450012d3dab24d0243bddbc257b724ec3fe5359f004afc3999784392dd47e7a173792454bc9a3afe6d22ffc5a21ebd9a5a3f60b499108417b49aed4f8bb2237391e95bc0fe69fad74afa719ab152a69cdadf1e3cd1ffa6c4baa58b81557fbdd1349856746b4ae309917fab7d55c02ea7d5b7dc860b1f6d12f2e7335ba", 0x0, "998f57d5f8a91428e29275a33e1e9734e952e2c6"}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x2, 0x81}}, @CGW_SRC_IF={0x8, 0x9, r7}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "69bb90ec18503451"}, 0x3}}, @CGW_FILTER={0xc, 0xb, {{0x2}, {0x2, 0x0, 0x0, 0x1}}}]}, 0x298}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@mpls_newroute={0x154, 0x18, 0x4, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x14, 0x14, 0x1, 0xfd, 0x1, 0xc8, 0x8, 0x1000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x80, r8}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x8, 0xb6, r8}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_NEWDST={0x84, 0x13, [{0xb71, 0x0, 0x1}, {0x1}, {0x2, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x284e, 0x0, 0x1}, {0x101}, {0x1}, {0xffff, 0x0, 0x1}, {0x51, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x9}, {0x6, 0x0, 0x1}, {}, {0x6}, {0x200}, {}, {0x7f}, {0x9, 0x0, 0x1}, {0x4}, {}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x1000}, {0x101}, {0x9, 0x0, 0x1}, {0x3}, {0x8001}]}, @RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0x9}, {0x1ff}, {0x6, 0x0, 0x1}, {0x6}, {0x6, 0x0, 0x1}, {0x1000}, {0xf8000}, {0x20}, {0x0, 0x0, 0x1}, {0x3}, {0x75}, {0x4b, 0x0, 0x1}, {0xb676}, {}, {0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x1}, {0x1}, {0x7e6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x94, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1f, 0x0, 0x1}, {0x344}, {0x2}, {0xffff8, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x154}}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00f2ff", @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x5d0718b8}, 0x0) 08:58:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 3058.401905][ T9552] usb 3-1: new high-speed USB device number 21 using dummy_hcd 08:58:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00f2ff", @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00f2ff", @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600850900000800570080000000"], 0x2c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r10, r9, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 08:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = accept4$rose(r4, 0x0, &(0x7f0000000380), 0xa546b1d8b16b6ae4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00'}) r6 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x800c1, 0x0, 0x4}, 0x18) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/82, 0x52}, {0x0}], 0x3, 0x0, 0xffffffed) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x4}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_map={0x883, 0xabb, 0x3ff, 0x6, 0x9, 0x9}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000f4e7fd0201610e2ceec6e9596e2d0c0653cc452db03d2e9d636ab1fcaec72b8073f2596e6b53ebed3420a82b6b7ccb98708a26e0ff6e3bc3eede839486e93392e83f89", @ANYRES32=r7, @ANYBLOB="21000004000000001c0012000c000600000000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3058.588914][T14131] __nla_validate_parse: 61 callbacks suppressed [ 3058.588933][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3058.605687][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3058.666471][ T9552] usb 3-1: Using ep0 maxpacket: 32 08:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = accept4$rose(r4, 0x0, &(0x7f0000000380), 0xa546b1d8b16b6ae4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00'}) r6 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x800c1, 0x0, 0x4}, 0x18) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/82, 0x52}, {0x0}], 0x3, 0x0, 0xffffffed) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x4}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_map={0x883, 0xabb, 0x3ff, 0x6, 0x9, 0x9}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000f4e7fd0201610e2ceec6e9596e2d0c0653cc452db03d2e9d636ab1fcaec72b8073f2596e6b53ebed3420a82b6b7ccb98708a26e0ff6e3bc3eede839486e93392e83f89", @ANYRES32=r7, @ANYBLOB="21000004000000001c0012000c000600000000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) accept4$rose(r4, 0x0, &(0x7f0000000380), 0xa546b1d8b16b6ae4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00'}) (async) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x800c1, 0x0, 0x4}, 0x18) (async) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/82, 0x52}, {0x0}], 0x3, 0x0, 0xffffffed) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x4}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_map={0x883, 0xabb, 0x3ff, 0x6, 0x9, 0x9}}) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000f4e7fd0201610e2ceec6e9596e2d0c0653cc452db03d2e9d636ab1fcaec72b8073f2596e6b53ebed3420a82b6b7ccb98708a26e0ff6e3bc3eede839486e93392e83f89", @ANYRES32=r7, @ANYBLOB="21000004000000001c0012000c000600000000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) 08:58:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 3058.710119][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3058.728231][ T28] audit: type=1804 audit(1710233929.629:1416): pid=14132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6553/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 08:58:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xb00}, 0x0) [ 3058.796677][ T9552] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 3058.816493][ T9552] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3058.834969][ T9552] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3058.846065][ T9552] usb 3-1: config 1 has no interface number 0 [ 3058.853583][ T9552] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3058.872656][ T9552] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 08:58:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd51f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x94}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = accept4$rose(r4, 0x0, &(0x7f0000000380), 0xa546b1d8b16b6ae4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00'}) (async) r6 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x800c1, 0x0, 0x4}, 0x18) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/82, 0x52}, {0x0}], 0x3, 0x0, 0xffffffed) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)={0x4}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_map={0x883, 0xabb, 0x3ff, 0x6, 0x9, 0x9}}) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000f4e7fd0201610e2ceec6e9596e2d0c0653cc452db03d2e9d636ab1fcaec72b8073f2596e6b53ebed3420a82b6b7ccb98708a26e0ff6e3bc3eede839486e93392e83f89", @ANYRES32=r7, @ANYBLOB="21000004000000001c0012000c000600000000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3058.897082][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3058.904674][ T9552] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3058.921583][ T9552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.936217][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3059.012479][ T9552] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 3059.085379][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 3059.151678][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:58:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="f40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0102000000000000c400128009000100766c616e00000000b40002800600010000000000040003800c00020004000000020000001b820200540a0000180000001c0004800c00010006000000000800000c0001000600000006000000700004800c00010000000100100001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c00016f0b5521fcf4fe9a0869f6d0d9a7eb5900220b0000010000000c00010004000000010000000c00010006000000020000000c0001007fae0000010000000c000100800000000600000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0xf4}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newtclass={0xa8, 0x28, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0xfff3, 0xd}, {0x0, 0xffe0}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x4, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xffff, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x3, 0x3}}]}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2f}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3059.207653][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3059.236697][ T9552] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached 08:58:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 3059.313452][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3059.335299][ T28] audit: type=1804 audit(1710233930.229:1417): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6554/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 [ 3059.409944][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3059.435484][T31661] usb 3-1: USB disconnect, device number 21 [ 3059.446631][T31661] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected 08:58:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 08:58:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="f40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0102000000000000c400128009000100766c616e00000000b40002800600010000000000040003800c00020004000000020000001b820200540a0000180000001c0004800c00010006000000000800000c0001000600000006000000700004800c00010000000100100001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c00016f0b5521fcf4fe9a0869f6d0d9a7eb5900220b0000010000000c00010004000000010000000c00010006000000020000000c0001007fae0000010000000c000100800000000600000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0xf4}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newtclass={0xa8, 0x28, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0xfff3, 0xd}, {0x0, 0xffe0}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x4, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xffff, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x3, 0x3}}]}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2f}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:50 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd51f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x94}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x73000000}, 0x0) 08:58:50 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="f40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0102000000000000c400128009000100766c616e00000000b40002800600010000000000040003800c00020004000000020000001b820200540a0000180000001c0004800c00010006000000000800000c0001000600000006000000700004800c00010000000100100001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c00016f0b5521fcf4fe9a0869f6d0d9a7eb5900220b0000010000000c00010004000000010000000c00010006000000020000000c0001007fae0000010000000c000100800000000600000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0xf4}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newtclass={0xa8, 0x28, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0xfff3, 0xd}, {0x0, 0xffe0}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x4, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xffff, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x3, 0x3}}]}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2f}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newtclass={0xa8, 0x28, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0xfff3, 0xd}, {0x0, 0xffe0}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x8, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x4, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xffff, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x3, 0x3}}]}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2f}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 08:58:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd51f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x94}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80350000}, 0x0) 08:58:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000d000000090001006605007700000000340002805f000000000009000000000008000100000000000b00020078706f6c696379000000eaa864b2ce28ef00000000000000000000d7ebee960cb33bd4321e6d123b2f3f1a781e41c5c0e2ff8dd8ee33c94dd45022c581e648b43a9d17d2dca046cead1f1672cb9b7ff27c678334cfaf5d972249be89d9eb1c2b49cc8ab2533f366c56f48135a749847749483606a839fb8aaa052194f1f7bc8876ff4e48878c40adf88e4f97c1e453a6d137abf333c1f24b44acbf63b10837e4ab2150ec066577bde2aae438f4d7358a3df0a069af49"], 0x64}}, 0x0) 08:58:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 08:58:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000240)=""/196, 0xc4}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000380)='cgroup.freeze\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/96, 0x60}], 0x3, 0xfffffffd, 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3060.125707][ T28] audit: type=1804 audit(1710233931.019:1418): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6556/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 08:58:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1400}, 0x0) 08:58:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) 08:58:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1e, 0x800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000d000000090001006605007700000000340002805f000000000009000000000008000100000000000b00020078706f6c696379000000eaa864b2ce28ef00000000000000000000d7ebee960cb33bd4321e6d123b2f3f1a781e41c5c0e2ff8dd8ee33c94dd45022c581e648b43a9d17d2dca046cead1f1672cb9b7ff27c678334cfaf5d972249be89d9eb1c2b49cc8ab2533f366c56f48135a749847749483606a839fb8aaa052194f1f7bc8876ff4e48878c40adf88e4f97c1e453a6d137abf333c1f24b44acbf63b10837e4ab2150ec066577bde2aae438f4d7358a3df0a069af49"], 0x64}}, 0x0) 08:58:51 executing program 2: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 08:58:51 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, 0x0) 08:58:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1500}, 0x0) [ 3060.443750][ T28] audit: type=1804 audit(1710233931.339:1419): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6557/cgroup.controllers" dev="sda1" ino=1987 res=1 errno=0 08:58:51 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(r0, 0x1) sendmmsg$inet(r0, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x1, 0x20008041) 08:58:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000d000000090001006605007700000000340002805f000000000009000000000008000100000000000b00020078706f6c696379000000eaa864b2ce28ef00000000000000000000d7ebee960cb33bd4321e6d123b2f3f1a781e41c5c0e2ff8dd8ee33c94dd45022c581e648b43a9d17d2dca046cead1f1672cb9b7ff27c678334cfaf5d972249be89d9eb1c2b49cc8ab2533f366c56f48135a749847749483606a839fb8aaa052194f1f7bc8876ff4e48878c40adf88e4f97c1e453a6d137abf333c1f24b44acbf63b10837e4ab2150ec066577bde2aae438f4d7358a3df0a069af49"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1e, 0x800, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000d000000090001006605007700000000340002805f000000000009000000000008000100000000000b00020078706f6c696379000000eaa864b2ce28ef00000000000000000000d7ebee960cb33bd4321e6d123b2f3f1a781e41c5c0e2ff8dd8ee33c94dd45022c581e648b43a9d17d2dca046cead1f1672cb9b7ff27c678334cfaf5d972249be89d9eb1c2b49cc8ab2533f366c56f48135a749847749483606a839fb8aaa052194f1f7bc8876ff4e48878c40adf88e4f97c1e453a6d137abf333c1f24b44acbf63b10837e4ab2150ec066577bde2aae438f4d7358a3df0a069af49"], 0x64}}, 0x0) (async) 08:58:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x84ffffff}, 0x0) 08:58:51 executing program 2: syz_open_dev$media(&(0x7f0000000d00), 0x0, 0x4000) 08:58:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x228, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1f8, 0x2, [@TCA_FLOW_EMATCHES={0x1f4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x2}, {0x400, 0x6ae70000, 0x2, 0x1, 0xa, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x2, 0x0, 0xfc4}, "652ea4303ba40434520fe97052161b8c2d4ad261a2db87b604ce33eed351f52f4607457e9a43d1dbc0b01658962f284dfe815a006f77ba32975b99d466de93f76427ee40a8d3218f84c8c24c971f18afb87266997346ad7548888f7f07c0f50187ad5533ed0ca279bfc92192182d219c0882c4be86a3d04bc4ec81372598de3e323a1e3082de121d8e63b11a95466091a98a2a82"}}, @TCF_EM_CONTAINER={0xdc, 0x1, 0x0, 0x0, {{0xe0, 0x0, 0xff33}, "8b8a06927661cad66f56bb638ded98d16543b8f5a38154c6bbc5f2e9aa3d77fd73fe1626b7e3f065cf4d859194ee56da92de6eed4562a1b62d00978507de4e42ac89b500e29c8831669a41f33f6a329a0399f4be128dbd9aaa648092604a2005c1f4c9899f4816d8f0bf5253c46d6e1ba50ee9d28b5d8278e54f9711595c0695b53c9d94f8d56d6d1129dfcc9d2828c422570039ed1866b3aa4bec50056ed503a5f90b15a6edaf22a761fa7eb7920f21e741dd319fbb1ad4ab638912605b6b204d8ea2219d1f209d898c94f6264d5562"}}, @TCF_EM_IPSET={0x10, 0x4, 0x0, 0x0, {{0xfffc, 0x8, 0x9}, {0x0, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x20, 0x7, 0x1}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xcd, 0x8, 0x9}, {0x4, 0x2, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{0x0, 0x9, 0x3cf}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x228}}, 0x0) 08:58:51 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) 08:58:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 08:58:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x86ddffff}, 0x0) 08:58:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c00}, 0x0) 08:58:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000240)=""/196, 0xc4}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r9 = openat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(r9, &(0x7f0000000380)='cgroup.freeze\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/96, 0x60}], 0x3, 0xfffffffd, 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x228, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1f8, 0x2, [@TCA_FLOW_EMATCHES={0x1f4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x2}, {0x400, 0x6ae70000, 0x2, 0x1, 0xa, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x2, 0x0, 0xfc4}, "652ea4303ba40434520fe97052161b8c2d4ad261a2db87b604ce33eed351f52f4607457e9a43d1dbc0b01658962f284dfe815a006f77ba32975b99d466de93f76427ee40a8d3218f84c8c24c971f18afb87266997346ad7548888f7f07c0f50187ad5533ed0ca279bfc92192182d219c0882c4be86a3d04bc4ec81372598de3e323a1e3082de121d8e63b11a95466091a98a2a82"}}, @TCF_EM_CONTAINER={0xdc, 0x1, 0x0, 0x0, {{0xe0, 0x0, 0xff33}, "8b8a06927661cad66f56bb638ded98d16543b8f5a38154c6bbc5f2e9aa3d77fd73fe1626b7e3f065cf4d859194ee56da92de6eed4562a1b62d00978507de4e42ac89b500e29c8831669a41f33f6a329a0399f4be128dbd9aaa648092604a2005c1f4c9899f4816d8f0bf5253c46d6e1ba50ee9d28b5d8278e54f9711595c0695b53c9d94f8d56d6d1129dfcc9d2828c422570039ed1866b3aa4bec50056ed503a5f90b15a6edaf22a761fa7eb7920f21e741dd319fbb1ad4ab638912605b6b204d8ea2219d1f209d898c94f6264d5562"}}, @TCF_EM_IPSET={0x10, 0x4, 0x0, 0x0, {{0xfffc, 0x8, 0x9}, {0x0, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x20, 0x7, 0x1}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xcd, 0x8, 0x9}, {0x4, 0x2, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{0x0, 0x9, 0x3cf}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x228}}, 0x0) (rerun: 64) 08:58:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x88470000}, 0x0) [ 3061.176438][ T9552] usb 3-1: new high-speed USB device number 22 using dummy_hcd 08:58:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000240)=""/196, 0xc4}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000240)=""/196, 0xc4}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = openat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000380)='cgroup.freeze\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/96, 0x60}], 0x3, 0xfffffffd, 0x9) (async) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/96, 0x60}], 0x3, 0xfffffffd, 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x228, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x1f8, 0x2, [@TCA_FLOW_EMATCHES={0x1f4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x2}, {0x400, 0x6ae70000, 0x2, 0x1, 0xa, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x2, 0x0, 0xfc4}, "652ea4303ba40434520fe97052161b8c2d4ad261a2db87b604ce33eed351f52f4607457e9a43d1dbc0b01658962f284dfe815a006f77ba32975b99d466de93f76427ee40a8d3218f84c8c24c971f18afb87266997346ad7548888f7f07c0f50187ad5533ed0ca279bfc92192182d219c0882c4be86a3d04bc4ec81372598de3e323a1e3082de121d8e63b11a95466091a98a2a82"}}, @TCF_EM_CONTAINER={0xdc, 0x1, 0x0, 0x0, {{0xe0, 0x0, 0xff33}, "8b8a06927661cad66f56bb638ded98d16543b8f5a38154c6bbc5f2e9aa3d77fd73fe1626b7e3f065cf4d859194ee56da92de6eed4562a1b62d00978507de4e42ac89b500e29c8831669a41f33f6a329a0399f4be128dbd9aaa648092604a2005c1f4c9899f4816d8f0bf5253c46d6e1ba50ee9d28b5d8278e54f9711595c0695b53c9d94f8d56d6d1129dfcc9d2828c422570039ed1866b3aa4bec50056ed503a5f90b15a6edaf22a761fa7eb7920f21e741dd319fbb1ad4ab638912605b6b204d8ea2219d1f209d898c94f6264d5562"}}, @TCF_EM_IPSET={0x10, 0x4, 0x0, 0x0, {{0xfffc, 0x8, 0x9}, {0x0, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x20, 0x7, 0x1}, {{0x2, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xcd, 0x8, 0x9}, {0x4, 0x2, 0xe}}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{0x0, 0x9, 0x3cf}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x228}}, 0x0) 08:58:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 3061.416372][ T9552] usb 3-1: Using ep0 maxpacket: 16 08:58:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x88480000}, 0x0) [ 3061.501313][ T28] audit: type=1804 audit(1710233932.399:1420): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6559/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 08:58:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', r4, 0x2f, 0xfc, 0x8, 0x0, 0x9, @local, @empty, 0x0, 0x10, 0x5, 0x3}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@newqdisc={0x170, 0x24, 0x50e, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x4, 0x9}, {0xffe0, 0x4}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x9, 0x7, 0x7fffffff, 0x2, 0x213, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x20, 0x1, 0x1, 0x7f9, 0x2, 0x5, 0x800, 0x3}}, {0xa, 0x2, [0x8a6, 0x2f1a, 0x7f]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x66, 0x1, 0x99b, 0x0, 0x1f, 0xec1d, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x1, 0x3, 0x3a5, 0x2, 0x1, 0x8]}}, {{0x1c, 0x1, {0x1, 0xb9, 0x7fff, 0x7ff, 0x0, 0x5540, 0x5, 0x3}}, {0xa, 0x2, [0x4f9a, 0x1, 0xffff]}}, {{0x1c, 0x1, {0x3, 0xff, 0x3, 0x8, 0x2, 0x4, 0x7f, 0x8}}, {0x14, 0x2, [0x401, 0x2, 0x2, 0x884e, 0x3, 0x2, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0x57, 0x0, 0x3, 0x0, 0x32, 0x8, 0x2}}, {0x8, 0x2, [0x7f, 0x3]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0xf4e7, 0x7, 0x9, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5bf33ae7}, @TCA_RATE={0x6, 0x5, {0x61, 0xf5}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x170}}, 0x4000020) [ 3061.566481][ T9552] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3061.578161][ T9552] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3061.589032][ T9552] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 08:58:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4788}, 0x0) [ 3061.636738][ T9552] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3061.680489][ T9552] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 08:58:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x88640000}, 0x0) 08:58:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4888}, 0x0) [ 3061.893642][ T9552] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3061.918280][ T9552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3061.944321][ T9552] usb 3-1: Product: syz [ 3061.950117][ T9552] usb 3-1: SerialNumber: syz 08:58:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) 08:58:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', r4, 0x2f, 0xfc, 0x8, 0x0, 0x9, @local, @empty, 0x0, 0x10, 0x5, 0x3}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@newqdisc={0x170, 0x24, 0x50e, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x4, 0x9}, {0xffe0, 0x4}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x9, 0x7, 0x7fffffff, 0x2, 0x213, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x20, 0x1, 0x1, 0x7f9, 0x2, 0x5, 0x800, 0x3}}, {0xa, 0x2, [0x8a6, 0x2f1a, 0x7f]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x66, 0x1, 0x99b, 0x0, 0x1f, 0xec1d, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x1, 0x3, 0x3a5, 0x2, 0x1, 0x8]}}, {{0x1c, 0x1, {0x1, 0xb9, 0x7fff, 0x7ff, 0x0, 0x5540, 0x5, 0x3}}, {0xa, 0x2, [0x4f9a, 0x1, 0xffff]}}, {{0x1c, 0x1, {0x3, 0xff, 0x3, 0x8, 0x2, 0x4, 0x7f, 0x8}}, {0x14, 0x2, [0x401, 0x2, 0x2, 0x884e, 0x3, 0x2, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0x57, 0x0, 0x3, 0x0, 0x32, 0x8, 0x2}}, {0x8, 0x2, [0x7f, 0x3]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0xf4e7, 0x7, 0x9, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5bf33ae7}, @TCA_RATE={0x6, 0x5, {0x61, 0xf5}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x170}}, 0x4000020) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', r4, 0x2f, 0xfc, 0x8, 0x0, 0x9, @local, @empty, 0x0, 0x10, 0x5, 0x3}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@newqdisc={0x170, 0x24, 0x50e, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x4, 0x9}, {0xffe0, 0x4}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x9, 0x7, 0x7fffffff, 0x2, 0x213, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x20, 0x1, 0x1, 0x7f9, 0x2, 0x5, 0x800, 0x3}}, {0xa, 0x2, [0x8a6, 0x2f1a, 0x7f]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x66, 0x1, 0x99b, 0x0, 0x1f, 0xec1d, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x1, 0x3, 0x3a5, 0x2, 0x1, 0x8]}}, {{0x1c, 0x1, {0x1, 0xb9, 0x7fff, 0x7ff, 0x0, 0x5540, 0x5, 0x3}}, {0xa, 0x2, [0x4f9a, 0x1, 0xffff]}}, {{0x1c, 0x1, {0x3, 0xff, 0x3, 0x8, 0x2, 0x4, 0x7f, 0x8}}, {0x14, 0x2, [0x401, 0x2, 0x2, 0x884e, 0x3, 0x2, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0x57, 0x0, 0x3, 0x0, 0x32, 0x8, 0x2}}, {0x8, 0x2, [0x7f, 0x3]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0xf4e7, 0x7, 0x9, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5bf33ae7}, @TCA_RATE={0x6, 0x5, {0x61, 0xf5}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x170}}, 0x4000020) (async) 08:58:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 08:58:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3062.256289][ T9552] cdc_ncm 3-1:1.0: bind() failure [ 3062.265373][ T9552] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 3062.300264][ T9552] cdc_ncm 3-1:1.1: bind() failure [ 3062.333061][ T9552] usb 3-1: USB disconnect, device number 22 08:58:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 08:58:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', r4, 0x2f, 0xfc, 0x8, 0x0, 0x9, @local, @empty, 0x0, 0x10, 0x5, 0x3}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@newqdisc={0x170, 0x24, 0x50e, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x4, 0x9}, {0xffe0, 0x4}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x9, 0x7, 0x7fffffff, 0x2, 0x213, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x20, 0x1, 0x1, 0x7f9, 0x2, 0x5, 0x800, 0x3}}, {0xa, 0x2, [0x8a6, 0x2f1a, 0x7f]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x66, 0x1, 0x99b, 0x0, 0x1f, 0xec1d, 0x8}}, {0x14, 0x2, [0x5, 0x6, 0x1, 0x3, 0x3a5, 0x2, 0x1, 0x8]}}, {{0x1c, 0x1, {0x1, 0xb9, 0x7fff, 0x7ff, 0x0, 0x5540, 0x5, 0x3}}, {0xa, 0x2, [0x4f9a, 0x1, 0xffff]}}, {{0x1c, 0x1, {0x3, 0xff, 0x3, 0x8, 0x2, 0x4, 0x7f, 0x8}}, {0x14, 0x2, [0x401, 0x2, 0x2, 0x884e, 0x3, 0x2, 0x4, 0x4]}}, {{0x1c, 0x1, {0x5, 0x57, 0x0, 0x3, 0x0, 0x32, 0x8, 0x2}}, {0x8, 0x2, [0x7f, 0x3]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0xf4e7, 0x7, 0x9, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5bf33ae7}, @TCA_RATE={0x6, 0x5, {0x61, 0xf5}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x170}}, 0x4000020) 08:58:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x89020000}, 0x0) [ 3062.606102][ T28] audit: type=1804 audit(1710233933.499:1421): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6560/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 08:58:53 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000202505a8a44000010203010902"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 08:58:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 08:58:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xb818075d}, 0x0) 08:58:53 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1868, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x183c, 0x2, [@TCA_FW_POLICE={0x490, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x8a90, 0x3, 0x0, {0x71, 0x2, 0x4, 0x3, 0x1, 0x82}, {0x1, 0x0, 0x92, 0x1, 0x2, 0x5}, 0x6, 0x8, 0x8001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1f, 0xfffffff9, 0x1f, 0x1, 0x2, 0x0, 0xffff, 0x10001, 0x4, 0x1, 0x2, 0x4, 0x6200, 0x0, 0x3, 0x3, 0x0, 0x2, 0x7, 0xfffffffe, 0x10001, 0x658, 0x7fffffff, 0x5, 0x0, 0x4, 0x400, 0x100, 0x100, 0x9, 0x4, 0x9, 0x6, 0x7, 0x7fffffff, 0xfc00, 0x9, 0x2, 0x7fffffff, 0x3, 0x1, 0x10001, 0x3, 0x1, 0x8, 0x85, 0xda1, 0x9, 0xf95, 0x5, 0x2, 0x0, 0x3, 0x97, 0x0, 0x6c09, 0x7ff, 0x4, 0x0, 0xffff0000, 0x50f, 0x7, 0x645, 0x7, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x9, 0x4, 0xfffffffc, 0x0, 0x7, 0x0, 0x7, 0xb45, 0x2, 0x21, 0xff, 0x4ce, 0x2, 0x12a9c0, 0x2, 0x2, 0x401, 0x6, 0x8, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x8, 0x7, 0x401, 0xf0, 0xa991, 0x4, 0x10001, 0x1ff, 0x3, 0x412, 0x2, 0x20, 0x5, 0x0, 0xe780, 0x1ff, 0x8, 0x7fffffff, 0x7fffffff, 0x1, 0x5369, 0x8, 0x10001, 0xfffffffd, 0xfff, 0x5, 0x6, 0xffffffd1, 0x400, 0x8, 0x100, 0xfffffffe, 0x8, 0x2, 0x7, 0x1f, 0x6, 0x7f, 0x8, 0x10000, 0x6, 0x1, 0xfffff5db, 0xbc, 0x0, 0x1f, 0x5, 0x0, 0x8, 0x1000, 0x2, 0x128f, 0x2, 0xf30, 0x56, 0x4, 0x40, 0xfffffffb, 0x5, 0x3, 0xe8, 0xff3, 0x400, 0x9a, 0xf6, 0x4, 0x6, 0xffff, 0x6, 0xffffffc1, 0x3, 0x20, 0x5, 0x335, 0x6, 0x6, 0x400, 0x5, 0x9, 0x5, 0x5, 0x401, 0x7, 0x0, 0x2, 0x2, 0x2, 0x1, 0x9, 0x7, 0x9, 0x8, 0x7, 0x0, 0x5, 0x4, 0x4, 0x1, 0x7, 0x3, 0x100, 0x2683, 0x0, 0xfac5, 0x9, 0x5, 0x4, 0x666, 0x0, 0x0, 0x8, 0x6, 0x1100, 0x2, 0x7, 0x9, 0x10000, 0x1, 0x8, 0x8, 0x0, 0x8, 0x7, 0x7, 0x9, 0x0, 0x8, 0x6, 0x0, 0x9, 0x2, 