3c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() 10:45:02 executing program 3: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() [ 141.870807][ T5844] usb 6-1: Using ep0 maxpacket: 16 10:45:02 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() 10:45:02 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() 10:45:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:02 executing program 0: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() 10:45:03 executing program 3: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() 10:45:03 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041c6bb1030091902472e01020301090224"], 0x0) 10:45:03 executing program 2: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() [ 143.591186][ T5844] usb 6-1: unable to read config index 0 descriptor/all 10:45:04 executing program 1: mkdir(&(0x7f0000000580)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000600)) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7ee007c3) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000340)=@alg, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/238, 0xee}], 0x4, &(0x7f0000000780)=""/21, 0x15}, 0x9}, {{&(0x7f0000000a00)=@tipc, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/132, 0