0x4, 0xfffffbff, 0x7, 0x7, 0x6, 0x2, 0x9, 0x4, 0x0, 0x9, 0x6e, 0x7, 0x101, 0x9, 0xffffffff, 0x2, 0x1, 0xffffffff, 0x5, 0xffffff56, 0x1000, 0x1, 0x1, 0x7e, 0x17, 0x3, 0x0, 0xe9c, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc94}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x1000, 0x23132d5c, 0x134, {0x54, 0x1, 0x2, 0x672, 0x22f, 0x8}, {0xb3, 0x2, 0xffff, 0xa58a, 0x5, 0x8}, 0x1f, 0x2, 0x5}}]}, @TCA_FW_ACT={0x1384, 0x4, [@m_ctinfo={0xac, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x9, 0x8, 0x9, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4f, 0x6, "4e94911f59a7fc58ce56d59ea04bb55826eb88ad3c2a0c255a5fe4bc420aae7be6833e3ff36cc6bbefe307a00208d6ac48abd15651118319621cfb665989e6ee282e0f70849d5fa7c12d45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x10a4, 0x0, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x401, 0x8, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x4, 0x8, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x180, 0x1f, 0x2, 0x1d, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x5, 0x3, 0xe33, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x114a1b94cd8bfc1f, 0x2}}}}, @m_csum={0x138, 0xe, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0x10001, 0x3}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x10001, 0xffffffffffffffff, 0x5, 0xfffffffb}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x843, 0x10000000, 0x8, 0xdfe}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x2, 0x0, 0x6, 0x1}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe8, 0x5, 0x20000000, 0x5, 0x94}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x100, 0xffffffff}, 0x67}}]}, {0x62, 0x6, "5582071cff1718a1d18938f68dcf174a016f380269ec7919474f488fcaeb343886d3165394755542691c84aeff9344b3e647d59e49e76cafb4764e59a846e2ffedaf2e796a545a3765cc0a27f3b6923ea2ca297660f3bb0a1ba2263e3849"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xf8, 0x16, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xbd, 0x6, "11b79fe764e4549bc900cdfd233cf036e6702f386577eee82678e99965b6e089ea569c6f55183f9ee83e0ea48b30667aa5ac3823d56a4d0f7511a7583d3b7f154d34f1789b91a07d3e957d24eb4c9590b2cfc6ff93b266b20e7847f1b513b0c223679b59895bc721bdba29d74fae12f75aaa745a1a083274344401ddca25b4fedd58e463d7a5bc07ff7ab7c97686e8a3840a5ef06702a97d0017c747253f3d35f0fd54583def21f94659fdb8bd1aee22e5ab7ac859665e4bbe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xcbaa6e1f73720c4e}}]}}]}, 0x1868}}, 0x0) 08:58:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 08:58:54 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1868, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x183c, 0x2, [@TCA_FW_POLICE={0x490, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x8a90, 0x3, 0x0, {0x71, 0x2, 0x4, 0x3, 0x1, 0x82}, {0x1, 0x0, 0x92, 0x1, 0x2, 0x5}, 0x6, 0x8, 0x8001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1f, 0xfffffff9, 0x1f, 0x1, 0x2, 0x0, 0xffff, 0x10001, 0x4, 0x1, 0x2, 0x4, 0x6200, 0x0, 0x3, 0x3, 0x0, 0x2, 0x7, 0xfffffffe, 0x10001, 0x658, 0x7fffffff, 0x5, 0x0, 0x4, 0x400, 0x100, 0x100, 0x9, 0x4, 0x9, 0x6, 0x7, 0x7fffffff, 0xfc00, 0x9, 0x2, 0x7fffffff, 0x3, 0x1, 0x10001, 0x3, 0x1, 0x8, 0x85, 0xda1, 0x9, 0xf95, 0x5, 0x2, 0x0, 0x3, 0x97, 0x0, 0x6c09, 0x7ff, 0x4, 0x0, 0xffff0000, 0x50f, 0x7, 0x645, 0x7, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x9, 0x4, 0xfffffffc, 0x0, 0x7, 0x0, 0x7, 0xb45, 0x2, 0x21, 0xff, 0x4ce, 0x2, 0x12a9c0, 0x2, 0x2, 0x401, 0x6, 0x8, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x8, 0x7, 0x401, 0xf0, 0xa991, 0x4, 0x10001, 0x1ff, 0x3, 0x412, 0x2, 0x20, 0x5, 0x0, 0xe780, 0x1ff, 0x8, 0x7fffffff, 0x7fffffff, 0x1, 0x5369, 0x8, 0x10001, 0xfffffffd, 0xfff, 0x5, 0x6, 0xffffffd1, 0x400, 0x8, 0x100, 0xfffffffe, 0x8, 0x2, 0x7, 0x1f, 0x6, 0x7f, 0x8, 0x10000, 0x6, 0x1, 0xfffff5db, 0xbc, 0x0, 0x1f, 0x5, 0x0, 0x8, 0x1000, 0x2, 0x128f, 0x2, 0xf30, 0x56, 0x4, 0x40, 0xfffffffb, 0x5, 0x3, 0xe8, 0xff3, 0x400, 0x9a, 0xf6, 0x4, 0x6, 0xffff, 0x6, 0xffffffc1, 0x3, 0x20, 0x5, 0x335, 0x6, 0x6, 0x400, 0x5, 0x9, 0x5, 0x5, 0x401, 0x7, 0x0, 0x2, 0x2, 0x2, 0x1, 0x9, 0x7, 0x9, 0x8, 0x7, 0x0, 0x5, 0x4, 0x4, 0x1, 0x7, 0x3, 0x100, 0x2683, 0x0, 0xfac5, 0x9, 0x5, 0x4, 0x666, 0x0, 0x0, 0x8, 0x6, 0x1100, 0x2, 0x7, 0x9, 0x10000, 0x1, 0x8, 0x8, 0x0, 0x8, 0x7, 0x7, 0x9, 0x0, 0x8, 0x6, 0x0, 0x9, 0x2, 0x4, 0xfffffbff, 0x7, 0x7, 0x6, 0x2, 0x9, 0x4, 0x0, 0x9, 0x6e, 0x7, 0x101, 0x9, 0xffffffff, 0x2, 0x1, 0xffffffff, 0x5, 0xffffff56, 0x1000, 0x1, 0x1, 0x7e, 0x17, 0x3, 0x0, 0xe9c, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc94}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x1000, 0x23132d5c, 0x134, {0x54, 0x1, 0x2, 0x672, 0x22f, 0x8}, {0xb3, 0x2, 0xffff, 0xa58a, 0x5, 0x8}, 0x1f, 0x2, 0x5}}]}, @TCA_FW_ACT={0x1384, 0x4, [@m_ctinfo={0xac, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x9, 0x8, 0x9, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4f, 0x6, "4e94911f59a7fc58ce56d59ea04bb55826eb88ad3c2a0c255a5fe4bc420aae7be6833e3ff36cc6bbefe307a00208d6ac48abd15651118319621cfb665989e6ee282e0f70849d5fa7c12d45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x10a4, 0x0, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x401, 0x8, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x4, 0x8, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x180, 0x1f, 0x2, 0x1d, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x5, 0x3, 0xe33, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x114a1b94cd8bfc1f, 0x2}}}}, @m_csum={0x138, 0xe, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0x10001, 0x3}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x10001, 0xffffffffffffffff, 0x5, 0xfffffffb}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x843, 0x10000000, 0x8, 0xdfe}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x2, 0x0, 0x6, 0x1}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe8, 0x5, 0x20000000, 0x5, 0x94}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x100, 0xffffffff}, 0x67}}]}, {0x62, 0x6, "5582071cff1718a1d18938f68dcf174a016f380269ec7919474f488fcaeb343886d3165394755542691c84aeff9344b3e647d59e49e76cafb4764e59a846e2ffedaf2e796a545a3765cc0a27f3b6923ea2ca297660f3bb0a1ba2263e3849"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xf8, 0x16, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xbd, 0x6, "11b79fe764e4549bc900cdfd233cf036e6702f386577eee82678e99965b6e089ea569c6f55183f9ee83e0ea48b30667aa5ac3823d56a4d0f7511a7583d3b7f154d34f1789b91a07d3e957d24eb4c9590b2cfc6ff93b266b20e7847f1b513b0c223679b59895bc721bdba29d74fae12f75aaa745a1a083274344401ddca25b4fedd58e463d7a5bc07ff7ab7c97686e8a3840a5ef06702a97d0017c747253f3d35f0fd54583def21f94659fdb8bd1aee22e5ab7ac859665e4bbe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xcbaa6e1f73720c4e}}]}}]}, 0x1868}}, 0x0) [ 3063.096168][ T1540] usb 3-1: new high-speed USB device number 23 using dummy_hcd 08:58:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 08:58:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3063.351262][ T1540] usb 3-1: Using ep0 maxpacket: 32 08:58:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xffff0000}, 0x0) 08:58:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8847}, 0x0) 08:58:54 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1868, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x183c, 0x2, [@TCA_FW_POLICE={0x490, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x8a90, 0x3, 0x0, {0x71, 0x2, 0x4, 0x3, 0x1, 0x82}, {0x1, 0x0, 0x92, 0x1, 0x2, 0x5}, 0x6, 0x8, 0x8001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1f, 0xfffffff9, 0x1f, 0x1, 0x2, 0x0, 0xffff, 0x10001, 0x4, 0x1, 0x2, 0x4, 0x6200, 0x0, 0x3, 0x3, 0x0, 0x2, 0x7, 0xfffffffe, 0x10001, 0x658, 0x7fffffff, 0x5, 0x0, 0x4, 0x400, 0x100, 0x100, 0x9, 0x4, 0x9, 0x6, 0x7, 0x7fffffff, 0xfc00, 0x9, 0x2, 0x7fffffff, 0x3, 0x1, 0x10001, 0x3, 0x1, 0x8, 0x85, 0xda1, 0x9, 0xf95, 0x5, 0x2, 0x0, 0x3, 0x97, 0x0, 0x6c09, 0x7ff, 0x4, 0x0, 0xffff0000, 0x50f, 0x7, 0x645, 0x7, 0x0, 0x5, 0x7, 0x6, 0x7fffffff, 0x9, 0x4, 0xfffffffc, 0x0, 0x7, 0x0, 0x7, 0xb45, 0x2, 0x21, 0xff, 0x4ce, 0x2, 0x12a9c0, 0x2, 0x2, 0x401, 0x6, 0x8, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x8, 0x7, 0x401, 0xf0, 0xa991, 0x4, 0x10001, 0x1ff, 0x3, 0x412, 0x2, 0x20, 0x5, 0x0, 0xe780, 0x1ff, 0x8, 0x7fffffff, 0x7fffffff, 0x1, 0x5369, 0x8, 0x10001, 0xfffffffd, 0xfff, 0x5, 0x6, 0xffffffd1, 0x400, 0x8, 0x100, 0xfffffffe, 0x8, 0x2, 0x7, 0x1f, 0x6, 0x7f, 0x8, 0x10000, 0x6, 0x1, 0xfffff5db, 0xbc, 0x0, 0x1f, 0x5, 0x0, 0x8, 0x1000, 0x2, 0x128f, 0x2, 0xf30, 0x56, 0x4, 0x40, 0xfffffffb, 0x5, 0x3, 0xe8, 0xff3, 0x400, 0x9a, 0xf6, 0x4, 0x6, 0xffff, 0x6, 0xffffffc1, 0x3, 0x20, 0x5, 0x335, 0x6, 0x6, 0x400, 0x5, 0x9, 0x5, 0x5, 0x401, 0x7, 0x0, 0x2, 0x2, 0x2, 0x1, 0x9, 0x7, 0x9, 0x8, 0x7, 0x0, 0x5, 0x4, 0x4, 0x1, 0x7, 0x3, 0x100, 0x2683, 0x0, 0xfac5, 0x9, 0x5, 0x4, 0x666, 0x0, 0x0, 0x8, 0x6, 0x1100, 0x2, 0x7, 0x9, 0x10000, 0x1, 0x8, 0x8, 0x0, 0x8, 0x7, 0x7, 0x9, 0x0, 0x8, 0x6, 0x0, 0x9, 0x2, 0x4, 0xfffffbff, 0x7, 0x7, 0x6, 0x2, 0x9, 0x4, 0x0, 0x9, 0x6e, 0x7, 0x101, 0x9, 0xffffffff, 0x2, 0x1, 0xffffffff, 0x5, 0xffffff56, 0x1000, 0x1, 0x1, 0x7e, 0x17, 0x3, 0x0, 0xe9c, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc94}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x1000, 0x23132d5c, 0x134, {0x54, 0x1, 0x2, 0x672, 0x22f, 0x8}, {0xb3, 0x2, 0xffff, 0xa58a, 0x5, 0x8}, 0x1f, 0x2, 0x5}}]}, @TCA_FW_ACT={0x1384, 0x4, [@m_ctinfo={0xac, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x9, 0x8, 0x9, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4f, 0x6, "4e94911f59a7fc58ce56d59ea04bb55826eb88ad3c2a0c255a5fe4bc420aae7be6833e3ff36cc6bbefe307a00208d6ac48abd15651118319621cfb665989e6ee282e0f70849d5fa7c12d45"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x10a4, 0x0, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x401, 0x8, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x5, 0x4, 0x8, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x180, 0x1f, 0x2, 0x1d, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x5, 0x3, 0xe33, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x114a1b94cd8bfc1f, 0x2}}}}, @m_csum={0x138, 0xe, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0x10001, 0x3}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x10001, 0xffffffffffffffff, 0x5, 0xfffffffb}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x843, 0x10000000, 0x8, 0xdfe}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x2, 0x0, 0x6, 0x1}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe8, 0x5, 0x20000000, 0x5, 0x94}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x10000000, 0x100, 0xffffffff}, 0x67}}]}, {0x62, 0x6, "5582071cff1718a1d18938f68dcf174a016f380269ec7919474f488fcaeb343886d3165394755542691c84aeff9344b3e647d59e49e76cafb4764e59a846e2ffedaf2e796a545a3765cc0a27f3b6923ea2ca297660f3bb0a1ba2263e3849"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xf8, 0x16, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xbd, 0x6, "11b79fe764e4549bc900cdfd233cf036e6702f386577eee82678e99965b6e089ea569c6f55183f9ee83e0ea48b30667aa5ac3823d56a4d0f7511a7583d3b7f154d34f1789b91a07d3e957d24eb4c9590b2cfc6ff93b266b20e7847f1b513b0c223679b59895bc721bdba29d74fae12f75aaa745a1a083274344401ddca25b4fedd58e463d7a5bc07ff7ab7c97686e8a3840a5ef06702a97d0017c747253f3d35f0fd54583def21f94659fdb8bd1aee22e5ab7ac859665e4bbe"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xcbaa6e1f73720c4e}}]}}]}, 0x1868}}, 0x0) [ 3063.478437][ T1540] usb 3-1: config 0 has no interfaces? 08:58:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x901) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0xa06, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x6801) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "723add34a47d7f404be5fdf2047138b41b1bb0e669d33756"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x8841}, 0x4) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3063.624315][T14385] __nla_validate_parse: 73 callbacks suppressed [ 3063.624332][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3063.641558][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3063.651367][ T1540] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3063.667192][ T1540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3063.685383][ T1540] usb 3-1: Product: syz [ 3063.696130][ T1540] usb 3-1: Manufacturer: syz [ 3063.705581][ T1540] usb 3-1: SerialNumber: syz [ 3063.731101][ T1540] usb 3-1: config 0 descriptor?? [ 3063.759799][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) 08:58:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0x8, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x8}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000000000000000000e8ffff0000000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x28, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="5c000001000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000002c00020028000b8008000100070000001c00028018000100ff0f010007000000070000000000000001fc2500"], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x800) [ 3063.788525][ T28] audit: type=1804 audit(1710233934.679:1422): pid=14390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6563/cgroup.controllers" dev="sda1" ino=1988 res=1 errno=0 08:58:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8848}, 0x0) [ 3063.914515][T14400] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3063.995073][T12610] usb 3-1: USB disconnect, device number 23 [ 3064.023072][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xffffdd86}, 0x0) 08:58:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xb105}, 0x0) [ 3064.098434][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3064.124820][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0x8, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x8}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000000000000000000e8ffff0000000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x28, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="5c000001000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000002c00020028000b8008000100070000001c00028018000100ff0f010007000000070000000000000001fc2500"], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x800) [ 3064.262918][T14412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 08:58:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0x8, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x8}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000000000000000000e8ffff0000000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x28, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="5c000001000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000002c00020028000b8008000100070000001c00028018000100ff0f010007000000070000000000000001fc2500"], 0x5c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0x8, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x8}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000000000000000000e8ffff0000000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x28, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=ANY=[@ANYBLOB="5c000001000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000d00000009000100666c6f77000000002c00020028000b8008000100070000001c00028018000100ff0f010007000000070000000000000001fc2500"], 0x5c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r7, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x800) (async) [ 3064.337498][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3064.348762][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:58:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x901) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0xa06, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x6801) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "723add34a47d7f404be5fdf2047138b41b1bb0e669d33756"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x8841}, 0x4) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 08:58:55 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='oom_adj\x00') preadv(r0, &(0x7f00000018c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:55 executing program 2: r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r0, 0x4020940d, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0}) 08:58:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 08:58:55 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 08:58:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100001e6c15a8e77a9b730870"], 0x20}}, 0x0) [ 3064.944345][T14435] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=0 [ 3064.957639][T14435] CPU: 0 PID: 14435 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3064.967763][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3064.977853][T14435] Call Trace: [ 3064.981163][T14435] [ 3064.984122][T14435] dump_stack_lvl+0x1e7/0x2e0 [ 3064.988842][T14435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3064.994053][T14435] ? __pfx__printk+0x10/0x10 [ 3064.998643][T14435] ? ___ratelimit+0x4c4/0x670 [ 3065.003328][T14435] ? __pfx____ratelimit+0x10/0x10 [ 3065.008440][T14435] dump_header+0xda/0x6a0 [ 3065.012800][T14435] oom_kill_process+0x3a7/0x930 [ 3065.017660][T14435] out_of_memory+0xf67/0x1320 [ 3065.022363][T14435] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 3065.028007][T14435] ? __pfx___mutex_lock+0x10/0x10 [ 3065.033040][T14435] ? __pfx_out_of_memory+0x10/0x10 [ 3065.038159][T14435] mem_cgroup_out_of_memory+0x263/0x3b0 [ 3065.043706][T14435] ? __pfx_lock_release+0x10/0x10 [ 3065.048735][T14435] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 3065.054810][T14435] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3065.060026][T14435] ? mem_cgroup_iter+0x422/0x560 [ 3065.064961][T14435] try_charge_memcg+0xda2/0x18a0 [ 3065.069930][T14435] ? __pfx_try_charge_memcg+0x10/0x10 [ 3065.075312][T14435] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3065.081042][T14435] ? __pfx_lock_release+0x10/0x10 [ 3065.086082][T14435] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3065.092073][T14435] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3065.097793][T14435] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 3065.103602][T14435] obj_cgroup_charge+0x389/0x630 [ 3065.108541][T14435] ? obj_cgroup_charge+0x121/0x630 [ 3065.113654][T14435] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 3065.119113][T14435] ? kmalloc_trace+0x4e/0x360 [ 3065.123788][T14435] ? __pfx___might_resched+0x10/0x10 [ 3065.129070][T14435] ? rcu_is_watching+0x15/0xb0 [ 3065.133842][T14435] ? trace_contention_end+0x3c/0x100 [ 3065.139129][T14435] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 3065.144942][T14435] ? ipv6_add_dev+0x108/0x1290 [ 3065.149762][T14435] kmalloc_trace+0x216/0x360 [ 3065.154349][T14435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3065.160342][T14435] ipv6_add_dev+0x108/0x1290 [ 3065.164939][T14435] addrconf_notify+0x6a7/0x1020 [ 3065.169800][T14435] notifier_call_chain+0x18f/0x3b0 [ 3065.174919][T14435] register_netdevice+0x151f/0x19c0 [ 3065.180138][T14435] ? __pfx_register_netdevice+0x10/0x10 [ 3065.185690][T14435] ? dev_addr_mod+0xbd/0x330 [ 3065.190324][T14435] ? __asan_memset+0x23/0x50 [ 3065.194915][T14435] ? netif_inherit_tso_max+0x1f3/0x340 [ 3065.200382][T14435] veth_newlink+0x628/0xcd0 [ 3065.204953][T14435] ? __pfx_veth_newlink+0x10/0x10 [ 3065.209984][T14435] ? __sock_sendmsg+0x221/0x270 [ 3065.214831][T14435] ? ____sys_sendmsg+0x525/0x7d0 [ 3065.219777][T14435] ? __sys_sendmsg+0x2b0/0x3a0 [ 3065.224538][T14435] ? do_syscall_64+0xf9/0x240 [ 3065.229213][T14435] ? entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3065.235329][T14435] ? alloc_netdev_mqs+0xbc3/0xf80 [ 3065.240353][T14435] ? validate_linkmsg+0x71e/0x900 [ 3065.245385][T14435] ? rtnl_create_link+0x91c/0xc20 [ 3065.250411][T14435] ? __pfx_veth_newlink+0x10/0x10 [ 3065.255437][T14435] rtnl_newlink+0x158f/0x20a0 [ 3065.260121][T14435] ? rtnl_newlink+0x461/0x20a0 [ 3065.264893][T14435] ? __pfx_rtnl_newlink+0x10/0x10 [ 3065.269916][T14435] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3065.275125][T14435] ? __mutex_lock+0x9a4/0xd70 [ 3065.279808][T14435] ? __mutex_lock+0x526/0xd70 [ 3065.284555][T14435] ? __pfx_rtnl_newlink+0x10/0x10 [ 3065.289574][T14435] rtnetlink_rcv_msg+0x885/0x1040 [ 3065.294602][T14435] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3065.299799][T14435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3065.305262][T14435] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3065.311252][T14435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3065.317591][T14435] ? __local_bh_enable_ip+0x168/0x200 [ 3065.322982][T14435] ? lockdep_hardirqs_on+0x98/0x140 [ 3065.328187][T14435] ? __local_bh_enable_ip+0x168/0x200 [ 3065.333655][T14435] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3065.338768][T14435] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3065.344500][T14435] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3065.349617][T14435] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3065.354823][T14435] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3065.359940][T14435] ? ref_tracker_free+0x643/0x7e0 [ 3065.364978][T14435] netlink_rcv_skb+0x1e3/0x430 [ 3065.369749][T14435] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3065.375211][T14435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3065.380519][T14435] ? netlink_deliver_tap+0x2e/0x1b0 [ 3065.385722][T14435] netlink_unicast+0x7ea/0x980 [ 3065.390494][T14435] ? __pfx_netlink_unicast+0x10/0x10 [ 3065.395790][T14435] ? __virt_addr_valid+0x44e/0x520 [ 3065.400907][T14435] ? __phys_addr_symbol+0x2f/0x70 [ 3065.405932][T14435] ? __check_object_size+0x4bb/0xa00 [ 3065.411226][T14435] ? bpf_lsm_netlink_send+0x9/0x10 [ 3065.416343][T14435] netlink_sendmsg+0xa3b/0xd70 [ 3065.421122][T14435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3065.426411][T14435] ? __import_iovec+0x536/0x820 [ 3065.431265][T14435] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3065.436552][T14435] ? security_socket_sendmsg+0x87/0xb0 [ 3065.442015][T14435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3065.447304][T14435] __sock_sendmsg+0x221/0x270 [ 3065.452433][T14435] ____sys_sendmsg+0x525/0x7d0 [ 3065.457208][T14435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3065.462505][T14435] __sys_sendmsg+0x2b0/0x3a0 [ 3065.467098][T14435] ? __pfx___sys_sendmsg+0x10/0x10 [ 3065.472232][T14435] ? restore_fpregs_from_fpstate+0x100/0x250 [ 3065.478225][T14435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3065.484561][T14435] ? do_syscall_64+0x108/0x240 [ 3065.489327][T14435] ? do_syscall_64+0xb4/0x240 [ 3065.494009][T14435] do_syscall_64+0xf9/0x240 [ 3065.498519][T14435] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3065.504415][T14435] RIP: 0033:0x7fee4d67dda9 [ 3065.508831][T14435] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3065.528435][T14435] RSP: 002b:00007fee4e3710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3065.536852][T14435] RAX: ffffffffffffffda RBX: 00007fee4d7abf80 RCX: 00007fee4d67dda9 [ 3065.544825][T14435] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 3065.552792][T14435] RBP: 00007fee4d6ca47a R08: 0000000000000000 R09: 0000000000000000 [ 3065.560760][T14435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3065.568747][T14435] R13: 000000000000000b R14: 00007fee4d7abf80 R15: 00007fff28590ca8 [ 3065.576730][T14435] [ 3065.685665][T14435] memory: usage 307200kB, limit 307200kB, failcnt 3731 [ 3065.693095][T14435] memory+swap: usage 308796kB, limit 9007199254740988kB, failcnt 0 [ 3065.754091][T14435] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 3065.789170][T14435] Memory cgroup stats for /syz4: [ 3065.789512][T14435] cache 0 [ 3065.864558][T14435] rss 4096 [ 3065.890220][T14435] rss_huge 0 08:58:56 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 3065.925142][T14435] shmem 0 [ 3065.962327][T14435] mapped_file 0 08:58:56 executing program 2: process_vm_writev(0x0, &(0x7f0000003240)=[{&(0x7f0000002040)=""/158, 0x9e}], 0x1, &(0x7f0000003640)=[{0x0}], 0x1, 0x0) [ 3066.012317][T14435] dirty 0 [ 3066.015403][T14435] writeback 0 [ 3066.036104][T14435] workingset_refault_anon 286 [ 3066.052086][T14435] workingset_refault_file 14 08:58:57 executing program 2: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1, &(0x7f0000000000)=0x9d, 0x7, 0x0) [ 3066.076020][T14435] swap 1634304 [ 3066.079505][T14435] swapcached 4096 [ 3066.083154][T14435] pgpgin 946270 [ 3066.113697][T14435] pgpgout 946268 [ 3066.125692][T14435] pgfault 1691219 [ 3066.144340][T14435] pgmajfault 210 [ 3066.148593][T14435] inactive_anon 4096 [ 3066.152748][T14435] active_anon 0 [ 3066.156967][T14435] inactive_file 4096 [ 3066.161132][T14435] active_file 0 [ 3066.165188][T14435] unevictable 0 [ 3066.169580][T14435] hierarchical_memory_limit 314572800 08:58:57 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)={@map}, 0xfffffffffffffeb4) [ 3066.175216][T14435] hierarchical_memsw_limit 9223372036854771712 [ 3066.189145][T14435] total_cache 0 08:58:57 executing program 2: bpf$MAP_CREATE(0x14, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 3066.224898][T14435] total_rss 4096 [ 3066.244649][T14435] total_rss_huge 0 [ 3066.258299][T14435] total_shmem 0 [ 3066.266938][T14435] total_mapped_file 0 08:58:57 executing program 2: openat$ptp0(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000a00)={{0x80000000, 0x0, 0x0, [0x0, 0x1ff]}, {}, 0x10000000, [0xc6c, 0x858]}) [ 3066.274336][T14435] total_dirty 0 [ 3066.283520][T14435] total_writeback 0 [ 3066.287480][T14435] total_workingset_refault_anon 286 [ 3066.292704][T14435] total_workingset_refault_file 14 [ 3066.310555][T14435] total_swap 1634304 [ 3066.314506][T14435] total_swapcached 4096 [ 3066.353071][T14435] total_pgpgin 946270 [ 3066.373190][T14435] total_pgpgout 946268 [ 3066.387974][T14435] total_pgfault 1691219 [ 3066.392538][T14435] total_pgmajfault 210 [ 3066.397525][T14435] total_inactive_anon 4096 [ 3066.403000][T14435] total_active_anon 0 [ 3066.407851][T14435] total_inactive_file 4096 [ 3066.412534][T14435] total_active_file 0 [ 3066.417224][T14435] total_unevictable 0 [ 3066.421845][T14435] anon_cost 17 [ 3066.429491][T14435] file_cost 0 [ 3066.432822][T14435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20562,uid=0 08:58:57 executing program 2: r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r0, 0x40046602, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0}) [ 3066.521666][T14435] Memory cgroup out of memory: Killed process 20562 (syz-executor.4) total-vm:54508kB, anon-rss:532kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:58:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 08:58:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYBLOB="0c0001"], 0x28}}, 0x0) 08:58:57 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x901) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x901) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0xa06, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x6801) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "723add34a47d7f404be5fdf2047138b41b1bb0e669d33756"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x8841}, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "723add34a47d7f404be5fdf2047138b41b1bb0e669d33756"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x8841}, 0x4) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xffffff84}, 0x0) 08:58:57 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='oom_adj\x00') preadv(r0, &(0x7f00000018c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:57 executing program 2: r0 = openat$ptp0(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 08:58:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00080000000004000000020002000c009900018000002e000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "526844e59ba5d051c4976a7037def89ee8d361e50692149d"}], @NL80211_ATTR_4ADDR={0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8041) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:57 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@ifindex, 0xffffffffffffffff, 0x0, 0x10, 0xffffffffffffffff, @prog_id}, 0x20) 08:58:58 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='oom_adj\x00') preadv(r0, &(0x7f00000018c0)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, 0x0, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (rerun: 32) 08:58:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 08:58:58 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 08:58:58 executing program 2: r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)) [ 3067.213329][ T28] audit: type=1804 audit(1710233938.109:1423): pid=14487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6566/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 08:58:58 executing program 2: r0 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x80801, 0x0) mmap$dsp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 08:58:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062746964676557820f5bd87f648196e5165cd8f78696ee4a700f41b377de0c30eb91b119bd805495e4d8136520c9e23ddf8ffe18bc730f79b085342fc3ae1b327186734779348af5b2d98a27e92ef4bf515b242f265a6ed917f03527c712537f37f8de1e7d29"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x2) 08:58:58 executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1}, 0x48) 08:58:58 executing program 2: openat$audio(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) 08:58:58 executing program 2: process_vm_writev(0x0, &(0x7f0000003240)=[{&(0x7f0000002040)=""/158, 0x9e}, {0x0}], 0x2, 0x0, 0x0, 0x0) 08:58:58 executing program 2: openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x62) 08:58:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062746964676557820f5bd87f648196e5165cd8f78696ee4a700f41b377de0c30eb91b119bd805495e4d8136520c9e23ddf8ffe18bc730f79b085342fc3ae1b327186734779348af5b2d98a27e92ef4bf515b242f265a6ed917f03527c712537f37f8de1e7d29"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062746964676557820f5bd87f648196e5165cd8f78696ee4a700f41b377de0c30eb91b119bd805495e4d8136520c9e23ddf8ffe18bc730f79b085342fc3ae1b327186734779348af5b2d98a27e92ef4bf515b242f265a6ed917f03527c712537f37f8de1e7d29"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) 08:58:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00080000000004000000020002000c009900018000002e000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "526844e59ba5d051c4976a7037def89ee8d361e50692149d"}], @NL80211_ATTR_4ADDR={0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8041) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x3) [ 3068.141542][ T28] audit: type=1804 audit(1710233939.039:1424): pid=14529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6567/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 08:58:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062746964676557820f5bd87f648196e5165cd8f78696ee4a700f41b377de0c30eb91b119bd805495e4d8136520c9e23ddf8ffe18bc730f79b085342fc3ae1b327186734779348af5b2d98a27e92ef4bf515b242f265a6ed917f03527c712537f37f8de1e7d29"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:58:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 08:58:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x4) 08:58:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00080000000004000000020002000c009900018000002e000000"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "526844e59ba5d051c4976a7037def89ee8d361e50692149d"}], @NL80211_ATTR_4ADDR={0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8041) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:59 executing program 2: r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r0, 0x40049409, 0x0) 08:58:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000100)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x7}, 0x90) 08:58:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:58:59 executing program 2: shmget$private(0x0, 0x1000, 0x1840, &(0x7f0000ffc000/0x1000)=nil) 08:58:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd70000000000005"], 0x1c}}, 0x0) [ 3068.804344][T14545] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=0 [ 3068.846141][ T28] audit: type=1804 audit(1710233939.739:1425): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6569/cgroup.controllers" dev="sda1" ino=1991 res=1 errno=0 [ 3068.892893][T14545] CPU: 1 PID: 14545 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3068.903014][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3068.913072][T14545] Call Trace: [ 3068.916350][T14545] [ 3068.919274][T14545] dump_stack_lvl+0x1e7/0x2e0 [ 3068.923961][T14545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3068.929163][T14545] ? __pfx__printk+0x10/0x10 [ 3068.933749][T14545] ? ___ratelimit+0x4c4/0x670 [ 3068.938427][T14545] ? __pfx____ratelimit+0x10/0x10 [ 3068.943450][T14545] dump_header+0xda/0x6a0 [ 3068.947789][T14545] oom_kill_process+0x3a7/0x930 [ 3068.952641][T14545] out_of_memory+0xf67/0x1320 [ 3068.957757][T14545] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 3068.963492][T14545] ? __pfx___mutex_lock+0x10/0x10 [ 3068.968526][T14545] ? __pfx_out_of_memory+0x10/0x10 [ 3068.973652][T14545] mem_cgroup_out_of_memory+0x263/0x3b0 [ 3068.979199][T14545] ? __pfx_lock_release+0x10/0x10 [ 3068.984225][T14545] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 3068.990297][T14545] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3068.995500][T14545] ? mem_cgroup_iter+0x422/0x560 [ 3069.000435][T14545] try_charge_memcg+0xda2/0x18a0 [ 3069.005398][T14545] ? __pfx_try_charge_memcg+0x10/0x10 [ 3069.010773][T14545] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3069.016580][T14545] ? __pfx_lock_release+0x10/0x10 [ 3069.021608][T14545] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3069.027597][T14545] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3069.033316][T14545] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 3069.039132][T14545] obj_cgroup_charge+0x389/0x630 [ 3069.044067][T14545] ? obj_cgroup_charge+0x121/0x630 [ 3069.049178][T14545] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 3069.054666][T14545] ? kmalloc_trace+0x4e/0x360 [ 3069.059770][T14545] ? __pfx___might_resched+0x10/0x10 [ 3069.065061][T14545] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 3069.070877][T14545] ? ipv6_add_dev+0x5bd/0x1290 [ 3069.075638][T14545] kmalloc_trace+0x216/0x360 [ 3069.080226][T14545] ? ipv6_add_dev+0x55c/0x1290 [ 3069.084990][T14545] ipv6_add_dev+0x5bd/0x1290 [ 3069.089584][T14545] addrconf_notify+0x6a7/0x1020 [ 3069.094437][T14545] notifier_call_chain+0x18f/0x3b0 [ 3069.099560][T14545] register_netdevice+0x151f/0x19c0 [ 3069.104771][T14545] ? __pfx_register_netdevice+0x10/0x10 [ 3069.110317][T14545] ? __pfx_snprintf+0x10/0x10 [ 3069.114999][T14545] ? __asan_memset+0x23/0x50 [ 3069.119596][T14545] veth_newlink+0x84f/0xcd0 [ 3069.124106][T14545] ? __pfx_veth_newlink+0x10/0x10 [ 3069.129129][T14545] ? __sock_sendmsg+0x221/0x270 [ 3069.133976][T14545] ? __sys_sendmsg+0x2b0/0x3a0 [ 3069.138734][T14545] ? do_syscall_64+0xf9/0x240 [ 3069.143512][T14545] ? entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3069.149626][T14545] ? alloc_netdev_mqs+0xbc3/0xf80 [ 3069.154645][T14545] ? validate_linkmsg+0x71e/0x900 [ 3069.159675][T14545] ? rtnl_create_link+0x91c/0xc20 [ 3069.164807][T14545] ? __pfx_veth_newlink+0x10/0x10 [ 3069.169838][T14545] rtnl_newlink+0x158f/0x20a0 [ 3069.174527][T14545] ? rtnl_newlink+0x461/0x20a0 [ 3069.179301][T14545] ? __pfx_rtnl_newlink+0x10/0x10 [ 3069.184327][T14545] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3069.189533][T14545] ? __mutex_lock+0x9a4/0xd70 [ 3069.194218][T14545] ? rcu_read_unlock+0x8c/0xa0 [ 3069.198992][T14545] ? __pfx_rtnl_newlink+0x10/0x10 [ 3069.204012][T14545] rtnetlink_rcv_msg+0x885/0x1040 [ 3069.209066][T14545] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3069.214352][T14545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3069.219820][T14545] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3069.225806][T14545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3069.232144][T14545] ? __local_bh_enable_ip+0x168/0x200 [ 3069.237522][T14545] ? lockdep_hardirqs_on+0x98/0x140 [ 3069.242721][T14545] ? __local_bh_enable_ip+0x168/0x200 [ 3069.248095][T14545] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3069.253207][T14545] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3069.258932][T14545] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3069.264041][T14545] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3069.269247][T14545] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3069.274460][T14545] ? ref_tracker_free+0x643/0x7e0 [ 3069.279492][T14545] netlink_rcv_skb+0x1e3/0x430 [ 3069.284260][T14545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3069.289721][T14545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3069.295026][T14545] ? netlink_deliver_tap+0x2e/0x1b0 [ 3069.300236][T14545] netlink_unicast+0x7ea/0x980 [ 3069.305009][T14545] ? __pfx_netlink_unicast+0x10/0x10 [ 3069.310292][T14545] ? __virt_addr_valid+0x44e/0x520 [ 3069.315423][T14545] ? __phys_addr_symbol+0x2f/0x70 [ 3069.320457][T14545] ? __check_object_size+0x4bb/0xa00 [ 3069.325746][T14545] ? bpf_lsm_netlink_send+0x9/0x10 [ 3069.330859][T14545] netlink_sendmsg+0xa3b/0xd70 [ 3069.335735][T14545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3069.341024][T14545] ? __import_iovec+0x536/0x820 [ 3069.345875][T14545] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3069.351432][T14545] ? security_socket_sendmsg+0x87/0xb0 [ 3069.356899][T14545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3069.362188][T14545] __sock_sendmsg+0x221/0x270 [ 3069.366870][T14545] ____sys_sendmsg+0x525/0x7d0 [ 3069.371650][T14545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3069.376951][T14545] __sys_sendmsg+0x2b0/0x3a0 [ 3069.381541][T14545] ? __pfx___sys_sendmsg+0x10/0x10 [ 3069.386673][T14545] ? restore_fpregs_from_fpstate+0x100/0x250 [ 3069.392657][T14545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3069.398986][T14545] ? do_syscall_64+0x108/0x240 [ 3069.403754][T14545] ? do_syscall_64+0xb4/0x240 [ 3069.408435][T14545] do_syscall_64+0xf9/0x240 [ 3069.412948][T14545] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3069.418843][T14545] RIP: 0033:0x7fee4d67dda9 [ 3069.423257][T14545] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3069.442860][T14545] RSP: 002b:00007fee4e3710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3069.451275][T14545] RAX: ffffffffffffffda RBX: 00007fee4d7abf80 RCX: 00007fee4d67dda9 [ 3069.459243][T14545] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 3069.467209][T14545] RBP: 00007fee4d6ca47a R08: 0000000000000000 R09: 0000000000000000 [ 3069.475179][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3069.483151][T14545] R13: 000000000000000b R14: 00007fee4d7abf80 R15: 00007fff28590ca8 [ 3069.491132][T14545] [ 3069.519929][T14545] memory: usage 307200kB, limit 307200kB, failcnt 6400 [ 3069.539066][T14545] memory+swap: usage 308728kB, limit 9007199254740988kB, failcnt 0 [ 3069.564092][T14545] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 3069.589973][T14545] Memory cgroup stats for /syz4: [ 3069.590124][T14545] cache 4096 [ 3069.602998][T14545] rss 4096 [ 3069.614898][T14545] rss_huge 0 [ 3069.622523][T14545] shmem 0 [ 3069.629570][T14545] mapped_file 0 [ 3069.633264][T14545] dirty 0 [ 3069.640104][T14545] writeback 0 [ 3069.643440][T14545] workingset_refault_anon 1918 [ 3069.653906][T14545] workingset_refault_file 15 [ 3069.663503][T14545] swap 1568768 [ 3069.678929][T14545] swapcached 8192 [ 3069.693556][T14545] pgpgin 947928 [ 3069.701390][T14545] pgpgout 947924 [ 3069.704962][T14545] pgfault 1693302 [ 3069.725229][T14545] pgmajfault 1714 [ 3069.734166][T14545] inactive_anon 4096 [ 3069.749133][T14545] active_anon 0 [ 3069.752650][T14545] inactive_file 4096 [ 3069.770787][T14545] active_file 4096 [ 3069.774574][T14545] unevictable 0 [ 3069.785762][T14545] hierarchical_memory_limit 314572800 [ 3069.809778][T14545] hierarchical_memsw_limit 9223372036854771712 [ 3069.826280][T14545] total_cache 4096 [ 3069.835587][T14545] total_rss 4096 [ 3069.844730][T14545] total_rss_huge 0 [ 3069.852784][T14545] total_shmem 0 [ 3069.866146][T14545] total_mapped_file 0 [ 3069.870427][T14545] total_dirty 0 [ 3069.875794][T14545] total_writeback 0 [ 3069.880238][T14545] total_workingset_refault_anon 1918 [ 3069.885787][T14545] total_workingset_refault_file 15 [ 3069.891203][T14545] total_swap 1568768 [ 3069.895345][T14545] total_swapcached 8192 [ 3069.899864][T14545] total_pgpgin 947928 [ 3069.904115][T14545] total_pgpgout 947924 [ 3069.908477][T14545] total_pgfault 1693302 [ 3069.912884][T14545] total_pgmajfault 1714 [ 3069.917391][T14545] total_inactive_anon 4096 [ 3069.922077][T14545] total_active_anon 0 [ 3069.926379][T14545] total_inactive_file 4096 [ 3069.931053][T14545] total_active_file 4096 [ 3069.935543][T14545] total_unevictable 0 [ 3069.939848][T14545] anon_cost 26 [ 3069.943463][T14545] file_cost 0 [ 3069.959564][T14545] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20585,uid=0 [ 3069.977795][T14545] Memory cgroup out of memory: Killed process 20585 (syz-executor.4) total-vm:50800kB, anon-rss:400kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:59:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x5) 08:59:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) 08:59:01 executing program 0: getsockname$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @empty}, &(0x7f00000006c0)=0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x98, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000080)={'wg1\x00', @ifru_addrs=@generic={0x1e, "de307916e633189d963a6433a8b3"}}}) r6 = socket(0x26, 0x1, 0xede2) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c6}, 0x800) [ 3070.027521][T14546] __nla_validate_parse: 28 callbacks suppressed [ 3070.027538][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3070.043805][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:59:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 3070.202543][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:59:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000006}]}, 0x20}}, 0x0) [ 3070.305190][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3070.325393][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3070.462187][T14576] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=0 [ 3070.506527][T14576] CPU: 1 PID: 14576 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3070.516698][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3070.526786][T14576] Call Trace: [ 3070.530120][T14576] [ 3070.533061][T14576] dump_stack_lvl+0x1e7/0x2e0 [ 3070.537776][T14576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3070.543021][T14576] ? __pfx__printk+0x10/0x10 [ 3070.547646][T14576] ? ___ratelimit+0x4c4/0x670 [ 3070.552369][T14576] ? __pfx____ratelimit+0x10/0x10 [ 3070.557446][T14576] dump_header+0xda/0x6a0 [ 3070.561819][T14576] oom_kill_process+0x3a7/0x930 [ 3070.566692][T14576] out_of_memory+0xf67/0x1320 [ 3070.571391][T14576] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 3070.577041][T14576] ? __pfx___mutex_lock+0x10/0x10 [ 3070.582089][T14576] ? __pfx_out_of_memory+0x10/0x10 [ 3070.587211][T14576] mem_cgroup_out_of_memory+0x263/0x3b0 [ 3070.592805][T14576] ? __pfx_lock_release+0x10/0x10 [ 3070.597849][T14576] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 3070.603928][T14576] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3070.609127][T14576] ? mem_cgroup_iter+0x422/0x560 [ 3070.614068][T14576] try_charge_memcg+0xda2/0x18a0 [ 3070.619051][T14576] ? __pfx_try_charge_memcg+0x10/0x10 [ 3070.624449][T14576] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3070.630266][T14576] ? __pfx_lock_release+0x10/0x10 [ 3070.635313][T14576] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3070.641322][T14576] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3070.647066][T14576] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 3070.652892][T14576] obj_cgroup_charge+0x389/0x630 [ 3070.657833][T14576] ? obj_cgroup_charge+0x121/0x630 [ 3070.662945][T14576] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 3070.668402][T14576] ? __pfx___might_resched+0x10/0x10 [ 3070.673688][T14576] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 3070.679509][T14576] ? __register_sysctl_table+0x67/0x1440 [ 3070.685209][T14576] ? __register_sysctl_table+0x67/0x1440 [ 3070.690864][T14576] __kmalloc+0x28f/0x490 [ 3070.695115][T14576] ? snprintf+0xda/0x120 [ 3070.699416][T14576] __register_sysctl_table+0x67/0x1440 [ 3070.704898][T14576] ? is_module_address+0x46/0x60 [ 3070.709847][T14576] __addrconf_sysctl_register+0x298/0x3f0 [ 3070.715580][T14576] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 3070.721912][T14576] ? __raw_spin_lock_init+0x45/0x100 [ 3070.727467][T14576] addrconf_sysctl_register+0x167/0x1c0 [ 3070.733110][T14576] ipv6_add_dev+0xd64/0x1290 [ 3070.737707][T14576] addrconf_notify+0x6a7/0x1020 [ 3070.742566][T14576] notifier_call_chain+0x18f/0x3b0 [ 3070.747707][T14576] register_netdevice+0x151f/0x19c0 [ 3070.752957][T14576] ? __pfx_register_netdevice+0x10/0x10 [ 3070.758516][T14576] ? __pfx_snprintf+0x10/0x10 [ 3070.763205][T14576] ? __asan_memset+0x23/0x50 [ 3070.767802][T14576] veth_newlink+0x84f/0xcd0 [ 3070.772316][T14576] ? __pfx_veth_newlink+0x10/0x10 [ 3070.777343][T14576] ? __sock_sendmsg+0x221/0x270 [ 3070.782196][T14576] ? __sys_sendmsg+0x2b0/0x3a0 [ 3070.786961][T14576] ? do_syscall_64+0xf9/0x240 [ 3070.791634][T14576] ? entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3070.797748][T14576] ? alloc_netdev_mqs+0xbc3/0xf80 [ 3070.802772][T14576] ? validate_linkmsg+0x71e/0x900 [ 3070.807842][T14576] ? rtnl_create_link+0x91c/0xc20 [ 3070.812982][T14576] ? __pfx_veth_newlink+0x10/0x10 [ 3070.818023][T14576] rtnl_newlink+0x158f/0x20a0 [ 3070.822716][T14576] ? rtnl_newlink+0x461/0x20a0 [ 3070.827495][T14576] ? __pfx_rtnl_newlink+0x10/0x10 [ 3070.832521][T14576] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3070.837729][T14576] ? __mutex_lock+0x9a4/0xd70 [ 3070.842432][T14576] ? __mutex_lock+0x526/0xd70 [ 3070.847152][T14576] ? __pfx_rtnl_newlink+0x10/0x10 [ 3070.852191][T14576] rtnetlink_rcv_msg+0x885/0x1040 [ 3070.857226][T14576] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3070.862462][T14576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3070.867926][T14576] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3070.873909][T14576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3070.880246][T14576] ? __local_bh_enable_ip+0x168/0x200 [ 3070.885620][T14576] ? lockdep_hardirqs_on+0x98/0x140 [ 3070.890820][T14576] ? __local_bh_enable_ip+0x168/0x200 [ 3070.896194][T14576] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3070.901304][T14576] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3070.907037][T14576] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3070.912153][T14576] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3070.917372][T14576] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3070.922487][T14576] ? ref_tracker_free+0x643/0x7e0 [ 3070.927517][T14576] netlink_rcv_skb+0x1e3/0x430 [ 3070.932286][T14576] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3070.937744][T14576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3070.943052][T14576] ? netlink_deliver_tap+0x2e/0x1b0 [ 3070.948253][T14576] netlink_unicast+0x7ea/0x980 [ 3070.953024][T14576] ? __pfx_netlink_unicast+0x10/0x10 [ 3070.958742][T14576] ? __virt_addr_valid+0x44e/0x520 [ 3070.963856][T14576] ? __phys_addr_symbol+0x2f/0x70 [ 3070.968878][T14576] ? __check_object_size+0x4bb/0xa00 [ 3070.974166][T14576] ? bpf_lsm_netlink_send+0x9/0x10 [ 3070.979281][T14576] netlink_sendmsg+0xa3b/0xd70 [ 3070.984059][T14576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3070.989347][T14576] ? __import_iovec+0x536/0x820 [ 3070.994198][T14576] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3070.999480][T14576] ? security_socket_sendmsg+0x87/0xb0 [ 3071.004946][T14576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3071.010248][T14576] __sock_sendmsg+0x221/0x270 [ 3071.014929][T14576] ____sys_sendmsg+0x525/0x7d0 [ 3071.019697][T14576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3071.024989][T14576] __sys_sendmsg+0x2b0/0x3a0 [ 3071.029581][T14576] ? __pfx___sys_sendmsg+0x10/0x10 [ 3071.034710][T14576] ? restore_fpregs_from_fpstate+0x100/0x250 [ 3071.040699][T14576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3071.047030][T14576] ? do_syscall_64+0x108/0x240 [ 3071.051798][T14576] ? do_syscall_64+0xb4/0x240 [ 3071.056477][T14576] do_syscall_64+0xf9/0x240 [ 3071.060983][T14576] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3071.066878][T14576] RIP: 0033:0x7fee4d67dda9 [ 3071.071292][T14576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3071.090894][T14576] RSP: 002b:00007fee4e3710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3071.099393][T14576] RAX: ffffffffffffffda RBX: 00007fee4d7abf80 RCX: 00007fee4d67dda9 [ 3071.107709][T14576] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 3071.115674][T14576] RBP: 00007fee4d6ca47a R08: 0000000000000000 R09: 0000000000000000 [ 3071.123640][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3071.131606][T14576] R13: 000000000000000b R14: 00007fee4d7abf80 R15: 00007fff28590ca8 [ 3071.139588][T14576] [ 3071.192924][T14576] memory: usage 307196kB, limit 307200kB, failcnt 7259 [ 3071.200092][T14576] memory+swap: usage 308676kB, limit 9007199254740988kB, failcnt 0 [ 3071.214115][T14576] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 3071.222019][T14576] Memory cgroup stats for /syz4: [ 3071.222166][T14576] cache 4096 [ 3071.242552][T14576] rss 0 [ 3071.245723][T14576] rss_huge 0 [ 3071.258464][T14576] shmem 0 [ 3071.264126][T14576] mapped_file 0 [ 3071.278139][T14576] dirty 0 [ 3071.285326][T14576] writeback 0 [ 3071.299189][T14576] workingset_refault_anon 2256 [ 3071.343344][T14576] workingset_refault_file 15 [ 3071.357235][T14576] swap 1515520 [ 3071.368143][T14576] swapcached 0 [ 3071.375042][T14576] pgpgin 948291 [ 3071.385054][T14576] pgpgout 948289 [ 3071.394161][T14576] pgfault 1693838 [ 3071.405718][T14576] pgmajfault 2029 [ 3071.418656][T14576] inactive_anon 0 [ 3071.422340][T14576] active_anon 0 [ 3071.425806][T14576] inactive_file 4096 [ 3071.442784][T14576] active_file 4096 [ 3071.452150][T14576] unevictable 0 [ 3071.455655][T14576] hierarchical_memory_limit 314572800 [ 3071.474913][T14576] hierarchical_memsw_limit 9223372036854771712 [ 3071.487005][T14576] total_cache 4096 [ 3071.490954][T14576] total_rss 0 [ 3071.494253][T14576] total_rss_huge 0 [ 3071.517767][T14576] total_shmem 0 [ 3071.521556][T14576] total_mapped_file 0 [ 3071.532696][T14576] total_dirty 0 [ 3071.536496][T14576] total_writeback 0 [ 3071.540563][T14576] total_workingset_refault_anon 2256 [ 3071.546194][T14576] total_workingset_refault_file 15 [ 3071.551572][T14576] total_swap 1515520 [ 3071.555687][T14576] total_swapcached 0 [ 3071.559860][T14576] total_pgpgin 948291 [ 3071.564109][T14576] total_pgpgout 948289 [ 3071.568504][T14576] total_pgfault 1693838 [ 3071.572924][T14576] total_pgmajfault 2029 [ 3071.577351][T14576] total_inactive_anon 0 [ 3071.581797][T14576] total_active_anon 0 [ 3071.586181][T14576] total_inactive_file 4096 [ 3071.590896][T14576] total_active_file 4096 [ 3071.595421][T14576] total_unevictable 0 [ 3071.599714][T14576] anon_cost 17 [ 3071.603346][T14576] file_cost 0 [ 3071.609249][T14576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20607,uid=0 [ 3071.644011][T14576] Memory cgroup out of memory: Killed process 20607 (syz-executor.4) total-vm:50932kB, anon-rss:400kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:59:02 executing program 2: setpriority(0x2, 0x0, 0x200) 08:59:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x6) 08:59:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8400) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3071.678687][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:59:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='G'], 0x1c}}, 0x0) 08:59:02 executing program 0: getsockname$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @empty}, &(0x7f00000006c0)=0x1c) (async) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @empty}, &(0x7f00000006c0)=0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x98, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000080)={'wg1\x00', @ifru_addrs=@generic={0x1e, "de307916e633189d963a6433a8b3"}}}) r6 = socket(0x26, 0x1, 0xede2) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) (async) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c6}, 0x800) 08:59:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 3071.812663][T14596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:59:02 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) 08:59:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500b4ad000009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000008c0)="a98b016aafdd4059ed2c4216f555a8a521997848e3541e52d3b6b93a4ec37542631b441555fcc8d3c353f8df78e4f63f540784501f7d8d3046511a08d82a118998b8707d7f0e529f3ba07e65f435ef0602a6b41a8119be7270a72ed0878590908d1309ed4002e0bd", 0x68}], 0x1, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00&\t\x00'/16], 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x5c, r1, 0xc10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048c10}, 0x84) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000002300)={0x2130, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x524, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x0, 0x1000, 0x100, 0x1, 0x1000, 0x2, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1000, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x3c5, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x127, 0x7f, [@peer_mgmt={0x75, 0x16, {0x1, 0x1f, @val=0x5b7, @void, @val="330921c43ca45c7e83c5fd7fdfb9de41"}}, @prep={0x83, 0x1f, {{}, 0x20, 0x1, @broadcast, 0x30a9, @void, 0x3, 0x5c, @broadcast, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x2, 0x3}}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0xb5, "73b1b30df54a6c22c81737dc3cec5df4f83ec7d0fd4e62d568ba4279e5c9f30f2a6103cd9355936318131b7ce1666cfe6ed2d672cd315b908d9ad9efe5209e023330c4e2de21b638d4e2acb7de38a80f0f6e1c4e580263b904504e8c70f3660a7659806fa3f2c5c002e73b88b87e1e6d7cbadea59f27dc322d908bbb91f11a207d0fc735c7ec1c99f63cc273a81ec9805b65c1836f8feb35c9240fccfd0d7b0198ed8df668d1d789d40a26b152e39c417619282ada"}, @challenge={0x10, 0x1, 0xda}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x1, 0x1fc4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x6, 0x4}}, @cf={0x4, 0x6, {0x9, 0x2, 0xc, 0xfe00}}, @challenge={0x10, 0x1, 0x75}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x9, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xae}, @NL80211_ATTR_CSA_IES={0x1ba8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x73, 0xf, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x37}, 0x4, 0x8, @device_b, 0xbef2, 0x101, 0x1f}}, @erp={0x2a, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x7c}, 0x20, 0x1, @device_a, 0xfffffc01, 0x0, 0xae}}, @challenge={0x10, 0x1, 0xd8}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x2, @broadcast, 0x91, @value, 0x9, 0x280, @device_b}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x6, 0x3, 0x8, 0x2ab]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd0, 0x7f, [@mesh_id={0x72, 0x6}, @perr={0x84, 0xc2, {0x4, 0xc, [{{}, @device_b, 0x400, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x200, @value=@broadcast, 0x5}, {{}, @device_b, 0x7, @void, 0x10}, {{}, @broadcast, 0x0, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x13}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x31}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x17}, {{0x0, 0x1}, @device_b, 0x9, @value, 0xb}, {{}, @device_b, 0x6, @void, 0x34}, {{}, @device_a, 0xfff, @void, 0x3d}, {{}, @broadcast, 0x40, @void, 0x36}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "491cc03a3e380d63f4d4069ae7c27ec406e74757d4270e58adeaa2fcd96f14239ad740a7fa7b33b67ffae5d7bc9462237fc379cc2597ec2a89f26cdb74fa22e10369e85409c324139469c9141626131c64ab2ad952c0d4ac8943944e729bfa868a3482bae69f96e9228b5257f70885dc68d249fa0f1e5b09ee12fd9afad2b2c51b2e7ada1b5520f053363fb1fe553b01150ea3e9aa5d08260554cc703110e740a542fb52c6bae921ab6d70bc32a893d271afe3bd84a35e08bcc9d3649612af7c1e7aa42a64b09efb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "d4085daaf71be5090e1e8bdfd62edcfede670c23cf4fd3719747703e6fc38f1a579e21567f0d7dbd16c3abdee43355733da47d884c2b5782255a5414c6b7af7411d66acb8224f0d2ec4f2c193dde2abdb3625ef1cd196b57efcb69bc82b1b2a9dfcb830cfc810fad09b565357bf098e8a1f4113cd41dd835acb883104c8e01e45ef1c2534234f29b9e6a87bb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "3bdff631ce99712505c924b2fc56ae909b6628705de510619703515a9f70207e229bcc325be674918214519d2e2d9ba8749cf8d903d2f28695f5d88e497bb8663b57523765a59f1cbf39055eefa91a3532ae15507f4aa8751d9a5201dc9d79dfdf7f3e53080a489bcbc229dca37687180fb8012f51c29d5e373264c90ba4f021d35b46d863a62b2d51e614605579855ca375f796638a29564ffafbff982582d0c5960285ef6424f3b7f968d348"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "8fe78c1edff0104563f1a0e11438aa11322b12dfd388914dae7e1c3100bafde2efacedb857754bc55ef12e221e9b41066dcefa863f12f1fff63b2482d830dcee482375bd75019fd187cc3af2c1e59659dd1bb51963706f03f58bf89a9d5a2582f30a3eae94c0dc0acbac7789640f954bff2cf24834e05a7d1d80365d4a071508a8a755085695ecfda6a7f252ae3cde650cf02ae60eeb411fb2e10a5064f07feca0a900a025a7f3bc"}]}, @NL80211_ATTR_PROBE_RESP={0x845, 0x91, "88d084ddefe44c10faf882cef27dd94edbbd0db7fa3c03f8f997786c45f7b32ea6fd9e7445d54e7469ac16262828b709738d6bd394e166261063a70710e6b4c80c1efbc8ffdeb9833c838b8c8f69661b0113a011319e9237f87dd5d8cd7e9f22120657936928f3f0c6a93ebe30c5f73b39306ab35fc029ad5d833d238a4cb56043342896e50e547849cd43751b4f832be5bd311df624546a79c8ff617d0746ca49cf118ac75780fcdd105c8d68bb4ab00705467dae4d2eb23e5af88e273fed4bfa091750438ebc758c430c710c175aac36a7ae695b4b1506222b6f86dc32e0de540d8b66e27afe8a05e314027f1258a88e946eca88f8f03e26b78b44e7b0bb3a1b26a6eecba5b816f41fdb6a802d5e5258e967882e4a83bd30781b1d9a25d8bfc36d3f2209976a3193a10c14651ffa85202d93934cd41fc92cd0e76d785f8d5da9904ca5d9f3d110414595561c6166fe71813b961b00ba56fd1b630bcbe37271639ddf623b0d4109bf118d8ddafdcf62c0713e89f8333497e0e77d9a0508299d67678250c7c015a333b927b31b20b0408a9a842392e5a779fb1993d977a03ee84fd8742b86ca6d33447c5bd2090cefd2e828c022d02a4820ddf249079f9be65c8fdb8dd7ca5ccb4ae43e15f57017ebda03517f6315a180eb97aadf4e7779e6543275b99f6852863988fb5b4b752456559bca0e2b376946387dc7c9ab5c5d2d0ec2f205ddce7e84e8d9c311b1c7dabbf9e8afe683f9975230a0582f70b67f59509b8dcac2054bcbba1b7a7f312643cc2dc819022c1faf3e5d8342deea7a720f246c2f18d5b3ffb52a1991c0675919098efdcf373f619a386050469d535789a9eecef55e2b7a6811b44f80e95588a5314e2f7154d99f3e063ba0377ed3858d2c76605ee5835e46a79e43f60ea5c2bd129d2bd33a16322ee72506dac13899cfe9bc5e856383014b69e3fd87a62243debc3ffbf0eaa6c9180165b019552851a92f02d83fbc294ac31b0ec91bb17acd96d7208df98fed97f30a28ce2262a04226782e0f2ce865726a1ac9b8db20fb9dfba5cb126492b0c4bdbc0001875cd852bbee9f24ad54d682b8662449d9543166a60d3513086fb32afc31c243d15139f0b525b50300002911b50cde73acca3b88112c8ff749f6250d1a52ede68a015c630621203b547fe4a61e3a444098445efcd31a9eb9daf9a1cea33ddbe1a5d6a717145324b5a4be03e51ab02c7f2bb11e80b5db02d8367d8d76fe25412d6b9e847a6064f5bb6f945d700a6f99dcac4be3f27f134ca4f3f231587e10d36e2b648704501abc2d77781409043e296b9b30de99ffce5a3d9a1b7e83bca266ff60927205b5501fdcdb5225b40b22c0773da72f25200bef7317c9b45c7f5bfbf546b5b783f6343e870f4a57adad963de2f5d57dc1f26602c9934f7a4a19e415e34bb5989cdbe3f4a4878f187a32f0007c5c5a66e5418ed7c8e5cf2501cad9431793e1f4cd4d029c10a1df3910f647150159c7c250db902807836316cb91a1a38953fb41b56e655e04b1e95f789353dbe841d57780ba5bbdeb4a7fb74eed56b70b0943a0bb29e1dc91beb7c71f528b169ff3569d81d20e3bd49b27b79a384a5185ae9c679dda05778fa2f883d841b941bcad9cc4c7468e2c0ebd9bb40daf67f2dbbb97c65502a47f7bbcc9a5300ea82a642e92bda00edf188b65b7daae41648f6f09ee876743ee9d509cc596e69570f1e6e8b51a1737037f9131b4f263ba46c3f8f5102cbd52976b4e589a27fb031d9ff203ec787496935f11c2257d8594d39c18a32e6e4dabafc4872c1650c5b3fde19d8a6ef876581bdfe48e2e58317b98a11ad185ac0f15446717840f1ae81cd9a35ec80dae8ba46d8f96a08f772d1b1f153863f90ae8c90a9f54efe8d581e55b5a7fa94e983c5a3a78c29761ae1c35945562451a28326f59806a3f200270b4129f91603baa46c85ef5e40072e2c35014cfe8f02d4652a788113bd5c5386da616befd4fea2578c96afdc086c8059d2b2f9fcbbe0900cae867c9818ea241d247f3a78a1f19939970a15e5a755d97486eea89cf3ad6aad2f43294bc49699df45f6ee4ba20276f3d4345c6d3ce293b940cd69e5d846c307b7c2cbfee258f24fdd354237044d903acd09e3b5f418af3a60cd78ccb578bf1c88f52c1d78ad62f81c4be3e384881c76e1c05ec5fa3aa9a0c681afc4230fc73aec778f8ba37b4e263543c0fdec101abcd1b04b77ee0396b9a4418ceea148090a4bfe2f49fe0f73c25c358010b0de0bbfc4ecbd332a36932ef65fb3fa53441ea74204fdeff51b0dce00d3510b1bdab006ac14622663a6421cc49f72a32725408f749646f96c43a83d90b661628b0b27e21e3cf8f949feb90ca0e4aa011f9919f94de286faeaae54099f10618e1a0358aba26a553140145f02f28ffffb1cebfd4bc7a4c321d113c7ce9d485897d26d8577de02f0730e40003d53fb0f4935788c54943bad569cb51027d4d4d934bf949347709a93a7c8ada9dd464c52fde070a2f06514f1af829e6bb014e363cba5e152bffa7a7dd278f648471e6532d4727d0e90a5cb956892439912f7d5a00e4f74b14aab246092a6e2a179daa173404efeebefd648753101908356fb7e40bd2d68df427381ff4b6c55d7cd1f86070a4397c2e66ac1353ff49f42fe6ec4799c9132cb8438fff336d2daae25778ae50e2376abb15ae285da775544d3ea5ec56f34021dfac64d9fa0f253c679ef9219e7921ba9a472c82247f7d756c762668c9496091cdface56eb06105801752d46695dfbc868f914a610923403b6a542c8905fec78069c1b6f31338ff400cdfea36e79aa6c2bfe05f26bdcf51c6daaecfdae437d7c008fb3407b5b32d1ef2daced185155fa131cdfd32ac81fccace5c70c504ef79aa49fa7afa99055c02f2aebd805779008e71f323c6427902c59e3dfca0d4e6e960d2c50238c25b260ce9e061bb7855127c690d671352f"}, @NL80211_ATTR_PROBE_RESP={0x14a, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x6, 0x0, {0x3ff, 0xf20, 0x0, 0x62, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x7}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x8, @broadcast, 0x8000, @value, 0x7f, 0x1000, @broadcast, 0xfffffffb}}, @mesh_chsw={0x76, 0x6, {0x3, 0x80, 0x1, 0x7}}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x63, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x4ba, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x84, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @peer_mgmt={0x75, 0x18, {0x0, 0x913, @val=0x2, @val=0x7, @val="543add2b1c774a9a498d0f944787eef3"}}, @supported_rates={0x1, 0x8, [{0x24}, {0x1, 0x1}, {0x36}, {0x4}, {0x18, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x18, 0x1}]}, @preq={0x82, 0x1a, {{}, 0x1, 0x20, 0xe98, @broadcast, 0xfffff001, @void, 0x0, 0x7}}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x15, @device_a, 0x7, @value=@device_b, 0x7fff, 0x3, 0x1, [{{0x1}, @device_b, 0x9}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xc9, 0x6, 0x0, 0x8, 0x2, 0x0, 0x6]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x3d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x58, 0x3, "5b9b634f9e0ccf963ba846a572e79375a0511e78bac67e8ba1d721ee91e59e0b2197832902ee8d75a14ae656755701b447e5c15f440cefed5326dc898f8d6eaadc046c8913b8df3958207a086760a89879f9bb36"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "fc262ceb83056c739918593f6185f488f2cde47753434edba0be995150b7441e777abf72c1b90cbb0a80a1526dd2f7e5f7da1e9c745cebdc29c83bc30cfe2ebdf5e08f88fbbd77f4de2318ddef5fdd04990d63a5f6c2a155a8370edb5879ec59d1b7d3e7c4a2f2d5fe41211d11a52545a721d77300c7e0583c64db1fa270c21160acf6252aa97ff0fe210d3abe6132d8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "9d23746e064355f23f67a33c4993d207a1cfcc72d62191bf469bddb82a389153390c572a1af236ee4ef3c53462f10fa1557a90aa98a88e0c20dc293aea99511cd5122be9df47e035d29247e3ba32dc014a9376126c1452af8c7fd7ae8a42a9a1c0fdd35625d8ae742b02140bc18354fd7d6d8b65f63e1dfbd620901b31e96d45ad"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc5, 0x3, "e72db745cfbf21637384b8277661c8b160cdd3b484cd38a8c70cb86bf2491f4116f1b902f84271e66068d3a64f71a4af602be2ea4b097ec0cd0588c8584800af1211b30c43d06767ea1e5a93e654a5ef5487ef829614ac55fd04e64a3e579f5b38c1cf3b9f3b461374302f273e3702681abd2e7f12f7dfecc30a3f8ec744694449c71c9fbce2b619c044ebb4f83c969b470e9002ddbfce849e91d3a61d169680a9fac55819959f0e4208f1b2b9a2f46ae953d0c3003609325be51b1466eb13a39c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xfc, 0x2, "1ef5285e56a62fda620b202146c8271e53fc293d16614ef2cfdf9e2dffccda36f95368f3089f050f8ff92cab70786a7772a6416ff9f477fc13478eb1d480de21594eafd21d60bc94ff7480919925f42f8d3599515f85b1272972b1f99eeee73ec551fcc98e7c1016556053fdf1280917378c842d409fa02297a986a39a0480f1bb24aab5c5bf192c37a45c3372fe6a4109d56662b90f66ec90c571531db8aa5a3cafa2ff5059f76301430196d7b20e0e9af39c64b8e962a7a533c8224d60290262d978ba16ed23c3d3950f88a1df47d6c5847176738f15c73a283ba6efa1e62f8c9566ee9b44558ed844652dfab47cb92561b3b24be33d21"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "7ec88a06d8fcdd19c0a828e1c9bf4a3978e78cf0fdca2e231805fbf3ca66bd24815157e550634a6e8b68e405cded20c4013c2809f4be6d98499db71d054c879ab35410c3c3168225de5644f47d61441c6498543650fa66947328a851240d1071d47f7137d75a4e33dcd6ffd8e7ddfcb2f9a8c21a4f79371ae10754735b"}]}, @NL80211_ATTR_IE={0x24, 0x2a, [@link_id={0x65, 0x12, {@random="a45990b35bdf", @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2b, 0x48}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x2, @void, @val="bef1d9ab818be5f33cf2143a617ea4c7"}}, @mic={0x8c, 0x18, {0x857, "b6108e8e9dd4", @long="9dc42b163d16f165275954fc272e5d4e"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5e, 0x2, "64d9da81ff35b15ab9a1678d1efcab6f7d6868240a692cc4d7139de215838e7c94a7a0956ed533c9736ad6378f287b9b74edbc9d25abb69e05e6aad7e9f3fb2b0d58193c297000801fcca388f9b5e14215cc26367966ec330b65"}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "f1b58f298235ee757a9e50fb56106d1403fcf9cc4c2b22bdcb7a51f45f753ec8ec9f86e30dfec95baf955482da36a5118801408da3d9552df8e0de574a5f1d147e8a562ed60b1cc5f65c94e2647f31e97d3b84c3a95e32d8e97eb521857dd218a05aef162584d092d737d66b8861673577dca7548050b55408409c1b179d3af75fdd0b0b55e5924d4ccab69724dcbc2787021eb29c7c57d7228c661245caac5754c39daa8a0072c37ce9d53a9deb99f90dafbd17a39fdf26302e1ee556a903846c5b"}]}, @NL80211_ATTR_BEACON_HEAD={0x2d9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xf8}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x1}}, 0x3, @default, 0x200, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x36, 0x1}, {0x24}, {0x9}, {0x3}, {0x1b, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x18}]}, @val={0x3, 0x1, 0x38}, @val={0x4, 0x6, {0x79, 0x0, 0xfff, 0x7}}, @void, @val={0x5, 0x8, {0x3, 0x53, 0x8a, "ff28a5fb2f"}}, @val={0x25, 0x3, {0x0, 0x3c, 0x3}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x20}}, @val={0x76, 0x6, {0xfb, 0x9, 0x2e}}, [{0xdd, 0x76, "70e45a6c61c9c4fcf0988a3c48a6343484538979f70dc1bcfc6eb982327d3332971b60d2f8865decb7d886f4fb7d59c29f4cf663bc322aef558059ea09f0449f163f984d9de65c5fe3d9ebe291f12955114e9f1df1446a7df7fa1e7b3e4b148dc2e0251f6f6ad316f9c197416ec040f8d92886f434ca"}, {0xdd, 0x24, "b19672fb898deafedb4c1a8c81aa575e974889e40914d4d40b2926452a18f100c254559e"}, {0xdd, 0x8b, "e59f3396e589e5a25ee99f849ed878a652ab2591757a21a7694a51dbfc3689b93d2506d30c11de88aba507ae1909bc43ebfc166c759b5f5208b94e838d13fe3e5af681cdaca8ad604379b958423e846c943f0ba83905399634883f0f07f2296e8d971ad2a1f8c3fe4685e826d4887a84a85b7e54791087dba09077b06d77c5198b2d560ee65290ea882fb9"}, {0xdd, 0x49, "c949fc388feb19bb51168821a184232c0cb14b865ac2627b8e72f45f31dd762f9bf0b2283c883718d7bf39c568f0af385780331bc7447689366f0ab55588108ecdad5f184304dcc6b4"}, {0xdd, 0xfc, "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"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfb]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x39}]}, 0x2130}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x4000) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9730}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000051) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r10 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) r11 = fsmount(r10, 0x1, 0x8) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) recvfrom$inet6(r11, &(0x7f0000000240)=""/238, 0xee, 0x40012101, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa2, 0x2a, [@chsw_timing={0x68, 0x4, {0x6}}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "6335ead9c4ca87f24550802a297418dc", "a6dd09f2dfa06a7a0f979d7caf94ae07ed153168cf2e3ad123afa5d5bcd6f4e2", "0847ea5e04d7de7e51cf835ddc097229ef5d9496faa714539953f62d5d3eb021"}}, @tim={0x5, 0x42, {0x7, 0x3e, 0x22, "df65888b30ed06d0e3fcf95c631f55676f3470a380665c63e813a97a84827262314d4f5ebc24f9cbc17137a95b4b70c70e684ad4da2934265090fc486b4818"}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x2}}, @NL80211_ATTR_IE={0x28, 0x2a, [@ibss={0x6, 0x2}, @mic={0x8c, 0x10, {0x658, "df5447618400", @short="f53846258ef68708"}}, @chsw_timing={0x68, 0x4, {0x6af, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3071.943005][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3071.970588][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3071.984206][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:59:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x7) 08:59:02 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1001000, 0x800}, 0x1c) 08:59:03 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x400c9206, &(0x7f0000000280)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000380)={0x0}) mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) [ 3072.186668][ T28] audit: type=1804 audit(1710233943.079:1426): pid=14616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6572/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 3072.254390][T14608] syz-executor.4 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=0 [ 3072.266395][T14608] CPU: 1 PID: 14608 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3072.276510][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3072.286617][T14608] Call Trace: [ 3072.289940][T14608] [ 3072.292898][T14608] dump_stack_lvl+0x1e7/0x2e0 [ 3072.297621][T14608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3072.302828][T14608] ? __pfx__printk+0x10/0x10 [ 3072.307414][T14608] ? ___ratelimit+0x4c4/0x670 [ 3072.312091][T14608] ? __pfx____ratelimit+0x10/0x10 [ 3072.317115][T14608] dump_header+0xda/0x6a0 [ 3072.321451][T14608] oom_kill_process+0x3a7/0x930 [ 3072.326303][T14608] out_of_memory+0xf67/0x1320 [ 3072.330989][T14608] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 3072.336887][T14608] ? __pfx___mutex_lock+0x10/0x10 [ 3072.341915][T14608] ? __pfx_out_of_memory+0x10/0x10 [ 3072.347036][T14608] mem_cgroup_out_of_memory+0x263/0x3b0 [ 3072.352585][T14608] ? __pfx_lock_release+0x10/0x10 [ 3072.357613][T14608] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 3072.363688][T14608] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3072.368885][T14608] ? mem_cgroup_iter+0x422/0x560 [ 3072.373819][T14608] try_charge_memcg+0xda2/0x18a0 [ 3072.378779][T14608] ? __pfx_try_charge_memcg+0x10/0x10 [ 3072.384156][T14608] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3072.389879][T14608] ? __pfx_lock_release+0x10/0x10 [ 3072.394909][T14608] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3072.400895][T14608] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 3072.406615][T14608] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 3072.412421][T14608] obj_cgroup_charge+0x389/0x630 [ 3072.417357][T14608] ? obj_cgroup_charge+0x121/0x630 [ 3072.422464][T14608] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 3072.427921][T14608] ? __kmalloc_node_track_caller+0xc1/0x4e0 [ 3072.433821][T14608] ? __pfx___might_resched+0x10/0x10 [ 3072.439111][T14608] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 3072.444927][T14608] __kmalloc_node_track_caller+0x310/0x4e0 [ 3072.450741][T14608] ? __addrconf_sysctl_register+0xb1/0x3f0 [ 3072.456556][T14608] kmemdup+0x2a/0x60 [ 3072.460449][T14608] __addrconf_sysctl_register+0xb1/0x3f0 [ 3072.466081][T14608] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 3072.472380][T14608] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 3072.478188][T14608] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 3072.484435][T14608] ? __raw_spin_lock_init+0x45/0x100 [ 3072.489723][T14608] addrconf_sysctl_register+0x167/0x1c0 [ 3072.495277][T14608] ipv6_add_dev+0xd64/0x1290 [ 3072.499879][T14608] addrconf_notify+0x6a7/0x1020 [ 3072.504734][T14608] notifier_call_chain+0x18f/0x3b0 [ 3072.509844][T14608] register_netdevice+0x151f/0x19c0 [ 3072.515056][T14608] ? __pfx_register_netdevice+0x10/0x10 [ 3072.520612][T14608] ? __pfx_snprintf+0x10/0x10 [ 3072.525297][T14608] ? __asan_memset+0x23/0x50 [ 3072.529889][T14608] veth_newlink+0x84f/0xcd0 [ 3072.534393][T14608] ? __pfx_veth_newlink+0x10/0x10 [ 3072.539437][T14608] ? __sock_sendmsg+0x221/0x270 [ 3072.544314][T14608] ? __sys_sendmsg+0x2b0/0x3a0 [ 3072.549093][T14608] ? do_syscall_64+0xf9/0x240 [ 3072.553775][T14608] ? entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3072.559894][T14608] ? alloc_netdev_mqs+0xbc3/0xf80 [ 3072.564911][T14608] ? validate_linkmsg+0x71e/0x900 [ 3072.569942][T14608] ? rtnl_create_link+0x91c/0xc20 [ 3072.574968][T14608] ? __pfx_veth_newlink+0x10/0x10 [ 3072.579993][T14608] rtnl_newlink+0x158f/0x20a0 [ 3072.584678][T14608] ? rtnl_newlink+0x461/0x20a0 [ 3072.589450][T14608] ? __pfx_rtnl_newlink+0x10/0x10 [ 3072.594470][T14608] ? do_raw_spin_unlock+0x13b/0x8b0 [ 3072.599695][T14608] ? __mutex_lock+0x9a4/0xd70 [ 3072.604413][T14608] ? __mutex_lock+0x526/0xd70 [ 3072.609153][T14608] ? __pfx_rtnl_newlink+0x10/0x10 [ 3072.614255][T14608] rtnetlink_rcv_msg+0x885/0x1040 [ 3072.619314][T14608] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3072.624525][T14608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3072.629997][T14608] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3072.635988][T14608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3072.642319][T14608] ? __local_bh_enable_ip+0x168/0x200 [ 3072.647699][T14608] ? lockdep_hardirqs_on+0x98/0x140 [ 3072.652904][T14608] ? __local_bh_enable_ip+0x168/0x200 [ 3072.658280][T14608] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3072.663386][T14608] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3072.669113][T14608] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3072.674309][T14608] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3072.679519][T14608] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3072.684634][T14608] ? ref_tracker_free+0x643/0x7e0 [ 3072.689746][T14608] netlink_rcv_skb+0x1e3/0x430 [ 3072.694511][T14608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3072.699975][T14608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3072.705278][T14608] ? netlink_deliver_tap+0x2e/0x1b0 [ 3072.710477][T14608] netlink_unicast+0x7ea/0x980 [ 3072.715248][T14608] ? __pfx_netlink_unicast+0x10/0x10 [ 3072.720530][T14608] ? __virt_addr_valid+0x44e/0x520 [ 3072.725641][T14608] ? __phys_addr_symbol+0x2f/0x70 [ 3072.730690][T14608] ? __check_object_size+0x4bb/0xa00 [ 3072.735999][T14608] ? bpf_lsm_netlink_send+0x9/0x10 [ 3072.741218][T14608] netlink_sendmsg+0xa3b/0xd70 [ 3072.746008][T14608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3072.751318][T14608] ? __import_iovec+0x536/0x820 [ 3072.756191][T14608] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3072.761493][T14608] ? security_socket_sendmsg+0x87/0xb0 [ 3072.766954][T14608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3072.772239][T14608] __sock_sendmsg+0x221/0x270 [ 3072.776924][T14608] ____sys_sendmsg+0x525/0x7d0 [ 3072.781692][T14608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3072.786987][T14608] __sys_sendmsg+0x2b0/0x3a0 [ 3072.791599][T14608] ? __pfx___sys_sendmsg+0x10/0x10 [ 3072.796750][T14608] ? restore_fpregs_from_fpstate+0x100/0x250 [ 3072.802752][T14608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3072.809109][T14608] ? do_syscall_64+0x108/0x240 [ 3072.814764][T14608] ? do_syscall_64+0xb4/0x240 [ 3072.819452][T14608] do_syscall_64+0xf9/0x240 [ 3072.823972][T14608] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3072.829871][T14608] RIP: 0033:0x7fee4d67dda9 [ 3072.834281][T14608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3072.853889][T14608] RSP: 002b:00007fee4e3710c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3072.862303][T14608] RAX: ffffffffffffffda RBX: 00007fee4d7abf80 RCX: 00007fee4d67dda9 [ 3072.870270][T14608] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 3072.878237][T14608] RBP: 00007fee4d6ca47a R08: 0000000000000000 R09: 0000000000000000 [ 3072.886203][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3072.894166][T14608] R13: 000000000000000b R14: 00007fee4d7abf80 R15: 00007fff28590ca8 [ 3072.902146][T14608] 08:59:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x48) [ 3072.948226][T14608] memory: usage 307200kB, limit 307200kB, failcnt 7805 [ 3072.979239][T14608] memory+swap: usage 308616kB, limit 9007199254740988kB, failcnt 0 08:59:03 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0}, 0x1c) [ 3073.005223][T14608] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 3073.027904][T14608] Memory cgroup stats for /syz4: [ 3073.028675][T14608] cache 4096 [ 3073.042158][T14608] rss 4096 [ 3073.045294][T14608] rss_huge 0 08:59:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3073.066673][T14608] shmem 0 [ 3073.073531][T14608] mapped_file 0 [ 3073.087600][T14608] dirty 0 [ 3073.095365][T14608] writeback 0 [ 3073.134775][T14608] workingset_refault_anon 2462 [ 3073.151290][T14608] workingset_refault_file 15 [ 3073.169399][T14608] swap 1449984 [ 3073.172957][T14608] swapcached 8192 [ 3073.181294][T14608] pgpgin 948523 [ 3073.184915][T14608] pgpgout 948519 [ 3073.201695][T14608] pgfault 1694187 [ 3073.205664][T14608] pgmajfault 2218 [ 3073.211828][T14608] inactive_anon 0 [ 3073.215624][T14608] active_anon 0 [ 3073.223766][T14608] inactive_file 4096 [ 3073.230201][T14608] active_file 4096 08:59:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3073.252818][T14608] unevictable 0 [ 3073.260042][T14608] hierarchical_memory_limit 314572800 [ 3073.265743][T14608] hierarchical_memsw_limit 9223372036854771712 [ 3073.272246][T14608] total_cache 4096 [ 3073.276205][T14608] total_rss 4096 [ 3073.279896][T14608] total_rss_huge 0 [ 3073.283762][T14608] total_shmem 0 [ 3073.292685][T14608] total_mapped_file 0 [ 3073.331943][T14608] total_dirty 0 [ 3073.340126][T14608] total_writeback 0 [ 3073.351476][T14608] total_workingset_refault_anon 2462 [ 3073.370940][T14608] total_workingset_refault_file 15 [ 3073.379875][T14608] total_swap 1449984 [ 3073.388462][T14608] total_swapcached 8192 [ 3073.398150][T14608] total_pgpgin 948523 [ 3073.407325][T14608] total_pgpgout 948519 [ 3073.417427][T14608] total_pgfault 1694187 [ 3073.426992][T14608] total_pgmajfault 2218 [ 3073.435800][T14608] total_inactive_anon 0 [ 3073.467896][T14608] total_active_anon 0 [ 3073.483544][T14608] total_inactive_file 4096 [ 3073.495108][T14608] total_active_file 4096 [ 3073.504837][T14608] total_unevictable 0 08:59:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3073.516990][T14608] anon_cost 19 [ 3073.524474][T14608] file_cost 1 [ 3073.546162][T14608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=5078,uid=0 [ 3073.569827][T14608] Memory cgroup out of memory: Killed process 5078 (syz-executor.4) total-vm:50536kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 08:59:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:04 executing program 0: getsockname$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @empty}, &(0x7f00000006c0)=0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x98, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x1) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000080)={'wg1\x00', @ifru_addrs=@generic={0x1e, "de307916e633189d963a6433a8b3"}}}) (async) r6 = socket(0x26, 0x1, 0xede2) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x480c6}, 0x800) 08:59:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x8) 08:59:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500b4ad000009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async) pwritev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000008c0)="a98b016aafdd4059ed2c4216f555a8a521997848e3541e52d3b6b93a4ec37542631b441555fcc8d3c353f8df78e4f63f540784501f7d8d3046511a08d82a118998b8707d7f0e529f3ba07e65f435ef0602a6b41a8119be7270a72ed0878590908d1309ed4002e0bd", 0x68}], 0x1, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00&\t\x00'/16], 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x5c, r1, 0xc10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048c10}, 0x84) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000002300)={0x2130, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x524, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x0, 0x1000, 0x100, 0x1, 0x1000, 0x2, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1000, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x3c5, 0x91, "16dc21e6425849bc7da522c9fac4bbd65ac53b252e98207fa27838a5a40fe2cd98ac597315d8dacf45615bd02db0b36ca6893c2ef2ed0fa249dec62f120fa01ad0e8f23e7b1a1f3b28b588f87870476d141d1466d7e0b031e2e54ffc261785c7adb30fa180671622977062efd6b5cec9d73eb3da507d417e540c7ccfd26d6dda39817f25598e2dea93a36911fd2c81a7b6aa5337715f8ee7a2c3a86490ba55e92dfe4905ef552932b995df2e71bbd83cc19630b3f54f14eae23e1f672c9ff5e3e92f3f4ad7d52172286907b81c6da03e70d0fe8af639dcb5ac1f1c38110391728ec00ff80864a9e9add26050551a2f5881afcefc28a557ce19d150a7c61fcf300923bd70c45de365e8cd0f85ad925929dcd2011bb204ca8066d8f19290082c06ab34ee6f4c7f291cc70dc05087a0020f3d5f79a75f408f4053fa010de33aa183ae9631342033881f58e668e1b522f67a8981da271ecf6181bf2937555338667fb439ab0aeee0dc3b4fe02ee27743be42eebe6b9c5b74eda36cc764e6a801723db2b06ae5b525597f5ca64a6b9e787ce65258c19b74e62f89276ec0c559b0d5cbcc881e8c84078215e9ad866a358f58c8b1a4514b4ad0bbec03a9fc3645bec4d592fe605c4846c9e5bbee329971d1ee9d9e4401dc3271e89ab2c54e56672ae1a4b49e507f78736191c6733326fa4c2aa2a6634795f4004c1c19366e5f529ef8dfb1eb9bd526b382be0f02ac1f194b2cf6fe2b0a35fda08ba5584e50292fbea5ec774603865b9b178af9b800c6c424d5c858615924a3b75f382527fffb1a589681f032b73a0334fefe71a559b1a9a3a143dac2f6a704dca1d1ac6b32caed8fa00c56ab671d80678cde27e1f231190f0fc044ef5fdaa30e5f7eb38786d3f2591057ef4731807435433305c79791975b6d18c7eede5cd3c5c7a35e23d55d7a3e924ccf44963cb69421573fb0663835a11deae9e1eff56d343864fb39aaad81bb57067cc146d1b261f2525c6598d3eb14879c1345d9b1d989c51df138be0507deab271e1d695b6b605b7c3d1cd64c82e9d2984f07d5c1de065b04556ed7c3e1503557a1f06837ea1d3205b1f864e01a2adab976e29e90243b9d65fd2e6ad9be0f2f16253e76e10a1f12b40e5f076c97cffd15bc76d1f9c03751c3a915f111ca55976489685a62894ca10c0b867755164ab01831be2edfe05a0318cfc14c20d178d4aa679733bb04e7428a9fbbf1df5d47b87ddf58c61a214ae8f3b71874833a4615bbf4335fab59cc2b268c74d80e73f4694db768ef90c10476962e07d57bcc38df1baef822ff905be42089c7048a7f71b91ccdaa6cb40c1715e0807605b9719b20d123"}, @NL80211_ATTR_IE_PROBE_RESP={0x127, 0x7f, [@peer_mgmt={0x75, 0x16, {0x1, 0x1f, @val=0x5b7, @void, @val="330921c43ca45c7e83c5fd7fdfb9de41"}}, @prep={0x83, 0x1f, {{}, 0x20, 0x1, @broadcast, 0x30a9, @void, 0x3, 0x5c, @broadcast, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x2, 0x3}}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0xb5, "73b1b30df54a6c22c81737dc3cec5df4f83ec7d0fd4e62d568ba4279e5c9f30f2a6103cd9355936318131b7ce1666cfe6ed2d672cd315b908d9ad9efe5209e023330c4e2de21b638d4e2acb7de38a80f0f6e1c4e580263b904504e8c70f3660a7659806fa3f2c5c002e73b88b87e1e6d7cbadea59f27dc322d908bbb91f11a207d0fc735c7ec1c99f63cc273a81ec9805b65c1836f8feb35c9240fccfd0d7b0198ed8df668d1d789d40a26b152e39c417619282ada"}, @challenge={0x10, 0x1, 0xda}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x1, 0x1fc4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x6, 0x4}}, @cf={0x4, 0x6, {0x9, 0x2, 0xc, 0xfe00}}, @challenge={0x10, 0x1, 0x75}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x9, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xae}, @NL80211_ATTR_CSA_IES={0x1ba8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x73, 0xf, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x37}, 0x4, 0x8, @device_b, 0xbef2, 0x101, 0x1f}}, @erp={0x2a, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x7c}, 0x20, 0x1, @device_a, 0xfffffc01, 0x0, 0xae}}, @challenge={0x10, 0x1, 0xd8}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x2, @broadcast, 0x91, @value, 0x9, 0x280, @device_b}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x6, 0x3, 0x8, 0x2ab]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd0, 0x7f, [@mesh_id={0x72, 0x6}, @perr={0x84, 0xc2, {0x4, 0xc, [{{}, @device_b, 0x400, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x200, @value=@broadcast, 0x5}, {{}, @device_b, 0x7, @void, 0x10}, {{}, @broadcast, 0x0, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x13}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x31}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x17}, {{0x0, 0x1}, @device_b, 0x9, @value, 0xb}, {{}, @device_b, 0x6, @void, 0x34}, {{}, @device_a, 0xfff, @void, 0x3d}, {{}, @broadcast, 0x40, @void, 0x36}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "491cc03a3e380d63f4d4069ae7c27ec406e74757d4270e58adeaa2fcd96f14239ad740a7fa7b33b67ffae5d7bc9462237fc379cc2597ec2a89f26cdb74fa22e10369e85409c324139469c9141626131c64ab2ad952c0d4ac8943944e729bfa868a3482bae69f96e9228b5257f70885dc68d249fa0f1e5b09ee12fd9afad2b2c51b2e7ada1b5520f053363fb1fe553b01150ea3e9aa5d08260554cc703110e740a542fb52c6bae921ab6d70bc32a893d271afe3bd84a35e08bcc9d3649612af7c1e7aa42a64b09efb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "d4085daaf71be5090e1e8bdfd62edcfede670c23cf4fd3719747703e6fc38f1a579e21567f0d7dbd16c3abdee43355733da47d884c2b5782255a5414c6b7af7411d66acb8224f0d2ec4f2c193dde2abdb3625ef1cd196b57efcb69bc82b1b2a9dfcb830cfc810fad09b565357bf098e8a1f4113cd41dd835acb883104c8e01e45ef1c2534234f29b9e6a87bb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "3bdff631ce99712505c924b2fc56ae909b6628705de510619703515a9f70207e229bcc325be674918214519d2e2d9ba8749cf8d903d2f28695f5d88e497bb8663b57523765a59f1cbf39055eefa91a3532ae15507f4aa8751d9a5201dc9d79dfdf7f3e53080a489bcbc229dca37687180fb8012f51c29d5e373264c90ba4f021d35b46d863a62b2d51e614605579855ca375f796638a29564ffafbff982582d0c5960285ef6424f3b7f968d348"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "8fe78c1edff0104563f1a0e11438aa11322b12dfd388914dae7e1c3100bafde2efacedb857754bc55ef12e221e9b41066dcefa863f12f1fff63b2482d830dcee482375bd75019fd187cc3af2c1e59659dd1bb51963706f03f58bf89a9d5a2582f30a3eae94c0dc0acbac7789640f954bff2cf24834e05a7d1d80365d4a071508a8a755085695ecfda6a7f252ae3cde650cf02ae60eeb411fb2e10a5064f07feca0a900a025a7f3bc"}]}, @NL80211_ATTR_PROBE_RESP={0x845, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x14a, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x6, 0x0, {0x3ff, 0xf20, 0x0, 0x62, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x7}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x8, @broadcast, 0x8000, @value, 0x7f, 0x1000, @broadcast, 0xfffffffb}}, @mesh_chsw={0x76, 0x6, {0x3, 0x80, 0x1, 0x7}}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x63, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x4ba, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x84, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @peer_mgmt={0x75, 0x18, {0x0, 0x913, @val=0x2, @val=0x7, @val="543add2b1c774a9a498d0f944787eef3"}}, @supported_rates={0x1, 0x8, [{0x24}, {0x1, 0x1}, {0x36}, {0x4}, {0x18, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x18, 0x1}]}, @preq={0x82, 0x1a, {{}, 0x1, 0x20, 0xe98, @broadcast, 0xfffff001, @void, 0x0, 0x7}}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x15, @device_a, 0x7, @value=@device_b, 0x7fff, 0x3, 0x1, [{{0x1}, @device_b, 0x9}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xc9, 0x6, 0x0, 0x8, 0x2, 0x0, 0x6]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x3d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x58, 0x3, "5b9b634f9e0ccf963ba846a572e79375a0511e78bac67e8ba1d721ee91e59e0b2197832902ee8d75a14ae656755701b447e5c15f440cefed5326dc898f8d6eaadc046c8913b8df3958207a086760a89879f9bb36"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "fc262ceb83056c739918593f6185f488f2cde47753434edba0be995150b7441e777abf72c1b90cbb0a80a1526dd2f7e5f7da1e9c745cebdc29c83bc30cfe2ebdf5e08f88fbbd77f4de2318ddef5fdd04990d63a5f6c2a155a8370edb5879ec59d1b7d3e7c4a2f2d5fe41211d11a52545a721d77300c7e0583c64db1fa270c21160acf6252aa97ff0fe210d3abe6132d8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "9d23746e064355f23f67a33c4993d207a1cfcc72d62191bf469bddb82a389153390c572a1af236ee4ef3c53462f10fa1557a90aa98a88e0c20dc293aea99511cd5122be9df47e035d29247e3ba32dc014a9376126c1452af8c7fd7ae8a42a9a1c0fdd35625d8ae742b02140bc18354fd7d6d8b65f63e1dfbd620901b31e96d45ad"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc5, 0x3, "e72db745cfbf21637384b8277661c8b160cdd3b484cd38a8c70cb86bf2491f4116f1b902f84271e66068d3a64f71a4af602be2ea4b097ec0cd0588c8584800af1211b30c43d06767ea1e5a93e654a5ef5487ef829614ac55fd04e64a3e579f5b38c1cf3b9f3b461374302f273e3702681abd2e7f12f7dfecc30a3f8ec744694449c71c9fbce2b619c044ebb4f83c969b470e9002ddbfce849e91d3a61d169680a9fac55819959f0e4208f1b2b9a2f46ae953d0c3003609325be51b1466eb13a39c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xfc, 0x2, "1ef5285e56a62fda620b202146c8271e53fc293d16614ef2cfdf9e2dffccda36f95368f3089f050f8ff92cab70786a7772a6416ff9f477fc13478eb1d480de21594eafd21d60bc94ff7480919925f42f8d3599515f85b1272972b1f99eeee73ec551fcc98e7c1016556053fdf1280917378c842d409fa02297a986a39a0480f1bb24aab5c5bf192c37a45c3372fe6a4109d56662b90f66ec90c571531db8aa5a3cafa2ff5059f76301430196d7b20e0e9af39c64b8e962a7a533c8224d60290262d978ba16ed23c3d3950f88a1df47d6c5847176738f15c73a283ba6efa1e62f8c9566ee9b44558ed844652dfab47cb92561b3b24be33d21"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "7ec88a06d8fcdd19c0a828e1c9bf4a3978e78cf0fdca2e231805fbf3ca66bd24815157e550634a6e8b68e405cded20c4013c2809f4be6d98499db71d054c879ab35410c3c3168225de5644f47d61441c6498543650fa66947328a851240d1071d47f7137d75a4e33dcd6ffd8e7ddfcb2f9a8c21a4f79371ae10754735b"}]}, @NL80211_ATTR_IE={0x24, 0x2a, [@link_id={0x65, 0x12, {@random="a45990b35bdf", @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2b, 0x48}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x2, @void, @val="bef1d9ab818be5f33cf2143a617ea4c7"}}, @mic={0x8c, 0x18, {0x857, "b6108e8e9dd4", @long="9dc42b163d16f165275954fc272e5d4e"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5e, 0x2, "64d9da81ff35b15ab9a1678d1efcab6f7d6868240a692cc4d7139de215838e7c94a7a0956ed533c9736ad6378f287b9b74edbc9d25abb69e05e6aad7e9f3fb2b0d58193c297000801fcca388f9b5e14215cc26367966ec330b65"}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "f1b58f298235ee757a9e50fb56106d1403fcf9cc4c2b22bdcb7a51f45f753ec8ec9f86e30dfec95baf955482da36a5118801408da3d9552df8e0de574a5f1d147e8a562ed60b1cc5f65c94e2647f31e97d3b84c3a95e32d8e97eb521857dd218a05aef162584d092d737d66b8861673577dca7548050b55408409c1b179d3af75fdd0b0b55e5924d4ccab69724dcbc2787021eb29c7c57d7228c661245caac5754c39daa8a0072c37ce9d53a9deb99f90dafbd17a39fdf26302e1ee556a903846c5b"}]}, @NL80211_ATTR_BEACON_HEAD={0x2d9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xf8}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x1}}, 0x3, @default, 0x200, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x36, 0x1}, {0x24}, {0x9}, {0x3}, {0x1b, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x18}]}, @val={0x3, 0x1, 0x38}, @val={0x4, 0x6, {0x79, 0x0, 0xfff, 0x7}}, @void, @val={0x5, 0x8, {0x3, 0x53, 0x8a, "ff28a5fb2f"}}, @val={0x25, 0x3, {0x0, 0x3c, 0x3}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x20}}, @val={0x76, 0x6, {0xfb, 0x9, 0x2e}}, [{0xdd, 0x76, "70e45a6c61c9c4fcf0988a3c48a6343484538979f70dc1bcfc6eb982327d3332971b60d2f8865decb7d886f4fb7d59c29f4cf663bc322aef558059ea09f0449f163f984d9de65c5fe3d9ebe291f12955114e9f1df1446a7df7fa1e7b3e4b148dc2e0251f6f6ad316f9c197416ec040f8d92886f434ca"}, {0xdd, 0x24, "b19672fb898deafedb4c1a8c81aa575e974889e40914d4d40b2926452a18f100c254559e"}, {0xdd, 0x8b, "e59f3396e589e5a25ee99f849ed878a652ab2591757a21a7694a51dbfc3689b93d2506d30c11de88aba507ae1909bc43ebfc166c759b5f5208b94e838d13fe3e5af681cdaca8ad604379b958423e846c943f0ba83905399634883f0f07f2296e8d971ad2a1f8c3fe4685e826d4887a84a85b7e54791087dba09077b06d77c5198b2d560ee65290ea882fb9"}, {0xdd, 0x49, "c949fc388feb19bb51168821a184232c0cb14b865ac2627b8e72f45f31dd762f9bf0b2283c883718d7bf39c568f0af385780331bc7447689366f0ab55588108ecdad5f184304dcc6b4"}, {0xdd, 0xfc, "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"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfb]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x39}]}, 0x2130}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x4000) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9730}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000051) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) r11 = fsmount(r10, 0x1, 0x8) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) recvfrom$inet6(r11, &(0x7f0000000240)=""/238, 0xee, 0x40012101, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa2, 0x2a, [@chsw_timing={0x68, 0x4, {0x6}}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "6335ead9c4ca87f24550802a297418dc", "a6dd09f2dfa06a7a0f979d7caf94ae07ed153168cf2e3ad123afa5d5bcd6f4e2", "0847ea5e04d7de7e51cf835ddc097229ef5d9496faa714539953f62d5d3eb021"}}, @tim={0x5, 0x42, {0x7, 0x3e, 0x22, "df65888b30ed06d0e3fcf95c631f55676f3470a380665c63e813a97a84827262314d4f5ebc24f9cbc17137a95b4b70c70e684ad4da2934265090fc486b4818"}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x2}}, @NL80211_ATTR_IE={0x28, 0x2a, [@ibss={0x6, 0x2}, @mic={0x8c, 0x10, {0x658, "df5447618400", @short="f53846258ef68708"}}, @chsw_timing={0x68, 0x4, {0x6af, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100620500000065"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:59:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 08:59:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500b4ad000009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f00000008c0)="a98b016aafdd4059ed2c4216f555a8a521997848e3541e52d3b6b93a4ec37542631b441555fcc8d3c353f8df78e4f63f540784501f7d8d3046511a08d82a118998b8707d7f0e529f3ba07e65f435ef0602a6b41a8119be7270a72ed0878590908d1309ed4002e0bd", 0x68}], 0x1, 0x8, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00&\t\x00'/16], 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x5c, r1, 0xc10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048c10}, 0x84) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000002300)={0x2130, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x524, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x0, 0x1000, 0x100, 0x1, 0x1000, 0x2, 0x5, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1000, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x3c5, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x127, 0x7f, [@peer_mgmt={0x75, 0x16, {0x1, 0x1f, @val=0x5b7, @void, @val="330921c43ca45c7e83c5fd7fdfb9de41"}}, @prep={0x83, 0x1f, {{}, 0x20, 0x1, @broadcast, 0x30a9, @void, 0x3, 0x5c, @broadcast, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x2, 0x3}}, @sec_chan_ofs={0x3e, 0x1}, @random_vendor={0xdd, 0xb5, "73b1b30df54a6c22c81737dc3cec5df4f83ec7d0fd4e62d568ba4279e5c9f30f2a6103cd9355936318131b7ce1666cfe6ed2d672cd315b908d9ad9efe5209e023330c4e2de21b638d4e2acb7de38a80f0f6e1c4e580263b904504e8c70f3660a7659806fa3f2c5c002e73b88b87e1e6d7cbadea59f27dc322d908bbb91f11a207d0fc735c7ec1c99f63cc273a81ec9805b65c1836f8feb35c9240fccfd0d7b0198ed8df668d1d789d40a26b152e39c417619282ada"}, @challenge={0x10, 0x1, 0xda}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x1, 0x0, {0x1, 0x1fc4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x6, 0x4}}, @cf={0x4, 0x6, {0x9, 0x2, 0xc, 0xfe00}}, @challenge={0x10, 0x1, 0x75}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x9, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xae}, @NL80211_ATTR_CSA_IES={0x1ba8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x73, 0xf, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x37}, 0x4, 0x8, @device_b, 0xbef2, 0x101, 0x1f}}, @erp={0x2a, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x7c}, 0x20, 0x1, @device_a, 0xfffffc01, 0x0, 0xae}}, @challenge={0x10, 0x1, 0xd8}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x2, @broadcast, 0x91, @value, 0x9, 0x280, @device_b}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x6, 0x3, 0x8, 0x2ab]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd0, 0x7f, [@mesh_id={0x72, 0x6}, @perr={0x84, 0xc2, {0x4, 0xc, [{{}, @device_b, 0x400, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x42}, {{0x0, 0x1}, @broadcast, 0x200, @value=@broadcast, 0x5}, {{}, @device_b, 0x7, @void, 0x10}, {{}, @broadcast, 0x0, @void, 0x5}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0x13}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x31}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x17}, {{0x0, 0x1}, @device_b, 0x9, @value, 0xb}, {{}, @device_b, 0x6, @void, 0x34}, {{}, @device_a, 0xfff, @void, 0x3d}, {{}, @broadcast, 0x40, @void, 0x36}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "491cc03a3e380d63f4d4069ae7c27ec406e74757d4270e58adeaa2fcd96f14239ad740a7fa7b33b67ffae5d7bc9462237fc379cc2597ec2a89f26cdb74fa22e10369e85409c324139469c9141626131c64ab2ad952c0d4ac8943944e729bfa868a3482bae69f96e9228b5257f70885dc68d249fa0f1e5b09ee12fd9afad2b2c51b2e7ada1b5520f053363fb1fe553b01150ea3e9aa5d08260554cc703110e740a542fb52c6bae921ab6d70bc32a893d271afe3bd84a35e08bcc9d3649612af7c1e7aa42a64b09efb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x90, 0x3, "d4085daaf71be5090e1e8bdfd62edcfede670c23cf4fd3719747703e6fc38f1a579e21567f0d7dbd16c3abdee43355733da47d884c2b5782255a5414c6b7af7411d66acb8224f0d2ec4f2c193dde2abdb3625ef1cd196b57efcb69bc82b1b2a9dfcb830cfc810fad09b565357bf098e8a1f4113cd41dd835acb883104c8e01e45ef1c2534234f29b9e6a87bb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "3bdff631ce99712505c924b2fc56ae909b6628705de510619703515a9f70207e229bcc325be674918214519d2e2d9ba8749cf8d903d2f28695f5d88e497bb8663b57523765a59f1cbf39055eefa91a3532ae15507f4aa8751d9a5201dc9d79dfdf7f3e53080a489bcbc229dca37687180fb8012f51c29d5e373264c90ba4f021d35b46d863a62b2d51e614605579855ca375f796638a29564ffafbff982582d0c5960285ef6424f3b7f968d348"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xac, 0x3, "8fe78c1edff0104563f1a0e11438aa11322b12dfd388914dae7e1c3100bafde2efacedb857754bc55ef12e221e9b41066dcefa863f12f1fff63b2482d830dcee482375bd75019fd187cc3af2c1e59659dd1bb51963706f03f58bf89a9d5a2582f30a3eae94c0dc0acbac7789640f954bff2cf24834e05a7d1d80365d4a071508a8a755085695ecfda6a7f252ae3cde650cf02ae60eeb411fb2e10a5064f07feca0a900a025a7f3bc"}]}, @NL80211_ATTR_PROBE_RESP={0x845, 0x91, "88d084ddefe44c10faf882cef27dd94edbbd0db7fa3c03f8f997786c45f7b32ea6fd9e7445d54e7469ac16262828b709738d6bd394e166261063a70710e6b4c80c1efbc8ffdeb9833c838b8c8f69661b0113a011319e9237f87dd5d8cd7e9f22120657936928f3f0c6a93ebe30c5f73b39306ab35fc029ad5d833d238a4cb56043342896e50e547849cd43751b4f832be5bd311df624546a79c8ff617d0746ca49cf118ac75780fcdd105c8d68bb4ab00705467dae4d2eb23e5af88e273fed4bfa091750438ebc758c430c710c175aac36a7ae695b4b1506222b6f86dc32e0de540d8b66e27afe8a05e314027f1258a88e946eca88f8f03e26b78b44e7b0bb3a1b26a6eecba5b816f41fdb6a802d5e5258e967882e4a83bd30781b1d9a25d8bfc36d3f2209976a3193a10c14651ffa85202d93934cd41fc92cd0e76d785f8d5da9904ca5d9f3d110414595561c6166fe71813b961b00ba56fd1b630bcbe37271639ddf623b0d4109bf118d8ddafdcf62c0713e89f8333497e0e77d9a0508299d67678250c7c015a333b927b31b20b0408a9a842392e5a779fb1993d977a03ee84fd8742b86ca6d33447c5bd2090cefd2e828c022d02a4820ddf249079f9be65c8fdb8dd7ca5ccb4ae43e15f57017ebda03517f6315a180eb97aadf4e7779e6543275b99f6852863988fb5b4b752456559bca0e2b376946387dc7c9ab5c5d2d0ec2f205ddce7e84e8d9c311b1c7dabbf9e8afe683f9975230a0582f70b67f59509b8dcac2054bcbba1b7a7f312643cc2dc819022c1faf3e5d8342deea7a720f246c2f18d5b3ffb52a1991c0675919098efdcf373f619a386050469d535789a9eecef55e2b7a6811b44f80e95588a5314e2f7154d99f3e063ba0377ed3858d2c76605ee5835e46a79e43f60ea5c2bd129d2bd33a16322ee72506dac13899cfe9bc5e856383014b69e3fd87a62243debc3ffbf0eaa6c9180165b019552851a92f02d83fbc294ac31b0ec91bb17acd96d7208df98fed97f30a28ce2262a04226782e0f2ce865726a1ac9b8db20fb9dfba5cb126492b0c4bdbc0001875cd852bbee9f24ad54d682b8662449d9543166a60d3513086fb32afc31c243d15139f0b525b50300002911b50cde73acca3b88112c8ff749f6250d1a52ede68a015c630621203b547fe4a61e3a444098445efcd31a9eb9daf9a1cea33ddbe1a5d6a717145324b5a4be03e51ab02c7f2bb11e80b5db02d8367d8d76fe25412d6b9e847a6064f5bb6f945d700a6f99dcac4be3f27f134ca4f3f231587e10d36e2b648704501abc2d77781409043e296b9b30de99ffce5a3d9a1b7e83bca266ff60927205b5501fdcdb5225b40b22c0773da72f25200bef7317c9b45c7f5bfbf546b5b783f6343e870f4a57adad963de2f5d57dc1f26602c9934f7a4a19e415e34bb5989cdbe3f4a4878f187a32f0007c5c5a66e5418ed7c8e5cf2501cad9431793e1f4cd4d029c10a1df3910f647150159c7c250db902807836316cb91a1a38953fb41b56e655e04b1e95f789353dbe841d57780ba5bbdeb4a7fb74eed56b70b0943a0bb29e1dc91beb7c71f528b169ff3569d81d20e3bd49b27b79a384a5185ae9c679dda05778fa2f883d841b941bcad9cc4c7468e2c0ebd9bb40daf67f2dbbb97c65502a47f7bbcc9a5300ea82a642e92bda00edf188b65b7daae41648f6f09ee876743ee9d509cc596e69570f1e6e8b51a1737037f9131b4f263ba46c3f8f5102cbd52976b4e589a27fb031d9ff203ec787496935f11c2257d8594d39c18a32e6e4dabafc4872c1650c5b3fde19d8a6ef876581bdfe48e2e58317b98a11ad185ac0f15446717840f1ae81cd9a35ec80dae8ba46d8f96a08f772d1b1f153863f90ae8c90a9f54efe8d581e55b5a7fa94e983c5a3a78c29761ae1c35945562451a28326f59806a3f200270b4129f91603baa46c85ef5e40072e2c35014cfe8f02d4652a788113bd5c5386da616befd4fea2578c96afdc086c8059d2b2f9fcbbe0900cae867c9818ea241d247f3a78a1f19939970a15e5a755d97486eea89cf3ad6aad2f43294bc49699df45f6ee4ba20276f3d4345c6d3ce293b940cd69e5d846c307b7c2cbfee258f24fdd354237044d903acd09e3b5f418af3a60cd78ccb578bf1c88f52c1d78ad62f81c4be3e384881c76e1c05ec5fa3aa9a0c681afc4230fc73aec778f8ba37b4e263543c0fdec101abcd1b04b77ee0396b9a4418ceea148090a4bfe2f49fe0f73c25c358010b0de0bbfc4ecbd332a36932ef65fb3fa53441ea74204fdeff51b0dce00d3510b1bdab006ac14622663a6421cc49f72a32725408f749646f96c43a83d90b661628b0b27e21e3cf8f949feb90ca0e4aa011f9919f94de286faeaae54099f10618e1a0358aba26a553140145f02f28ffffb1cebfd4bc7a4c321d113c7ce9d485897d26d8577de02f0730e40003d53fb0f4935788c54943bad569cb51027d4d4d934bf949347709a93a7c8ada9dd464c52fde070a2f06514f1af829e6bb014e363cba5e152bffa7a7dd278f648471e6532d4727d0e90a5cb956892439912f7d5a00e4f74b14aab246092a6e2a179daa173404efeebefd648753101908356fb7e40bd2d68df427381ff4b6c55d7cd1f86070a4397c2e66ac1353ff49f42fe6ec4799c9132cb8438fff336d2daae25778ae50e2376abb15ae285da775544d3ea5ec56f34021dfac64d9fa0f253c679ef9219e7921ba9a472c82247f7d756c762668c9496091cdface56eb06105801752d46695dfbc868f914a610923403b6a542c8905fec78069c1b6f31338ff400cdfea36e79aa6c2bfe05f26bdcf51c6daaecfdae437d7c008fb3407b5b32d1ef2daced185155fa131cdfd32ac81fccace5c70c504ef79aa49fa7afa99055c02f2aebd805779008e71f323c6427902c59e3dfca0d4e6e960d2c50238c25b260ce9e061bb7855127c690d671352f"}, @NL80211_ATTR_PROBE_RESP={0x14a, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x1, 0x6, 0x0, {0x3ff, 0xf20, 0x0, 0x62, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x7}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x44, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x8, @broadcast, 0x8000, @value, 0x7f, 0x1000, @broadcast, 0xfffffffb}}, @mesh_chsw={0x76, 0x6, {0x3, 0x80, 0x1, 0x7}}, @channel_switch={0x25, 0x3, {0x0, 0x99, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x63, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x4ba, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x84, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1}}, @peer_mgmt={0x75, 0x18, {0x0, 0x913, @val=0x2, @val=0x7, @val="543add2b1c774a9a498d0f944787eef3"}}, @supported_rates={0x1, 0x8, [{0x24}, {0x1, 0x1}, {0x36}, {0x4}, {0x18, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x18, 0x1}]}, @preq={0x82, 0x1a, {{}, 0x1, 0x20, 0xe98, @broadcast, 0xfffff001, @void, 0x0, 0x7}}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x15, @device_a, 0x7, @value=@device_b, 0x7fff, 0x3, 0x1, [{{0x1}, @device_b, 0x9}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xc9, 0x6, 0x0, 0x8, 0x2, 0x0, 0x6]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x3d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x58, 0x3, "5b9b634f9e0ccf963ba846a572e79375a0511e78bac67e8ba1d721ee91e59e0b2197832902ee8d75a14ae656755701b447e5c15f440cefed5326dc898f8d6eaadc046c8913b8df3958207a086760a89879f9bb36"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "fc262ceb83056c739918593f6185f488f2cde47753434edba0be995150b7441e777abf72c1b90cbb0a80a1526dd2f7e5f7da1e9c745cebdc29c83bc30cfe2ebdf5e08f88fbbd77f4de2318ddef5fdd04990d63a5f6c2a155a8370edb5879ec59d1b7d3e7c4a2f2d5fe41211d11a52545a721d77300c7e0583c64db1fa270c21160acf6252aa97ff0fe210d3abe6132d8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "9d23746e064355f23f67a33c4993d207a1cfcc72d62191bf469bddb82a389153390c572a1af236ee4ef3c53462f10fa1557a90aa98a88e0c20dc293aea99511cd5122be9df47e035d29247e3ba32dc014a9376126c1452af8c7fd7ae8a42a9a1c0fdd35625d8ae742b02140bc18354fd7d6d8b65f63e1dfbd620901b31e96d45ad"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc5, 0x3, "e72db745cfbf21637384b8277661c8b160cdd3b484cd38a8c70cb86bf2491f4116f1b902f84271e66068d3a64f71a4af602be2ea4b097ec0cd0588c8584800af1211b30c43d06767ea1e5a93e654a5ef5487ef829614ac55fd04e64a3e579f5b38c1cf3b9f3b461374302f273e3702681abd2e7f12f7dfecc30a3f8ec744694449c71c9fbce2b619c044ebb4f83c969b470e9002ddbfce849e91d3a61d169680a9fac55819959f0e4208f1b2b9a2f46ae953d0c3003609325be51b1466eb13a39c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xfc, 0x2, "1ef5285e56a62fda620b202146c8271e53fc293d16614ef2cfdf9e2dffccda36f95368f3089f050f8ff92cab70786a7772a6416ff9f477fc13478eb1d480de21594eafd21d60bc94ff7480919925f42f8d3599515f85b1272972b1f99eeee73ec551fcc98e7c1016556053fdf1280917378c842d409fa02297a986a39a0480f1bb24aab5c5bf192c37a45c3372fe6a4109d56662b90f66ec90c571531db8aa5a3cafa2ff5059f76301430196d7b20e0e9af39c64b8e962a7a533c8224d60290262d978ba16ed23c3d3950f88a1df47d6c5847176738f15c73a283ba6efa1e62f8c9566ee9b44558ed844652dfab47cb92561b3b24be33d21"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "7ec88a06d8fcdd19c0a828e1c9bf4a3978e78cf0fdca2e231805fbf3ca66bd24815157e550634a6e8b68e405cded20c4013c2809f4be6d98499db71d054c879ab35410c3c3168225de5644f47d61441c6498543650fa66947328a851240d1071d47f7137d75a4e33dcd6ffd8e7ddfcb2f9a8c21a4f79371ae10754735b"}]}, @NL80211_ATTR_IE={0x24, 0x2a, [@link_id={0x65, 0x12, {@random="a45990b35bdf", @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2b, 0x48}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x36, 0xf, [@peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x2, @void, @val="bef1d9ab818be5f33cf2143a617ea4c7"}}, @mic={0x8c, 0x18, {0x857, "b6108e8e9dd4", @long="9dc42b163d16f165275954fc272e5d4e"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5e, 0x2, "64d9da81ff35b15ab9a1678d1efcab6f7d6868240a692cc4d7139de215838e7c94a7a0956ed533c9736ad6378f287b9b74edbc9d25abb69e05e6aad7e9f3fb2b0d58193c297000801fcca388f9b5e14215cc26367966ec330b65"}, @NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "f1b58f298235ee757a9e50fb56106d1403fcf9cc4c2b22bdcb7a51f45f753ec8ec9f86e30dfec95baf955482da36a5118801408da3d9552df8e0de574a5f1d147e8a562ed60b1cc5f65c94e2647f31e97d3b84c3a95e32d8e97eb521857dd218a05aef162584d092d737d66b8861673577dca7548050b55408409c1b179d3af75fdd0b0b55e5924d4ccab69724dcbc2787021eb29c7c57d7228c661245caac5754c39daa8a0072c37ce9d53a9deb99f90dafbd17a39fdf26302e1ee556a903846c5b"}]}, @NL80211_ATTR_BEACON_HEAD={0x2d9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xf8}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x1}}, 0x3, @default, 0x200, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x36, 0x1}, {0x24}, {0x9}, {0x3}, {0x1b, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x18}]}, @val={0x3, 0x1, 0x38}, @val={0x4, 0x6, {0x79, 0x0, 0xfff, 0x7}}, @void, @val={0x5, 0x8, {0x3, 0x53, 0x8a, "ff28a5fb2f"}}, @val={0x25, 0x3, {0x0, 0x3c, 0x3}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x20}}, @val={0x76, 0x6, {0xfb, 0x9, 0x2e}}, [{0xdd, 0x76, "70e45a6c61c9c4fcf0988a3c48a6343484538979f70dc1bcfc6eb982327d3332971b60d2f8865decb7d886f4fb7d59c29f4cf663bc322aef558059ea09f0449f163f984d9de65c5fe3d9ebe291f12955114e9f1df1446a7df7fa1e7b3e4b148dc2e0251f6f6ad316f9c197416ec040f8d92886f434ca"}, {0xdd, 0x24, "b19672fb898deafedb4c1a8c81aa575e974889e40914d4d40b2926452a18f100c254559e"}, {0xdd, 0x8b, "e59f3396e589e5a25ee99f849ed878a652ab2591757a21a7694a51dbfc3689b93d2506d30c11de88aba507ae1909bc43ebfc166c759b5f5208b94e838d13fe3e5af681cdaca8ad604379b958423e846c943f0ba83905399634883f0f07f2296e8d971ad2a1f8c3fe4685e826d4887a84a85b7e54791087dba09077b06d77c5198b2d560ee65290ea882fb9"}, {0xdd, 0x49, "c949fc388feb19bb51168821a184232c0cb14b865ac2627b8e72f45f31dd762f9bf0b2283c883718d7bf39c568f0af385780331bc7447689366f0ab55588108ecdad5f184304dcc6b4"}, {0xdd, 0xfc, "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"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfb]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x39}]}, 0x2130}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x4000) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9730}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000051) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) r10 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) r11 = fsmount(r10, 0x1, 0x8) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) recvfrom$inet6(r11, &(0x7f0000000240)=""/238, 0xee, 0x40012101, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa2, 0x2a, [@chsw_timing={0x68, 0x4, {0x6}}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "6335ead9c4ca87f24550802a297418dc", "a6dd09f2dfa06a7a0f979d7caf94ae07ed153168cf2e3ad123afa5d5bcd6f4e2", "0847ea5e04d7de7e51cf835ddc097229ef5d9496faa714539953f62d5d3eb021"}}, @tim={0x5, 0x42, {0x7, 0x3e, 0x22, "df65888b30ed06d0e3fcf95c631f55676f3470a380665c63e813a97a84827262314d4f5ebc24f9cbc17137a95b4b70c70e684ad4da2934265090fc486b4818"}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xd, 0x2}}, @NL80211_ATTR_IE={0x28, 0x2a, [@ibss={0x6, 0x2}, @mic={0x8c, 0x10, {0x658, "df5447618400", @short="f53846258ef68708"}}, @chsw_timing={0x68, 0x4, {0x6af, 0x2}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r13, r12, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x9) 08:59:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3074.227151][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:59:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100620500000065"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:59:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400e2007de2718a16b3e1f1f14d9b38368f6dbb771ae01c82e9efeb04a210f312c2d05d64007560caa30d9509b7cceede56e28ea0c07d52f66c3c31f436c1", @ANYRES16=r1, @ANYBLOB="150000000000100000000600000008000300b7fa21bcb90fc949a733b563ec2d18604b375aa9f4677787d364b229ec7796c191a9ae09acf6d7faba01509c065478decb7f4c25647e53e817ccfa7a29c460e3ef6fada776e27f9df14fcecb5e262612a66982873fb3d993e72e5b257f388d5907f55f09c4a316f4f7481a762a19b2ca777f1942b44509", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x15c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe8e}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x92e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xba2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x8}) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 08:59:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0xa) [ 3074.569073][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3074.587623][ T28] audit: type=1804 audit(1710233945.479:1427): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6575/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 08:59:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100620500000065"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100620500000065"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) [ 3074.813585][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:59:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3075.065865][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3075.141669][T14694] __nla_validate_parse: 11 callbacks suppressed [ 3075.141686][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3075.180420][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3075.209555][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:59:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0xb) 08:59:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x4}, 0x8915}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000002c00270dfcff0000000000000000004c5e3d1200", @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:59:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400e2007de2718a16b3e1f1f14d9b38368f6dbb771ae01c82e9efeb04a210f312c2d05d64007560caa30d9509b7cceede56e28ea0c07d52f66c3c31f436c1", @ANYRES16=r1, @ANYBLOB="150000000000100000000600000008000300b7fa21bcb90fc949a733b563ec2d18604b375aa9f4677787d364b229ec7796c191a9ae09acf6d7faba01509c065478decb7f4c25647e53e817ccfa7a29c460e3ef6fada776e27f9df14fcecb5e262612a66982873fb3d993e72e5b257f388d5907f55f09c4a316f4f7481a762a19b2ca777f1942b44509", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x15c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe8e}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x92e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xba2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x8}) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400e2007de2718a16b3e1f1f14d9b38368f6dbb771ae01c82e9efeb04a210f312c2d05d64007560caa30d9509b7cceede56e28ea0c07d52f66c3c31f436c1", @ANYRES16=r1, @ANYBLOB="150000000000100000000600000008000300b7fa21bcb90fc949a733b563ec2d18604b375aa9f4677787d364b229ec7796c191a9ae09acf6d7faba01509c065478decb7f4c25647e53e817ccfa7a29c460e3ef6fada776e27f9df14fcecb5e262612a66982873fb3d993e72e5b257f388d5907f55f09c4a316f4f7481a762a19b2ca777f1942b44509", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x15c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe8e}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x92e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xba2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x8}) (async) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r10, r9, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) [ 3075.438525][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3075.643898][T14716] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 08:59:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3075.670952][ T28] audit: type=1804 audit(1710233946.569:1428): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6576/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 3075.718866][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3075.733945][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:59:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0xc) 08:59:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) (async) r1 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x4}, 0x8915}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000002c00270dfcff0000000000000000004c5e3d1200", @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) 08:59:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400e2007de2718a16b3e1f1f14d9b38368f6dbb771ae01c82e9efeb04a210f312c2d05d64007560caa30d9509b7cceede56e28ea0c07d52f66c3c31f436c1", @ANYRES16=r1, @ANYBLOB="150000000000100000000600000008000300b7fa21bcb90fc949a733b563ec2d18604b375aa9f4677787d364b229ec7796c191a9ae09acf6d7faba01509c065478decb7f4c25647e53e817ccfa7a29c460e3ef6fada776e27f9df14fcecb5e262612a66982873fb3d993e72e5b257f388d5907f55f09c4a316f4f7481a762a19b2ca777f1942b44509", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x15c, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe8e}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x92e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xba2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x8}) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2, 0x8}) write$binfmt_script(r8, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r10, r9, 0x0, 0x10000a014) (async) sendfile(r10, r9, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3076.002665][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:59:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:07 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3076.247209][ T28] audit: type=1804 audit(1710233947.149:1429): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6577/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 08:59:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'bond_slave_0\x00', {0x4}, 0x8915}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000002c00270dfcff0000000000000000004c5e3d1200", @ANYRES32=r4, @ANYBLOB="00000000000000000d00000009000100666c6f77000000003400020030000b8008000100070000002400028003000000000009000000000008000100000000000b000200706f6c6963790000"], 0x64}}, 0x0) [ 3076.305063][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3076.324916][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:59:07 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0xf) 08:59:07 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) 08:59:07 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) (async) 08:59:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x10) 08:59:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) 08:59:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = getpid() r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x5c, 0x58, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8410) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:59:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x11) 08:59:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3077.960168][ T28] audit: type=1804 audit(1710233948.859:1430): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6578/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 08:59:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x14) 08:59:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getpid() (async) r4 = getpid() r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/cgroup\x00') (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x5c, 0x58, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8410) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) 08:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3078.484889][ T28] audit: type=1804 audit(1710233949.379:1431): pid=14822 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6579/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 08:59:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 08:59:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = getpid() r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/cgroup\x00') sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x5c, 0x58, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8410) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getpid() (async) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/cgroup\x00') (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWNSID={0x5c, 0x58, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8410) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) 08:59:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x15) 08:59:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 3078.969188][ T28] audit: type=1804 audit(1710233949.869:1432): pid=14840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6580/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 08:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x60) 08:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d0, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x49ff4c864b6458b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x1d0}}, 0x0) [ 3079.441609][ T28] audit: type=1804 audit(1710233950.339:1433): pid=14864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6581/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 08:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x73) 08:59:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) (rerun: 32) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8}, 0x18) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d0, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x49ff4c864b6458b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x1d0}}, 0x0) 08:59:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) 08:59:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r9, r8, 0x0, 0x10000a014) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) [ 3080.173874][T14891] __nla_validate_parse: 23 callbacks suppressed [ 3080.173891][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 08:59:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286, 0x0, 0x565}]}) [ 3080.320726][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:59:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x289) 08:59:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d0, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x49ff4c864b6458b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x1d0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) (async) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00'}) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d0, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x49ff4c864b6458b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x1d0}}, 0x0) (async) [ 3080.359586][ T28] audit: type=1804 audit(1710233951.259:1434): pid=14902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4175122079/syzkaller.WJJQQd/6582/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0 08:59:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) 08:59:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) [ 3080.836876][T14926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3080.848756][T14926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3080.857805][T14926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3080.872633][T14926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3080.880303][T14926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3080.887785][T14926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 08:59:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) 08:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)) 08:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)) 08:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)) 08:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x565}]}) 08:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x565}]}) 08:59:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x565}]}) 08:59:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286}]}) 08:59:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286}]}) [ 3082.375100][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.381614][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 08:59:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x286}]}) 08:59:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="3f040e00f0e812002c001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 08:59:13 executing program 2: r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x3ff) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 08:59:13 executing program 2: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f00000013c0)={[{@noacl}, {@skip_balance}, {@compress}, {@notreelog}, {@discard}, {@enospc_debug}, {@space_cache_v2}, {@noflushoncommit}, {@ssd_spread}, {@datasum}]}, 0x1, 0x55a8, &(0x7f000000ac40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0xb8f7) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfea7) [ 3082.996429][T11709] Bluetooth: hci0: command 0x0409 tx timeout 08:59:14 executing program 2: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x1000408, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x28c, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) 08:59:14 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) [ 3083.892296][ T60] hsr_slave_0: left promiscuous mode [ 3083.899093][ T60] hsr_slave_1: left promiscuous mode [ 3083.905223][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3083.915149][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3083.928508][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3083.938269][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3085.067076][T11709] Bluetooth: hci0: command 0x041b tx timeout [ 3085.571864][ T60] veth1_macvtap: left promiscuous mode [ 3085.586735][ T60] veth0_macvtap: left promiscuous mode [ 3085.592558][ T60] veth1_vlan: left promiscuous mode [ 3087.146178][T11709] Bluetooth: hci0: command 0x040f tx timeout [ 3089.228477][T11709] Bluetooth: hci0: command 0x0419 tx timeout [ 3108.730943][ T6833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:59:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r9, r8, 0x0, 0x10000a014) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 08:59:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000200280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x54, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x66}]}]}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x54}}, 0x300) 08:59:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x2f, 0xfd, 0x0, 0x9de4, 0x18, @mcast2, @loopback, 0x40, 0x40, 0x2d1, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_getvlan={0x50, 0x72, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r6, 0x29, 0x20, 0x6, 0xffff482f, 0x2, @private1, @empty, 0x1, 0x20, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3112.392213][T14926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3112.403324][T14926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3112.414333][T14926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3112.424052][T14926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3112.431952][T14926] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3112.439719][T14926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3113.007167][T11709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3113.018924][T11709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3113.028347][T11709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3113.052622][T11709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3113.060867][T11709] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3113.114810][T14978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3113.124750][ T5055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3113.137000][T14979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3113.153251][T14979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3113.161686][T14979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3113.170050][T14979] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3113.178809][T14979] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 08:59:44 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f40)=@generic={&(0x7f0000001f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) [ 3114.506142][T14979] Bluetooth: hci5: command 0x0409 tx timeout [ 3115.226157][T14979] Bluetooth: hci7: command 0x0409 tx timeout [ 3115.226245][T11709] Bluetooth: hci6: command 0x0409 tx timeout [ 3115.688841][T14979] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3115.704880][T14979] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3115.713653][T14979] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3115.724344][T14979] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3115.734016][T14979] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 3115.748487][T14979] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3116.586034][T11709] Bluetooth: hci5: command 0x041b tx timeout [ 3117.306132][T14979] Bluetooth: hci6: command 0x041b tx timeout [ 3117.307831][T11709] Bluetooth: hci7: command 0x041b tx timeout [ 3117.787775][T11709] Bluetooth: hci8: command 0x0409 tx timeout [ 3118.666122][T11709] Bluetooth: hci5: command 0x040f tx timeout [ 3119.386160][T11709] Bluetooth: hci6: command 0x040f tx timeout [ 3119.386170][T14979] Bluetooth: hci7: command 0x040f tx timeout [ 3119.876176][T14979] Bluetooth: hci8: command 0x041b tx timeout [ 3120.746514][T14979] Bluetooth: hci5: command 0x0419 tx timeout [ 3121.466198][T14979] Bluetooth: hci7: command 0x0419 tx timeout [ 3121.472274][T14979] Bluetooth: hci6: command 0x0419 tx timeout [ 3121.946109][T14979] Bluetooth: hci8: command 0x040f tx timeout [ 3124.025990][T14979] Bluetooth: hci8: command 0x0419 tx timeout [ 3143.799752][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.806179][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 3146.808619][T11709] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3146.824224][T11709] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3146.834515][T11709] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3146.842506][T11709] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3146.850877][T11709] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 3146.860211][T11709] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3148.928862][T11709] Bluetooth: hci9: command 0x0409 tx timeout [ 3150.986096][T11709] Bluetooth: hci9: command 0x041b tx timeout [ 3153.066006][T11709] Bluetooth: hci9: command 0x040f tx timeout [ 3155.146143][T11709] Bluetooth: hci9: command 0x0419 tx timeout [ 3178.982107][T14979] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 3178.995565][T14979] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 3179.004593][T14979] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 3179.015726][T14979] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 3179.023752][T14979] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 3179.031243][T14979] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 3179.469286][T11709] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 3179.481255][T11709] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 3179.492024][T11709] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 3179.501995][T11709] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 3179.512034][T11709] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 3179.520026][T11709] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 3180.063658][T11709] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 3180.076908][T11709] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 3180.089383][T11709] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 3180.097110][T11709] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 3180.104586][T11709] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 3180.112691][T11709] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 3181.067497][T14979] Bluetooth: hci10: command 0x0409 tx timeout [ 3181.636285][T14979] Bluetooth: hci11: command 0x0409 tx timeout [ 3182.186140][T14979] Bluetooth: hci12: command 0x0409 tx timeout [ 3182.454873][T11709] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 3182.469073][T11709] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 3182.482779][T11709] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 3182.498346][T11709] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 3182.506572][T11709] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 3182.514022][T11709] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 3183.146012][T14979] Bluetooth: hci10: command 0x041b tx timeout [ 3183.706364][T14979] Bluetooth: hci11: command 0x041b tx timeout [ 3184.266711][T14979] Bluetooth: hci12: command 0x041b tx timeout [ 3184.586427][T14979] Bluetooth: hci13: command 0x0409 tx timeout [ 3185.226118][T14979] Bluetooth: hci10: command 0x040f tx timeout [ 3185.788136][T14979] Bluetooth: hci11: command 0x040f tx timeout [ 3186.346235][T14979] Bluetooth: hci12: command 0x040f tx timeout [ 3186.666244][T14979] Bluetooth: hci13: command 0x041b tx timeout [ 3187.306281][T11709] Bluetooth: hci10: command 0x0419 tx timeout [ 3187.876351][T11709] Bluetooth: hci11: command 0x0419 tx timeout [ 3188.426276][T11709] Bluetooth: hci12: command 0x0419 tx timeout [ 3188.746305][T11709] Bluetooth: hci13: command 0x040f tx timeout [ 3190.827766][T11709] Bluetooth: hci13: command 0x0419 tx timeout [ 3200.716489][ T60] team0 (unregistering): Port device team_slave_1 removed [ 3200.740820][ T60] team0 (unregistering): Port device team_slave_0 removed [ 3200.759600][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3200.776586][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3200.880502][ T60] bond0 (unregistering): Released all slaves [ 3200.939407][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3201.014476][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3201.041441][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3203.583498][T14995] chnl_net:caif_netlink_parms(): no params data found [ 3204.340390][T14995] bridge0: port 1(bridge_slave_0) entered blocking state [ 3204.364021][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 3204.393285][T14995] bridge_slave_0: entered allmulticast mode [ 3204.402587][T14995] bridge_slave_0: entered promiscuous mode [ 3204.596509][T14995] bridge0: port 2(bridge_slave_1) entered blocking state [ 3204.603698][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 3204.661731][T14995] bridge_slave_1: entered allmulticast mode [ 3204.679463][T14995] bridge_slave_1: entered promiscuous mode [ 3204.831894][T14984] chnl_net:caif_netlink_parms(): no params data found [ 3204.933336][T14995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3205.049873][T14995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3205.249432][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.256686][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.350851][T14995] team0: Port device team_slave_0 added [ 3205.433500][T14995] team0: Port device team_slave_1 added [ 3205.522788][T14984] bridge0: port 1(bridge_slave_0) entered blocking state [ 3205.530250][T14984] bridge0: port 1(bridge_slave_0) entered disabled state [ 3205.538969][T14984] bridge_slave_0: entered allmulticast mode [ 3205.558649][T14984] bridge_slave_0: entered promiscuous mode [ 3205.661644][T14995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3205.669430][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3205.698286][T14995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3205.710951][T14984] bridge0: port 2(bridge_slave_1) entered blocking state [ 3205.718263][T14984] bridge0: port 2(bridge_slave_1) entered disabled state [ 3205.726274][T14984] bridge_slave_1: entered allmulticast mode [ 3205.735051][T14984] bridge_slave_1: entered promiscuous mode [ 3205.762602][T14988] chnl_net:caif_netlink_parms(): no params data found [ 3205.787277][T14995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3205.794275][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3205.822116][T14995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3205.942819][T14984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3205.961284][T14984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3206.117917][T14995] hsr_slave_0: entered promiscuous mode [ 3206.127165][T14995] hsr_slave_1: entered promiscuous mode [ 3206.278196][T14984] team0: Port device team_slave_0 added [ 3206.301557][T14984] team0: Port device team_slave_1 added [ 3206.471787][T14992] chnl_net:caif_netlink_parms(): no params data found [ 3206.513135][T14998] chnl_net:caif_netlink_parms(): no params data found [ 3206.708016][T14988] bridge0: port 1(bridge_slave_0) entered blocking state [ 3206.715197][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 3206.737017][T14988] bridge_slave_0: entered allmulticast mode [ 3206.766678][T14988] bridge_slave_0: entered promiscuous mode [ 3206.789478][T14988] bridge0: port 2(bridge_slave_1) entered blocking state [ 3206.806121][T14988] bridge0: port 2(bridge_slave_1) entered disabled state [ 3206.814054][T14988] bridge_slave_1: entered allmulticast mode [ 3206.840455][T14988] bridge_slave_1: entered promiscuous mode [ 3206.862145][T14984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3206.876027][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3206.926064][T14984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3207.164299][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3207.306516][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3207.969048][T14988] team0: Port device team_slave_0 added [ 3207.995736][T14988] team0: Port device team_slave_1 added [ 3208.084865][T14998] bridge0: port 1(bridge_slave_0) entered blocking state [ 3208.096175][T14998] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.112379][T14998] bridge_slave_0: entered allmulticast mode [ 3208.125546][T14998] bridge_slave_0: entered promiscuous mode [ 3208.145299][T14992] bridge0: port 1(bridge_slave_0) entered blocking state [ 3208.161529][T14992] bridge0: port 1(bridge_slave_0) entered disabled state [ 3208.174015][T14992] bridge_slave_0: entered allmulticast mode [ 3208.199187][T14992] bridge_slave_0: entered promiscuous mode [ 3208.218613][T14992] bridge0: port 2(bridge_slave_1) entered blocking state [ 3208.229222][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.245432][T14992] bridge_slave_1: entered allmulticast mode [ 3208.265099][T14992] bridge_slave_1: entered promiscuous mode [ 3208.368277][T14998] bridge0: port 2(bridge_slave_1) entered blocking state [ 3208.386167][T14998] bridge0: port 2(bridge_slave_1) entered disabled state [ 3208.394256][T14998] bridge_slave_1: entered allmulticast mode [ 3208.419399][T14998] bridge_slave_1: entered promiscuous mode [ 3208.560628][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3208.575983][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3208.645953][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3208.731261][T14992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3208.782892][T14992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3208.833061][T14995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.854157][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3208.861531][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3208.889019][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3208.970687][T14992] team0: Port device team_slave_0 added [ 3208.993390][T14995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.031273][T14998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3209.055297][T14998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3209.115866][T14992] team0: Port device team_slave_1 added [ 3209.220647][T14995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.335676][T14998] team0: Port device team_slave_0 added [ 3209.360729][T14998] team0: Port device team_slave_1 added [ 3209.369885][T14992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3209.377905][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3209.405264][T14992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3209.507312][T14995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3209.584468][T14992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3209.591601][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3209.618547][T14992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3209.649155][T14988] hsr_slave_0: entered promiscuous mode [ 3209.658999][T14988] hsr_slave_1: entered promiscuous mode [ 3209.668127][T14988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3209.675692][T14988] Cannot create hsr debugfs directory [ 3209.707881][T14998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3209.714920][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3209.744943][T14998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3209.772197][T14998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3209.779820][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3209.813935][T14998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3210.134257][T14979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3210.147393][T14979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3210.157045][T14979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3210.165516][T14979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3210.183650][T14992] hsr_slave_0: entered promiscuous mode [ 3210.184048][T14979] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3210.197609][T14979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3210.199452][T14992] hsr_slave_1: entered promiscuous mode [ 3210.225436][T14992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3210.233705][T14992] Cannot create hsr debugfs directory [ 3210.294063][T14998] hsr_slave_0: entered promiscuous mode [ 3210.311972][T14998] hsr_slave_1: entered promiscuous mode [ 3210.320650][T14998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3210.329977][T14998] Cannot create hsr debugfs directory [ 3210.794964][T14995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3210.808038][T14995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3210.887163][T14995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3210.918277][T14995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3211.150673][T14988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.331463][T14988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.509760][T14988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.599843][T14988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.643741][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.828518][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3211.986615][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3212.114314][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3212.211551][T15094] chnl_net:caif_netlink_parms(): no params data found [ 3212.266587][T14979] Bluetooth: hci0: command 0x0409 tx timeout [ 3212.433890][T14995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3212.462908][T14988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3212.510386][T15094] bridge0: port 1(bridge_slave_0) entered blocking state [ 3212.518029][T15094] bridge0: port 1(bridge_slave_0) entered disabled state [ 3212.527587][T15094] bridge_slave_0: entered allmulticast mode [ 3212.537730][T15094] bridge_slave_0: entered promiscuous mode [ 3212.570012][T14988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3212.586485][T14988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3212.612815][T15094] bridge0: port 2(bridge_slave_1) entered blocking state [ 3212.620459][T15094] bridge0: port 2(bridge_slave_1) entered disabled state [ 3212.629111][T15094] bridge_slave_1: entered allmulticast mode [ 3212.638168][T15094] bridge_slave_1: entered promiscuous mode [ 3212.658393][T14988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3212.790543][T14995] 8021q: adding VLAN 0 to HW filter on device team0 [ 3212.932213][T15094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3212.954329][T15094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3212.982716][ T60] tipc: Disabling bearer [ 3212.990758][ T60] tipc: Left network mode [ 3213.154019][T31658] bridge0: port 1(bridge_slave_0) entered blocking state [ 3213.161209][T31658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3213.260152][T15094] team0: Port device team_slave_0 added [ 3213.296466][T31658] bridge0: port 2(bridge_slave_1) entered blocking state [ 3213.303656][T31658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3213.360218][T15094] team0: Port device team_slave_1 added [ 3213.675309][T15094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3213.682359][T15094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3213.710028][T15094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3213.876786][T15094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3213.883791][T15094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3213.912813][T15094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3214.346497][T14979] Bluetooth: hci0: command 0x041b tx timeout [ 3214.525610][T15094] hsr_slave_0: entered promiscuous mode [ 3214.535375][T15094] hsr_slave_1: entered promiscuous mode [ 3214.547095][T15094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3214.554704][T15094] Cannot create hsr debugfs directory [ 3214.729088][T14995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3215.026355][ T60] bridge0: port 5(erspan0) entered disabled state [ 3215.095537][ T60] erspan0 (unregistering): left allmulticast mode [ 3215.108364][ T60] erspan0 (unregistering): left promiscuous mode [ 3215.114780][ T60] bridge0: port 5(erspan0) entered disabled state [ 3215.198770][T14992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3215.226973][T14992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3215.338681][T14995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3215.371320][T14992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3215.787665][T14992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3215.913738][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3216.151186][ T60] IPVS: stopping master sync thread 15494 ... [ 3216.178550][ T60] IPVS: stopping master sync thread 21367 ... [ 3216.426455][T14979] Bluetooth: hci0: command 0x040f tx timeout [ 3216.517835][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 3216.621995][ T1540] bridge0: port 1(bridge_slave_0) entered blocking state [ 3216.629167][ T1540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3216.664360][T14995] veth0_vlan: entered promiscuous mode [ 3216.704996][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 3216.712239][ T1540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3216.939719][T14995] veth1_vlan: entered promiscuous mode [ 3217.053804][T14998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3217.187213][T14992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3217.195602][T14998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3217.344461][T14998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3217.360279][T14998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3217.605342][T14992] 8021q: adding VLAN 0 to HW filter on device team0 [ 3217.705516][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 3217.712661][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3217.751619][T14995] veth0_macvtap: entered promiscuous mode [ 3217.792698][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 3217.800057][ T9552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3217.901746][T14995] veth1_macvtap: entered promiscuous mode [ 3217.970131][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3218.162829][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3218.175577][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3218.186625][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3218.197832][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3218.208745][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3218.222721][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3218.252169][T14995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3218.353556][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3218.385979][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3218.395847][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3218.408624][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3218.419185][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3218.434154][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3218.455084][T14995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3218.506148][T14979] Bluetooth: hci0: command 0x0419 tx timeout [ 3218.563983][T14995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.578899][T14995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.589288][T14995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.598521][T14995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3218.700206][T15094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3218.792206][T14998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3218.820140][T15094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3218.834943][T15094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3218.849779][T15094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3219.159966][T14988] veth0_vlan: entered promiscuous mode [ 3219.252235][T14998] 8021q: adding VLAN 0 to HW filter on device team0 [ 3219.333633][T14756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3219.343280][T14756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3219.355621][T14988] veth1_vlan: entered promiscuous mode [ 3219.383858][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 3219.391080][T15137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3219.459083][T15137] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.466556][T15137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3219.511616][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3219.675401][ T1540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3219.688709][ T1540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3219.745813][T14998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 09:01:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x2f, 0xfd, 0x0, 0x9de4, 0x18, @mcast2, @loopback, 0x40, 0x40, 0x2d1, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_getvlan={0x50, 0x72, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r6, 0x29, 0x20, 0x6, 0xffff482f, 0x2, @private1, @empty, 0x1, 0x20, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3219.919788][T14988] veth0_macvtap: entered promiscuous mode [ 3220.071512][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3220.110681][T14988] veth1_macvtap: entered promiscuous mode 09:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x2f, 0xfd, 0x0, 0x9de4, 0x18, @mcast2, @loopback, 0x40, 0x40, 0x2d1, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_getvlan={0x50, 0x72, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_getvlan={0x50, 0x72, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r6, 0x29, 0x20, 0x6, 0xffff482f, 0x2, @private1, @empty, 0x1, 0x20, 0x8000}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r6, 0x29, 0x20, 0x6, 0xffff482f, 0x2, @private1, @empty, 0x1, 0x20, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3220.240271][T14992] veth0_vlan: entered promiscuous mode [ 3220.354027][T15094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3220.402246][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3220.414246][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3220.459521][T14992] veth1_vlan: entered promiscuous mode [ 3220.484529][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3220.499143][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.527409][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3220.556222][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.576125][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3220.670366][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.696749][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3220.733938][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3220.748991][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 09:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newnexthop={0x3c, 0x68, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1}}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r4, 0x2f, 0xfd, 0x0, 0x9de4, 0x18, @mcast2, @loopback, 0x40, 0x40, 0x2d1, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_getvlan={0x50, 0x72, 0x100, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r6, 0x29, 0x20, 0x6, 0xffff482f, 0x2, @private1, @empty, 0x1, 0x20, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3220.840633][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3220.865134][ T60] bridge_slave_1: left allmulticast mode [ 3220.873840][ T60] bridge_slave_1: left promiscuous mode [ 3220.889608][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 3220.916420][ T60] bridge_slave_0: left allmulticast mode [ 3220.924781][ T60] bridge_slave_0: left promiscuous mode [ 3220.932411][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 3222.597539][ T60] hsr_slave_0: left promiscuous mode [ 3222.604690][ T60] hsr_slave_1: left promiscuous mode [ 3222.611160][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3222.620877][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3222.633224][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3222.641874][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3222.654988][ T60] bridge_slave_1: left allmulticast mode [ 3222.661067][ T60] bridge_slave_1: left promiscuous mode [ 3222.667806][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 3222.679108][ T60] bridge_slave_0: left allmulticast mode [ 3222.684770][ T60] bridge_slave_0: left promiscuous mode [ 3222.691028][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 3224.081487][ T60] hsr_slave_0: left promiscuous mode [ 3224.087786][ T60] hsr_slave_1: left promiscuous mode [ 3224.093625][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3224.104969][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3224.265089][ T60] hsr_slave_0: left promiscuous mode [ 3224.272192][ T60] hsr_slave_1: left promiscuous mode [ 3224.279473][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3224.287837][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3224.298090][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3224.309815][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3224.325283][ T60] veth239: left allmulticast mode [ 3224.330604][ T60] veth239: left promiscuous mode [ 3224.335739][ T60] bridge0: port 4(veth239) entered disabled state [ 3224.344054][ T60] veth237: left allmulticast mode [ 3224.349619][ T60] veth237: left promiscuous mode [ 3224.354695][ T60] bridge0: port 3(veth237) entered disabled state [ 3224.365289][ T60] bridge_slave_1: left allmulticast mode [ 3224.371092][ T60] bridge_slave_1: left promiscuous mode [ 3224.377126][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 3224.385508][ T60] bridge_slave_0: left allmulticast mode [ 3224.391309][ T60] bridge_slave_0: left promiscuous mode [ 3224.397277][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 3226.199766][ T60] hsr_slave_0: left promiscuous mode [ 3226.205707][ T60] hsr_slave_1: left promiscuous mode [ 3226.213770][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3226.222285][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3226.233790][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3226.244051][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3226.255397][ T60] bridge_slave_1: left allmulticast mode [ 3226.261509][ T60] bridge_slave_1: left promiscuous mode [ 3226.267728][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 3226.276199][ T60] bridge_slave_0: left allmulticast mode [ 3226.281886][ T60] bridge_slave_0: left promiscuous mode [ 3226.287683][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 3227.735354][ T60] veth1_macvtap: left promiscuous mode [ 3227.742965][ T60] veth0_macvtap: left promiscuous mode [ 3227.759058][ T60] veth1_vlan: left promiscuous mode [ 3227.764638][ T60] veth0_vlan: left promiscuous mode [ 3228.710837][ T60] veth0_macvtap: left promiscuous mode [ 3228.737380][ T60] veth1_vlan: left promiscuous mode [ 3229.914560][ T60] veth1_macvtap: left allmulticast mode [ 3229.927097][ T60] veth1_macvtap: left promiscuous mode [ 3229.932709][ T60] veth0_macvtap: left promiscuous mode [ 3229.950057][ T60] veth1_vlan: left promiscuous mode [ 3229.955444][ T60] veth0_vlan: left promiscuous mode [ 3245.892278][T11709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3245.905963][T11709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3245.916266][T11709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3245.931571][T11709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3245.953638][T11709] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3245.966405][T11709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3246.647946][T11709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3246.662266][T11709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3246.670969][T11709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3246.684731][T11709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3246.694160][T11709] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3246.703774][T11709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3248.036393][T14979] Bluetooth: hci1: command 0x0409 tx timeout [ 3248.748208][T14979] Bluetooth: hci2: command 0x0409 tx timeout [ 3249.303486][T11709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3249.321363][T11709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3249.333888][T11709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3249.346506][T11709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3249.360805][T11709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3249.375563][T11709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3250.110241][T11709] Bluetooth: hci1: command 0x041b tx timeout 09:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x8}, {0xfff3, 0xa}, {0x10, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000c4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008140)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}}, 0x0) [ 3250.826320][T11709] Bluetooth: hci2: command 0x041b tx timeout [ 3251.466166][T11709] Bluetooth: hci3: command 0x0409 tx timeout [ 3252.186276][T11709] Bluetooth: hci1: command 0x040f tx timeout [ 3252.858475][ T5055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3252.869097][ T5055] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3252.880729][ T5055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3252.896932][ T5055] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3252.906210][ T5055] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3252.916207][ T5055] Bluetooth: hci2: command 0x040f tx timeout [ 3252.924409][ T5055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3253.549908][T11709] Bluetooth: hci3: command 0x041b tx timeout [ 3254.266644][T11709] Bluetooth: hci1: command 0x0419 tx timeout [ 3254.334298][ T60] team0 (unregistering): Port device team_slave_1 removed [ 3254.362459][ T60] team0 (unregistering): Port device team_slave_0 removed [ 3254.382998][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3254.404299][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3254.569330][ T60] bond0 (unregistering): Released all slaves [ 3254.986145][T11709] Bluetooth: hci4: command 0x0409 tx timeout [ 3254.989128][ T5055] Bluetooth: hci2: command 0x0419 tx timeout [ 3255.626066][ T5055] Bluetooth: hci3: command 0x040f tx timeout [ 3257.076231][ T5055] Bluetooth: hci4: command 0x041b tx timeout [ 3257.706262][ T5055] Bluetooth: hci3: command 0x0419 tx timeout [ 3259.146018][ T5055] Bluetooth: hci4: command 0x040f tx timeout [ 3261.228078][ T5055] Bluetooth: hci4: command 0x0419 tx timeout [ 3266.667782][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.674132][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 3276.666240][T11709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3276.678298][T11709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3276.693329][T11709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3276.703526][T11709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3276.711399][T11709] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3276.724083][T11709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3278.756329][T11709] Bluetooth: hci5: command 0x0409 tx timeout [ 3280.826134][T11709] Bluetooth: hci5: command 0x041b tx timeout [ 3282.906118][T11709] Bluetooth: hci5: command 0x040f tx timeout [ 3284.989446][T11709] Bluetooth: hci5: command 0x0419 tx timeout [ 3304.595271][ T5055] Bluetooth: hci10: command 0x0406 tx timeout [ 3304.598920][T11709] Bluetooth: hci11: command 0x0406 tx timeout [ 3304.603461][ T5055] Bluetooth: hci12: command 0x0406 tx timeout [ 3309.706038][T14979] Bluetooth: hci13: command 0x0406 tx timeout [ 3312.398731][T14979] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3312.413190][T14979] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3312.425596][T14979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3312.433966][T14979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3312.441704][T14979] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3312.449167][T14979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3313.203782][T14926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3313.214147][T14926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3313.224427][T14926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3313.232691][T14926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3313.244502][T14926] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3313.253810][T14926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3314.506159][T14979] Bluetooth: hci6: command 0x0409 tx timeout [ 3315.306324][T14979] Bluetooth: hci7: command 0x0409 tx timeout [ 3316.060239][T14926] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3316.071466][T14926] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3316.081940][T14926] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3316.091109][T14926] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3316.103412][T14926] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 3316.116522][T14926] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3316.586289][T14979] Bluetooth: hci6: command 0x041b tx timeout [ 3317.386358][T14979] Bluetooth: hci7: command 0x041b tx timeout [ 3318.189371][T14979] Bluetooth: hci8: command 0x0409 tx timeout [ 3318.666220][T14979] Bluetooth: hci6: command 0x040f tx timeout [ 3319.476061][T14979] Bluetooth: hci7: command 0x040f tx timeout [ 3319.736360][T14926] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3319.756688][T14926] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3319.767846][T14926] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3319.777267][T14926] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3319.784747][T14926] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 3319.792461][T14926] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3320.266575][T14926] Bluetooth: hci8: command 0x041b tx timeout [ 3320.746134][T14926] Bluetooth: hci6: command 0x0419 tx timeout [ 3321.546494][T14926] Bluetooth: hci7: command 0x0419 tx timeout [ 3321.876630][T14926] Bluetooth: hci9: command 0x0409 tx timeout [ 3322.346882][T14926] Bluetooth: hci8: command 0x040f tx timeout [ 3323.946413][T14926] Bluetooth: hci9: command 0x041b tx timeout [ 3324.031369][ T60] team0 (unregistering): Port device team_slave_1 removed [ 3324.057604][ T60] team0 (unregistering): Port device team_slave_0 removed [ 3324.072418][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3324.104599][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3324.215559][ T60] bond0 (unregistering): Released all slaves [ 3324.426207][T14926] Bluetooth: hci8: command 0x0419 tx timeout [ 3326.026274][T14926] Bluetooth: hci9: command 0x040f tx timeout [ 3328.109231][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.115537][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.121914][T14926] Bluetooth: hci9: command 0x0419 tx timeout [ 3335.306103][T14979] Bluetooth: hci0: command 0x0406 tx timeout [ 3343.280336][T14979] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 3343.294025][T14979] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 3343.302667][T14979] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 3343.311899][T14979] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 3343.323492][T14979] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 3343.335401][T14979] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 3345.386231][T14926] Bluetooth: hci14: command 0x0409 tx timeout [ 3347.466096][T14926] Bluetooth: hci14: command 0x041b tx timeout [ 3349.546131][T14926] Bluetooth: hci14: command 0x040f tx timeout [ 3351.636524][T14926] Bluetooth: hci14: command 0x0419 tx timeout [ 3371.149563][T14926] Bluetooth: hci2: command 0x0406 tx timeout [ 3371.149678][T14978] Bluetooth: hci1: command 0x0406 tx timeout [ 3376.267594][T14926] Bluetooth: hci3: command 0x0406 tx timeout [ 3376.270008][T14978] Bluetooth: hci4: command 0x0406 tx timeout [ 3379.033300][T15271] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 3379.043073][T15271] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 3379.058811][T15271] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 3379.070829][T15271] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 3379.079128][T15271] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 3379.087908][T15271] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 3379.145016][T14756] smc: removing ib device syz2 [ 3379.253584][ T60] team0 (unregistering): Port device team_slave_1 removed [ 3379.272869][ T60] team0 (unregistering): Port device team_slave_0 removed [ 3379.292826][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3379.310850][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3379.433387][ T60] bond0 (unregistering): Released all slaves [ 3379.872345][T14979] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 3379.885016][T14979] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 3379.895142][T14979] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 3379.909870][T14979] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 3379.919900][T14979] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 3379.927997][T14979] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 3381.146125][T15271] Bluetooth: hci15: command 0x0409 tx timeout [ 3382.026228][T15271] Bluetooth: hci16: command 0x0409 tx timeout [ 3382.910782][T14979] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 3382.925736][T14979] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 3382.934629][T14979] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 3382.942955][T14979] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 3382.950941][T14979] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 3382.962092][T14979] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 3383.235993][T14979] Bluetooth: hci15: command 0x041b tx timeout [ 3384.106161][T14979] Bluetooth: hci16: command 0x041b tx timeout [ 3384.436776][ T29] INFO: task dhcpcd:4721 blocked for more than 143 seconds. [ 3384.444143][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3384.451905][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3384.461265][ T29] task:dhcpcd state:D stack:22264 pid:4721 tgid:4721 ppid:1 flags:0x00004002 [ 3384.471747][ T29] Call Trace: [ 3384.475025][ T29] [ 3384.478421][ T29] __schedule+0x177f/0x49a0 [ 3384.482990][ T29] ? __pfx___schedule+0x10/0x10 [ 3384.488000][ T29] ? __pfx_lock_release+0x10/0x10 [ 3384.493049][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 3384.498852][ T29] ? schedule+0x8f/0x320 [ 3384.503122][ T29] schedule+0x14a/0x320 [ 3384.511260][ T29] schedule_preempt_disabled+0x13/0x30 [ 3384.517209][ T29] __mutex_lock+0x6a3/0xd70 [ 3384.521740][ T29] ? __mutex_lock+0x526/0xd70 [ 3384.532737][ T29] ? __netlink_dump_start+0x13e/0x790 [ 3384.538277][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3384.543302][ T29] ? netlink_lookup+0x31/0x200 [ 3384.548309][ T29] __netlink_dump_start+0x13e/0x790 [ 3384.553549][ T29] rtnetlink_rcv_msg+0xc96/0x1040 [ 3384.559059][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3384.564280][ T29] ? __pfx_inet_dump_ifaddr+0x10/0x10 [ 3384.569876][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3384.575451][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3384.581722][ T29] ? __pfx_validate_chain+0x10/0x10 [ 3384.587084][ T29] ? __pfx_validate_chain+0x10/0x10 [ 3384.592332][ T29] ? mark_lock+0x9a/0x350 [ 3384.596774][ T29] ? __pfx_validate_chain+0x10/0x10 [ 3384.602005][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 3384.608123][ T29] ? mark_lock+0x9a/0x350 [ 3384.612498][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 3384.618908][ T29] ? __pfx_inet_dump_ifaddr+0x10/0x10 [ 3384.624333][ T29] netlink_rcv_skb+0x1e3/0x430 [ 3384.636162][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3384.641678][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3384.664913][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 3384.670257][ T29] netlink_unicast+0x7ea/0x980 [ 3384.675322][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 3384.686093][ T29] ? __virt_addr_valid+0x44e/0x520 [ 3384.691271][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 3384.717018][ T29] ? __check_object_size+0x4bb/0xa00 [ 3384.722379][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 3384.736043][ T29] netlink_sendmsg+0xa3b/0xd70 [ 3384.740890][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3384.756085][ T29] ? __import_iovec+0x536/0x820 [ 3384.766667][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3384.772014][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 3384.785995][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3384.791347][ T29] __sock_sendmsg+0x221/0x270 [ 3384.806150][ T29] ____sys_sendmsg+0x525/0x7d0 [ 3384.810988][ T29] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3384.836946][ T29] __sys_sendmsg+0x2b0/0x3a0 [ 3384.841606][ T29] ? __pfx___sys_sendmsg+0x10/0x10 [ 3384.848289][ T29] ? syscall_trace_enter+0xa9/0x150 [ 3384.853535][ T29] do_syscall_64+0xf9/0x240 [ 3384.871480][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3384.886023][ T29] RIP: 0033:0x7f9dd4da1a4b [ 3384.890492][ T29] RSP: 002b:00007ffd167bc9e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3384.916012][ T29] RAX: ffffffffffffffda RBX: 000055558636a81d RCX: 00007f9dd4da1a4b [ 3384.924052][ T29] RDX: 0000000000000000 RSI: 00007ffd167bca30 RDI: 000000000000000f [ 3384.946930][ T29] RBP: 00007ffd167c4da8 R08: 00007ffd167c0ad4 R09: 00007ffd167c0ad4 [ 3384.954967][ T29] R10: 00007ffd167c4ff0 R11: 0000000000000246 R12: 000000000000000f [ 3384.976004][ T29] R13: 0000555587e8d0b0 R14: 00007ffd167c4da8 R15: 0000000003011eac [ 3384.984059][ T29] [ 3385.006071][ T29] INFO: task kworker/1:3:5132 blocked for more than 143 seconds. [ 3385.013839][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3385.036003][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3385.044721][ T29] task:kworker/1:3 state:D stack:20816 pid:5132 tgid:5132 ppid:2 flags:0x00004000 [ 3385.066214][T14979] Bluetooth: hci17: command 0x0409 tx timeout [ 3385.086030][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 3385.092087][ T29] Call Trace: [ 3385.095388][ T29] [ 3385.121138][ T29] __schedule+0x177f/0x49a0 [ 3385.125732][ T29] ? schedule+0x8f/0x320 [ 3385.145979][ T29] ? __pfx___schedule+0x10/0x10 [ 3385.151174][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3385.180341][ T29] ? __pfx_lock_release+0x10/0x10 [ 3385.185449][ T29] ? kick_pool+0x41b/0x5c0 [ 3385.211298][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 3385.231884][ T29] ? schedule+0x8f/0x320 [ 3385.242308][ T29] schedule+0x14a/0x320 [ 3385.251381][ T29] schedule_preempt_disabled+0x13/0x30 [ 3385.262218][ T29] __mutex_lock+0x6a3/0xd70 [ 3385.267383][ T29] ? mark_lock+0x9a/0x350 [ 3385.271761][ T29] ? __mutex_lock+0x526/0xd70 [ 3385.289757][ T29] ? addrconf_dad_work+0xd0/0x16f0 [ 3385.294945][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3385.306194][T14979] Bluetooth: hci15: command 0x040f tx timeout [ 3385.306825][ T29] addrconf_dad_work+0xd0/0x16f0 [ 3385.328696][ T29] ? __pfx_addrconf_dad_work+0x10/0x10 [ 3385.334233][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3385.346453][ T29] ? process_scheduled_works+0x91a/0x1770 [ 3385.359546][ T29] process_scheduled_works+0x9ff/0x1770 [ 3385.365252][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 3385.371451][ T29] ? assign_work+0x364/0x3d0 [ 3385.376672][ T29] worker_thread+0x86c/0xd70 [ 3385.381312][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3385.389066][ T29] ? __kthread_parkme+0x168/0x1d0 [ 3385.394137][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3385.399368][ T29] kthread+0x2ef/0x390 [ 3385.403462][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3385.408734][ T29] ? __pfx_kthread+0x10/0x10 [ 3385.413360][ T29] ret_from_fork+0x4b/0x80 [ 3385.417899][ T29] ? __pfx_kthread+0x10/0x10 [ 3385.422521][ T29] ret_from_fork_asm+0x1b/0x30 [ 3385.427475][ T29] [ 3385.430646][ T29] INFO: task kworker/0:4:27837 blocked for more than 144 seconds. [ 3385.438586][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3385.445805][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3385.454565][ T29] task:kworker/0:4 state:D stack:21688 pid:27837 tgid:27837 ppid:2 flags:0x00004000 [ 3385.464873][ T29] Workqueue: events smc_ib_port_event_work [ 3385.470888][ T29] Call Trace: [ 3385.474204][ T29] [ 3385.477856][ T29] __schedule+0x177f/0x49a0 [ 3385.482401][ T29] ? schedule+0x8f/0x320 [ 3385.486849][ T29] ? __pfx___schedule+0x10/0x10 [ 3385.491715][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3385.498214][ T29] ? __pfx_lock_release+0x10/0x10 [ 3385.503275][ T29] ? kick_pool+0x1bb/0x5c0 [ 3385.509145][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 3385.514381][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3385.519681][ T29] ? schedule+0x8f/0x320 [ 3385.523940][ T29] schedule+0x14a/0x320 [ 3385.528805][ T29] schedule_preempt_disabled+0x13/0x30 [ 3385.534319][ T29] __mutex_lock+0x6a3/0xd70 [ 3385.539100][ T29] ? __mutex_lock+0x526/0xd70 [ 3385.543778][ T29] ? ib_get_eth_speed+0x153/0x800 [ 3385.549402][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3385.554480][ T29] ? _raw_spin_unlock+0x28/0x50 [ 3385.559727][ T29] ? ib_device_get_netdev+0x153/0x3b0 [ 3385.565249][ T29] ib_get_eth_speed+0x153/0x800 [ 3385.570222][ T29] ? mark_lock+0x9a/0x350 [ 3385.574575][ T29] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 3385.580583][ T29] ? rxe_query_port+0x4f/0x260 [ 3385.585430][ T29] rxe_query_port+0x76/0x260 [ 3385.590140][ T29] ib_query_port+0x166/0x7d0 [ 3385.594763][ T29] smc_ib_port_event_work+0x161/0xa70 [ 3385.600366][ T29] ? process_scheduled_works+0x91a/0x1770 [ 3385.608048][ T29] process_scheduled_works+0x9ff/0x1770 [ 3385.613671][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 3385.619760][ T29] ? assign_work+0x364/0x3d0 [ 3385.624378][ T29] worker_thread+0x86c/0xd70 [ 3385.629146][ T29] ? __kthread_parkme+0x168/0x1d0 [ 3385.634209][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3385.639418][ T29] kthread+0x2ef/0x390 [ 3385.643520][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3385.649344][ T29] ? __pfx_kthread+0x10/0x10 [ 3385.653979][ T29] ret_from_fork+0x4b/0x80 [ 3385.659877][ T29] ? __pfx_kthread+0x10/0x10 [ 3385.664500][ T29] ret_from_fork_asm+0x1b/0x30 [ 3385.669590][ T29] [ 3385.672778][ T29] INFO: task kworker/1:1:31662 blocked for more than 144 seconds. [ 3385.680914][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3385.688633][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3385.697393][ T29] task:kworker/1:1 state:D stack:22488 pid:31662 tgid:31662 ppid:2 flags:0x00004000 [ 3385.707932][ T29] Workqueue: events switchdev_deferred_process_work [ 3385.714629][ T29] Call Trace: [ 3385.719783][ T29] [ 3385.722765][ T29] __schedule+0x177f/0x49a0 [ 3385.727438][ T29] ? schedule+0x8f/0x320 [ 3385.731721][ T29] ? __pfx___schedule+0x10/0x10 [ 3385.736656][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3385.742657][ T29] ? __pfx_lock_release+0x10/0x10 [ 3385.747814][ T29] ? kick_pool+0x41b/0x5c0 [ 3385.752259][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 3385.757547][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3385.762763][ T29] ? schedule+0x8f/0x320 [ 3385.767131][ T29] schedule+0x14a/0x320 [ 3385.771316][ T29] schedule_preempt_disabled+0x13/0x30 [ 3385.776856][ T29] __mutex_lock+0x6a3/0xd70 [ 3385.781391][ T29] ? __mutex_lock+0x526/0xd70 [ 3385.786724][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 3385.792850][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3385.797988][ T29] ? process_scheduled_works+0x91a/0x1770 [ 3385.803748][ T29] switchdev_deferred_process_work+0xe/0x20 [ 3385.809788][ T29] process_scheduled_works+0x9ff/0x1770 [ 3385.815392][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 3385.821645][ T29] ? assign_work+0x364/0x3d0 [ 3385.828190][ T29] worker_thread+0x86c/0xd70 [ 3385.832807][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3385.838788][ T29] ? __kthread_parkme+0x168/0x1d0 [ 3385.843828][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3385.849048][ T29] kthread+0x2ef/0x390 [ 3385.853138][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3385.858326][ T29] ? __pfx_kthread+0x10/0x10 [ 3385.862928][ T29] ret_from_fork+0x4b/0x80 [ 3385.867466][ T29] ? __pfx_kthread+0x10/0x10 [ 3385.872076][ T29] ret_from_fork_asm+0x1b/0x30 [ 3385.876934][ T29] [ 3385.885142][ T29] INFO: task kworker/1:2:25650 blocked for more than 144 seconds. [ 3385.893406][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3385.901005][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3385.909745][ T29] task:kworker/1:2 state:D stack:22800 pid:25650 tgid:25650 ppid:2 flags:0x00004000 [ 3385.920074][ T29] Workqueue: events linkwatch_event [ 3385.925377][ T29] Call Trace: [ 3385.928841][ T29] [ 3385.931794][ T29] __schedule+0x177f/0x49a0 [ 3385.938255][ T29] ? schedule+0x8f/0x320 [ 3385.942539][ T29] ? __pfx___schedule+0x10/0x10 [ 3385.947651][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3385.953680][ T29] ? __pfx_lock_release+0x10/0x10 [ 3385.958851][ T29] ? kick_pool+0x41b/0x5c0 [ 3385.963283][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 3385.968535][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3385.973746][ T29] ? schedule+0x8f/0x320 [ 3385.978117][ T29] schedule+0x14a/0x320 [ 3385.982290][ T29] schedule_preempt_disabled+0x13/0x30 [ 3385.988032][ T29] __mutex_lock+0x6a3/0xd70 [ 3385.993128][ T29] ? __mutex_lock+0x526/0xd70 [ 3385.997943][ T29] ? linkwatch_event+0xe/0x60 [ 3386.002819][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3386.007945][ T29] ? process_scheduled_works+0x91a/0x1770 [ 3386.013697][ T29] linkwatch_event+0xe/0x60 [ 3386.025951][ T29] process_scheduled_works+0x9ff/0x1770 [ 3386.031612][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 3386.037877][ T29] ? assign_work+0x364/0x3d0 [ 3386.042501][ T29] worker_thread+0x86c/0xd70 [ 3386.048947][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3386.054873][ T29] ? __kthread_parkme+0x168/0x1d0 [ 3386.060030][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3386.065154][ T29] kthread+0x2ef/0x390 [ 3386.069302][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3386.074426][ T29] ? __pfx_kthread+0x10/0x10 [ 3386.079143][ T29] ret_from_fork+0x4b/0x80 [ 3386.083576][ T29] ? __pfx_kthread+0x10/0x10 [ 3386.088215][ T29] ret_from_fork_asm+0x1b/0x30 [ 3386.093260][ T29] [ 3386.096531][ T29] INFO: task syz-executor.3:14988 blocked for more than 145 seconds. [ 3386.104632][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3386.112244][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3386.121182][ T29] task:syz-executor.3 state:D stack:20408 pid:14988 tgid:14988 ppid:1 flags:0x00004006 [ 3386.131520][ T29] Call Trace: [ 3386.134817][ T29] [ 3386.137902][ T29] __schedule+0x177f/0x49a0 [ 3386.142466][ T29] ? __pfx___schedule+0x10/0x10 [ 3386.147517][ T29] ? __pfx_lock_release+0x10/0x10 [ 3386.152568][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 3386.159946][ T29] ? schedule+0x8f/0x320 [ 3386.164224][ T29] schedule+0x14a/0x320 [ 3386.168456][ T29] schedule_preempt_disabled+0x13/0x30 [ 3386.173931][ T29] __mutex_lock+0x6a3/0xd70 [ 3386.178564][ T29] ? __mutex_lock+0x526/0xd70 [ 3386.183268][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 3386.188957][T14979] Bluetooth: hci16: command 0x040f tx timeout [ 3386.193517][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3386.200359][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 3386.205416][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3386.211765][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3386.217476][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3386.223490][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3386.229903][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 3386.235289][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3386.240545][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 3386.246086][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3386.251229][ T29] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3386.257065][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3386.262286][ T29] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3386.267668][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3386.272817][ T29] ? ref_tracker_free+0x643/0x7e0 [ 3386.278891][ T29] netlink_rcv_skb+0x1e3/0x430 [ 3386.283698][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3386.289245][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3386.294558][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 3386.300112][ T29] netlink_unicast+0x7ea/0x980 [ 3386.304924][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 3386.315946][ T29] ? __virt_addr_valid+0x44e/0x520 [ 3386.321097][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 3386.326944][ T29] ? __check_object_size+0x4bb/0xa00 [ 3386.332272][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 3386.337745][ T29] netlink_sendmsg+0xa3b/0xd70 [ 3386.342558][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3386.348440][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3386.354465][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3386.360207][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 3386.365694][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3386.371504][ T29] __sock_sendmsg+0x221/0x270 [ 3386.376671][ T29] __sys_sendto+0x3a4/0x4f0 [ 3386.381200][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 3386.390763][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3386.396852][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3386.403478][ T29] __x64_sys_sendto+0xde/0x100 [ 3386.408500][ T29] do_syscall_64+0xf9/0x240 [ 3386.413121][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3386.419069][ T29] RIP: 0033:0x7f4b8d27fa9c [ 3386.423510][ T29] RSP: 002b:00007ffce53d3590 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3386.432179][ T29] RAX: ffffffffffffffda RBX: 00007f4b8ded4620 RCX: 00007f4b8d27fa9c [ 3386.440330][ T29] RDX: 0000000000000028 RSI: 00007f4b8ded4670 RDI: 0000000000000003 [ 3386.453527][ T29] RBP: 0000000000000000 R08: 00007ffce53d35e4 R09: 000000000000000c [ 3386.466028][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3386.486005][ T29] R13: 0000000000000000 R14: 00007f4b8ded4670 R15: 0000000000000000 [ 3386.494041][ T29] [ 3386.506096][ T29] INFO: task syz-executor.1:14992 blocked for more than 145 seconds. [ 3386.523626][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3386.543379][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3386.552598][ T29] task:syz-executor.1 state:D stack:20408 pid:14992 tgid:14992 ppid:1 flags:0x00004006 [ 3386.573965][ T29] Call Trace: [ 3386.577478][ T29] [ 3386.580615][ T29] __schedule+0x177f/0x49a0 [ 3386.585205][ T29] ? __pfx___schedule+0x10/0x10 [ 3386.602376][ T29] ? __pfx_lock_release+0x10/0x10 [ 3386.608820][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 3386.614343][ T29] ? schedule+0x8f/0x320 [ 3386.619207][ T29] schedule+0x14a/0x320 [ 3386.623409][ T29] schedule_preempt_disabled+0x13/0x30 [ 3386.629874][ T29] __mutex_lock+0x6a3/0xd70 [ 3386.634415][ T29] ? __mutex_lock+0x526/0xd70 [ 3386.639446][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 3386.644677][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3386.650903][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 3386.656025][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3386.661434][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3386.667035][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3386.673229][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3386.679681][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 3386.685277][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3386.690594][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 3386.696295][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3386.701438][ T29] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3386.707281][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3386.712427][ T29] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3386.718941][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3386.724113][ T29] ? ref_tracker_free+0x643/0x7e0 [ 3386.734791][ T29] netlink_rcv_skb+0x1e3/0x430 [ 3386.741705][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3386.748557][T15271] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 3386.761282][T15271] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 3386.765979][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3386.775167][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 3386.777081][T15271] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 3386.783458][ T29] netlink_unicast+0x7ea/0x980 [ 3386.792963][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 3386.798532][T15271] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 3386.798790][ T29] ? __virt_addr_valid+0x44e/0x520 [ 3386.806305][T15271] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 3386.811131][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 3386.823389][ T29] ? __check_object_size+0x4bb/0xa00 [ 3386.836404][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 3386.836455][T15271] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 3386.841549][ T29] netlink_sendmsg+0xa3b/0xd70 [ 3386.858225][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3386.863567][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3386.875075][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3386.880633][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 3386.889923][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3386.895264][ T29] __sock_sendmsg+0x221/0x270 [ 3386.900241][ T29] __sys_sendto+0x3a4/0x4f0 [ 3386.904802][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 3386.910965][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3386.917227][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3386.923592][ T29] __x64_sys_sendto+0xde/0x100 [ 3386.928829][ T29] do_syscall_64+0xf9/0x240 [ 3386.933367][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3386.939533][ T29] RIP: 0033:0x7f6318a7fa9c [ 3386.943988][ T29] RSP: 002b:00007ffebdfa4460 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3386.953684][ T29] RAX: ffffffffffffffda RBX: 00007f63196d4620 RCX: 00007f6318a7fa9c [ 3386.961840][ T29] RDX: 0000000000000028 RSI: 00007f63196d4670 RDI: 0000000000000003 [ 3386.972312][ T29] RBP: 0000000000000000 R08: 00007ffebdfa44b4 R09: 000000000000000c [ 3386.983749][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3386.992020][ T29] R13: 0000000000000000 R14: 00007f63196d4670 R15: 0000000000000000 [ 3387.000301][ T29] [ 3387.005354][ T29] INFO: task syz-executor.2:14998 blocked for more than 145 seconds. [ 3387.014524][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3387.021903][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3387.030701][ T29] task:syz-executor.2 state:D stack:20408 pid:14998 tgid:14998 ppid:1 flags:0x00004006 [ 3387.041162][ T29] Call Trace: [ 3387.044459][ T29] [ 3387.048437][ T29] __schedule+0x177f/0x49a0 [ 3387.052978][ T29] ? __pfx___schedule+0x10/0x10 [ 3387.058119][ T29] ? __pfx_lock_release+0x10/0x10 [ 3387.063208][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 3387.069054][ T29] ? schedule+0x8f/0x320 [ 3387.073324][ T29] schedule+0x14a/0x320 [ 3387.079436][ T29] schedule_preempt_disabled+0x13/0x30 [ 3387.084921][ T29] __mutex_lock+0x6a3/0xd70 [ 3387.089568][ T29] ? __mutex_lock+0x526/0xd70 [ 3387.094266][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 3387.099518][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3387.104564][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 3387.109665][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3387.114877][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3387.120756][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3387.126901][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3387.133252][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 3387.138690][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3387.143903][ T29] ? __local_bh_enable_ip+0x168/0x200 [ 3387.149499][T15271] Bluetooth: hci17: command 0x041b tx timeout [ 3387.154981][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3387.161570][ T29] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3387.167519][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3387.172659][ T29] ? __dev_queue_xmit+0x15fd/0x3b10 [ 3387.178262][ T29] ? __dev_queue_xmit+0x2c4/0x3b10 [ 3387.183415][ T29] ? ref_tracker_free+0x643/0x7e0 [ 3387.190465][ T29] netlink_rcv_skb+0x1e3/0x430 [ 3387.195263][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3387.200813][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3387.206242][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 3387.211468][ T29] netlink_unicast+0x7ea/0x980 [ 3387.216354][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 3387.221922][ T29] ? __virt_addr_valid+0x44e/0x520 [ 3387.227211][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 3387.232257][ T29] ? __check_object_size+0x4bb/0xa00 [ 3387.237631][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 3387.242767][ T29] netlink_sendmsg+0xa3b/0xd70 [ 3387.247644][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3387.252942][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3387.259122][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3387.264424][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 3387.269943][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3387.275244][ T29] __sock_sendmsg+0x221/0x270 [ 3387.280012][ T29] __sys_sendto+0x3a4/0x4f0 [ 3387.284563][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 3387.289716][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3387.295721][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3387.303926][ T29] __x64_sys_sendto+0xde/0x100 [ 3387.308991][ T29] do_syscall_64+0xf9/0x240 [ 3387.313530][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3387.319507][ T29] RIP: 0033:0x7f11f447fa9c [ 3387.324364][ T29] RSP: 002b:00007ffc501d9630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3387.332863][ T29] RAX: ffffffffffffffda RBX: 00007f11f50d4620 RCX: 00007f11f447fa9c [ 3387.340912][ T29] RDX: 0000000000000020 RSI: 00007f11f50d4670 RDI: 0000000000000003 [ 3387.348934][ T29] RBP: 0000000000000000 R08: 00007ffc501d9684 R09: 000000000000000c [ 3387.357003][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3387.365121][ T29] R13: 0000000000000000 R14: 00007f11f50d4670 R15: 0000000000000000 [ 3387.373329][ T29] [ 3387.376451][ T29] INFO: task syz-executor.4:15094 blocked for more than 146 seconds. [ 3387.384539][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3387.392075][T15271] Bluetooth: hci15: command 0x0419 tx timeout [ 3387.398233][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3387.408689][ T29] task:syz-executor.4 state:D stack:20984 pid:15094 tgid:15094 ppid:1 flags:0x00004006 [ 3387.418960][ T29] Call Trace: [ 3387.422497][ T29] [ 3387.425433][ T29] __schedule+0x177f/0x49a0 [ 3387.430055][ T29] ? __pfx___schedule+0x10/0x10 [ 3387.434928][ T29] ? __pfx_lock_release+0x10/0x10 [ 3387.440047][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 3387.445536][ T29] ? schedule+0x8f/0x320 [ 3387.449904][ T29] schedule+0x14a/0x320 [ 3387.454168][ T29] schedule_preempt_disabled+0x13/0x30 [ 3387.459696][ T29] __mutex_lock+0x6a3/0xd70 [ 3387.464314][ T29] ? __mutex_lock+0x526/0xd70 [ 3387.469270][ T29] ? rtnetlink_rcv_msg+0x82c/0x1040 [ 3387.474512][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3387.479772][ T29] rtnetlink_rcv_msg+0x82c/0x1040 [ 3387.484836][ T29] ? rtnetlink_rcv_msg+0x208/0x1040 [ 3387.490143][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3387.495624][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3387.501882][ T29] ? __pfx_validate_chain+0x10/0x10 [ 3387.507172][ T29] ? __pfx_validate_chain+0x10/0x10 [ 3387.512394][ T29] ? mark_lock+0x9a/0x350 [ 3387.518664][ T29] ? __pfx_validate_chain+0x10/0x10 [ 3387.523931][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 3387.529699][ T29] ? mark_lock+0x9a/0x350 [ 3387.534079][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 3387.539227][ T29] netlink_rcv_skb+0x1e3/0x430 [ 3387.544042][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3387.549570][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3387.554881][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 3387.560157][ T29] netlink_unicast+0x7ea/0x980 [ 3387.564957][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 3387.570357][ T29] ? __virt_addr_valid+0x44e/0x520 [ 3387.575494][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 3387.580608][ T29] ? __check_object_size+0x4bb/0xa00 [ 3387.585963][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 3387.591096][ T29] netlink_sendmsg+0xa3b/0xd70 [ 3387.596075][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3387.601380][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3387.607521][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3387.612829][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 3387.618371][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3387.623669][ T29] __sock_sendmsg+0x221/0x270 [ 3387.631051][ T29] __sys_sendto+0x3a4/0x4f0 [ 3387.635602][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 3387.641220][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3387.647366][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3387.653729][ T29] __x64_sys_sendto+0xde/0x100 [ 3387.658596][ T29] do_syscall_64+0xf9/0x240 [ 3387.663114][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 3387.669084][ T29] RIP: 0033:0x7f21bb27fa9c [ 3387.673529][ T29] RSP: 002b:00007ffd80243b00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3387.682002][ T29] RAX: ffffffffffffffda RBX: 00007f21bbed4620 RCX: 00007f21bb27fa9c [ 3387.690095][ T29] RDX: 0000000000000028 RSI: 00007f21bbed4670 RDI: 0000000000000003 [ 3387.698337][ T29] RBP: 0000000000000000 R08: 00007ffd80243b54 R09: 000000000000000c [ 3387.706355][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 3387.714519][ T29] R13: 0000000000000000 R14: 00007f21bbed4670 R15: 0000000000000000 [ 3387.722717][ T29] [ 3387.725883][ T29] INFO: task kworker/0:7:15218 blocked for more than 146 seconds. [ 3387.734423][ T29] Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3387.743610][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3387.752388][ T29] task:kworker/0:7 state:D stack:24784 pid:15218 tgid:15218 ppid:2 flags:0x00004000 [ 3387.762695][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 3387.768819][ T29] Call Trace: [ 3387.772143][ T29] [ 3387.775110][ T29] __schedule+0x177f/0x49a0 [ 3387.779798][ T29] ? schedule+0x8f/0x320 [ 3387.784249][ T29] ? __pfx___schedule+0x10/0x10 [ 3387.789184][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3387.795356][ T29] ? __pfx_lock_release+0x10/0x10 [ 3387.800507][ T29] ? kick_pool+0x1bb/0x5c0 [ 3387.804938][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 3387.810231][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 3387.815441][ T29] ? schedule+0x8f/0x320 [ 3387.819816][ T29] schedule+0x14a/0x320 [ 3387.823995][ T29] schedule_preempt_disabled+0x13/0x30 [ 3387.829582][ T29] __mutex_lock+0x6a3/0xd70 [ 3387.834349][ T29] ? mark_lock+0x9a/0x350 [ 3387.838830][ T29] ? __mutex_lock+0x526/0xd70 [ 3387.843529][ T29] ? addrconf_dad_work+0xd0/0x16f0 [ 3387.850700][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 3387.855765][ T29] addrconf_dad_work+0xd0/0x16f0 [ 3387.860834][ T29] ? __pfx_addrconf_dad_work+0x10/0x10 [ 3387.866602][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3387.872969][ T29] ? process_scheduled_works+0x91a/0x1770 [ 3387.878817][ T29] process_scheduled_works+0x9ff/0x1770 [ 3387.884421][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 3387.890544][ T29] ? assign_work+0x364/0x3d0 [ 3387.895159][ T29] worker_thread+0x86c/0xd70 [ 3387.899887][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3387.905813][ T29] ? __kthread_parkme+0x168/0x1d0 [ 3387.910891][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3387.916130][ T29] kthread+0x2ef/0x390 [ 3387.920211][ T29] ? __pfx_worker_thread+0x10/0x10 [ 3387.925306][ T29] ? __pfx_kthread+0x10/0x10 [ 3387.930018][ T29] ret_from_fork+0x4b/0x80 [ 3387.934715][ T29] ? __pfx_kthread+0x10/0x10 [ 3387.939580][ T29] ret_from_fork_asm+0x1b/0x30 [ 3387.944375][ T29] [ 3387.947535][ T29] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3387.958773][ T29] [ 3387.958773][ T29] Showing all locks held in the system: [ 3387.966641][ T29] 1 lock held by khungtaskd/29: [ 3387.971501][ T29] #0: ffffffff8e131020 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 3387.981430][ T29] 5 locks held by kworker/u8:4/60: [ 3387.986638][ T29] #0: ffff888015acb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3387.997640][ T29] #1: ffffc900015b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.008344][ T29] #2: ffffffff8f358c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf5/0xb90 [ 3388.017849][ T29] #3: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe8/0x9d0 [ 3388.028309][ T29] #4: ffffffff8e1363b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x39a/0x820 [ 3388.039737][ T29] 1 lock held by dhcpcd/4721: [ 3388.044428][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x13e/0x790 [ 3388.054363][ T29] 2 locks held by getty/4809: [ 3388.059090][ T29] #0: ffff88802ac830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3388.070954][ T29] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 3388.081199][ T29] 3 locks held by kworker/1:3/5132: [ 3388.086544][ T29] #0: ffff888029aaa548 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.098243][ T29] #1: ffffc90004897d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.111191][ T29] #2: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 3388.120726][ T29] 4 locks held by kworker/0:4/27837: [ 3388.126170][ T29] #0: ffff888014c78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.137281][ T29] #1: ffffc90013c9fd00 ((work_completion)(&smcibdev->port_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.150934][ T29] #2: ffff8880a7d41158 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 3388.160752][ T29] #3: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 3388.170206][ T29] 3 locks held by kworker/0:9/27840: [ 3388.175477][ T29] #0: ffff888014c79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.189782][ T29] #1: ffffc90013cafd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.200976][ T29] #2: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xe50 [ 3388.210842][ T29] 3 locks held by kworker/1:1/31662: [ 3388.216189][ T29] #0: ffff888014c78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.227537][ T29] #1: ffffc900139e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.238708][ T29] #2: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 3388.249833][ T29] 3 locks held by kworker/1:2/25650: [ 3388.255139][ T29] #0: ffff888014c78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.266477][T15271] Bluetooth: hci16: command 0x0419 tx timeout [ 3388.273021][ T29] #1: ffffc9001370fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.284244][ T29] #2: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 3388.293498][ T29] 3 locks held by kworker/u8:3/14756: [ 3388.300977][ T29] #0: ffff888015b1c948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.312663][ T29] #1: ffffc9000a577d00 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.326171][ T29] #2: ffff8880a7d406a0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x2a/0x170 [ 3388.337597][ T29] 1 lock held by syz-executor.3/14988: [ 3388.343059][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.353117][ T29] 1 lock held by syz-executor.1/14992: [ 3388.358638][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.368317][ T29] 1 lock held by syz-executor.2/14998: [ 3388.373789][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.383468][ T29] 1 lock held by syz-executor.4/15094: [ 3388.389053][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.398716][ T29] 3 locks held by kworker/0:7/15218: [ 3388.404001][ T29] #0: ffff888029aaa548 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x8df/0x1770 [ 3388.417738][ T29] #1: ffffc900034efd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x91a/0x1770 [ 3388.430761][ T29] #2: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 3388.440242][ T29] 1 lock held by syz-executor.0/15246: [ 3388.445685][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.455707][ T29] 1 lock held by syz-executor.0/15247: [ 3388.461201][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.470809][ T29] 1 lock held by syz-executor.0/15248: [ 3388.476504][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 3388.485400][ T29] 1 lock held by syz-executor.3/15251: [ 3388.491183][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.500780][ T29] 1 lock held by syz-executor.1/15255: [ 3388.506524][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.516092][ T29] 1 lock held by syz-executor.2/15258: [ 3388.521543][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.533092][ T29] 1 lock held by syz-executor.0/15262: [ 3388.538646][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.548305][ T29] 1 lock held by syz-executor.4/15267: [ 3388.554034][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.563602][ T29] 1 lock held by syz-executor.3/15274: [ 3388.569218][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.578800][ T29] 1 lock held by syz-executor.1/15277: [ 3388.584256][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.593872][ T29] 1 lock held by syz-executor.2/15281: [ 3388.599537][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.609283][ T29] 1 lock held by syz-executor.0/15284: [ 3388.614750][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.624306][ T29] 1 lock held by syz-executor.4/15289: [ 3388.629898][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.641261][ T29] 1 lock held by syz-executor.3/15297: [ 3388.646888][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.656898][ T29] 1 lock held by syz-executor.1/15300: [ 3388.662364][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.672596][ T29] 1 lock held by syz-executor.2/15303: [ 3388.678136][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.687920][ T29] 1 lock held by syz-executor.0/15307: [ 3388.693390][ T29] #0: ffffffff8f3651c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 3388.703035][ T29] [ 3388.705382][ T29] ============================================= [ 3388.705382][ T29] [ 3388.714010][ T29] NMI backtrace for cpu 0 [ 3388.718358][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3388.727826][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3388.737902][ T29] Call Trace: [ 3388.741223][ T29] [ 3388.744232][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 3388.748914][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 3388.754288][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3388.759486][ T29] ? __pfx__printk+0x10/0x10 [ 3388.764069][ T29] ? vprintk_emit+0x607/0x720 [ 3388.768828][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 3388.773858][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 3388.778828][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3388.784282][ T29] ? _printk+0xd5/0x120 [ 3388.788430][ T29] ? __pfx__printk+0x10/0x10 [ 3388.793038][ T29] ? __wake_up_klogd+0xcc/0x110 [ 3388.797907][ T29] ? __pfx__printk+0x10/0x10 [ 3388.802630][ T29] ? __rcu_read_unlock+0xa0/0x110 [ 3388.807667][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3388.813668][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 3388.819679][ T29] watchdog+0xfaf/0xff0 [ 3388.823869][ T29] ? watchdog+0x1e9/0xff0 [ 3388.828295][ T29] ? __pfx_watchdog+0x10/0x10 [ 3388.832970][ T29] kthread+0x2ef/0x390 [ 3388.837036][ T29] ? __pfx_watchdog+0x10/0x10 [ 3388.841725][ T29] ? __pfx_kthread+0x10/0x10 [ 3388.846327][ T29] ret_from_fork+0x4b/0x80 [ 3388.850759][ T29] ? __pfx_kthread+0x10/0x10 [ 3388.855366][ T29] ret_from_fork_asm+0x1b/0x30 [ 3388.860141][ T29] [ 3388.863801][ T29] Sending NMI from CPU 0 to CPUs 1: [ 3388.869164][ C1] NMI backtrace for cpu 1 [ 3388.869176][ C1] CPU: 1 PID: 13107 Comm: kworker/u8:1 Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3388.869193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3388.869202][ C1] Workqueue: bat_events batadv_nc_worker [ 3388.869290][ C1] RIP: 0010:__lock_acquire+0x5a7/0x1fd0 [ 3388.869315][ C1] Code: 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 39 12 00 00 0f b6 2b 48 8b 44 24 20 0f b6 04 10 84 c0 0f 85 49 12 00 00 <41> 8b 1f 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 e0 e4 [ 3388.869327][ C1] RSP: 0018:ffffc900139bf8f0 EFLAGS: 00000046 [ 3388.869340][ C1] RAX: 0000000000000000 RBX: ffffffff92945e6c RCX: ffffffff817167fa [ 3388.869352][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff92c5e4e0 [ 3388.869363][ C1] RBP: 0000000000000002 R08: ffffffff92c5e4e7 R09: 1ffffffff258bc9c [ 3388.869374][ C1] R10: dffffc0000000000 R11: fffffbfff258bc9d R12: 0000000000000000 [ 3388.869384][ C1] R13: ffff888081fe9e00 R14: 000000000000000a R15: ffff888081fea948 [ 3388.869395][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 3388.869408][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3388.869419][ C1] CR2: 0000559a43dbbb00 CR3: 000000000df32000 CR4: 00000000003506f0 [ 3388.869433][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3388.869442][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3388.869451][ C1] Call Trace: [ 3388.869458][ C1] [ 3388.869464][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 3388.869485][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 3388.869506][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3388.869533][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3388.869550][ C1] ? nmi_handle+0x14f/0x580 [ 3388.869574][ C1] ? nmi_handle+0x2a/0x580 [ 3388.869588][ C1] ? __lock_acquire+0x5a7/0x1fd0 [ 3388.869607][ C1] ? default_do_nmi+0x63/0x160 [ 3388.869621][ C1] ? exc_nmi+0x123/0x1f0 [ 3388.869634][ C1] ? end_repeat_nmi+0xf/0x60 [ 3388.869655][ C1] ? __lock_acquire+0x4ba/0x1fd0 [ 3388.869675][ C1] ? __lock_acquire+0x5a7/0x1fd0 [ 3388.869695][ C1] ? __lock_acquire+0x5a7/0x1fd0 [ 3388.869716][ C1] ? __lock_acquire+0x5a7/0x1fd0 [ 3388.869735][ C1] [ 3388.869740][ C1] [ 3388.869752][ C1] lock_acquire+0x1e3/0x530 [ 3388.869771][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3388.869788][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 3388.869809][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3388.869823][ C1] ? __pfx_lock_release+0x10/0x10 [ 3388.869844][ C1] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 3388.869867][ C1] batadv_nc_worker+0xec/0x610 [ 3388.869880][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3388.869894][ C1] ? batadv_nc_worker+0xcb/0x610 [ 3388.869908][ C1] ? process_scheduled_works+0x91a/0x1770 [ 3388.869929][ C1] process_scheduled_works+0x9ff/0x1770 [ 3388.869966][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 3388.869990][ C1] ? assign_work+0x364/0x3d0 [ 3388.870011][ C1] worker_thread+0x86c/0xd70 [ 3388.870028][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3388.870047][ C1] ? __kthread_parkme+0x168/0x1d0 [ 3388.870063][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3388.870076][ C1] kthread+0x2ef/0x390 [ 3388.870091][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3388.870105][ C1] ? __pfx_kthread+0x10/0x10 [ 3388.870120][ C1] ret_from_fork+0x4b/0x80 [ 3388.870138][ C1] ? __pfx_kthread+0x10/0x10 [ 3388.870154][ C1] ret_from_fork_asm+0x1b/0x30 [ 3388.870179][ C1] [ 3388.873249][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 3389.218928][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-syzkaller-00711-g045395d86acd #0 [ 3389.228379][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 3389.238427][ T29] Call Trace: [ 3389.241699][ T29] [ 3389.244622][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 3389.249302][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3389.254493][ T29] ? __pfx__printk+0x10/0x10 [ 3389.259080][ T29] ? vscnprintf+0x5d/0x90 [ 3389.263405][ T29] panic+0x349/0x860 [ 3389.267294][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3389.273445][ T29] ? __pfx_panic+0x10/0x10 [ 3389.277851][ T29] ? tick_nohz_tick_stopped+0x7b/0xc0 [ 3389.283216][ T29] ? __irq_work_queue_local+0x137/0x3e0 [ 3389.288755][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 3389.294118][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 3389.300266][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 3389.306418][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 3389.312571][ T29] watchdog+0xfee/0xff0 [ 3389.316723][ T29] ? watchdog+0x1e9/0xff0 [ 3389.321053][ T29] ? __pfx_watchdog+0x10/0x10 [ 3389.325727][ T29] kthread+0x2ef/0x390 [ 3389.329790][ T29] ? __pfx_watchdog+0x10/0x10 [ 3389.334498][ T29] ? __pfx_kthread+0x10/0x10 [ 3389.339081][ T29] ret_from_fork+0x4b/0x80 [ 3389.343491][ T29] ? __pfx_kthread+0x10/0x10 [ 3389.348074][ T29] ret_from_fork_asm+0x1b/0x30 [ 3389.352841][ T29] [ 3389.356107][ T29] Kernel Offset: disabled [ 3389.360421][ T29] Rebooting in 86400 seconds..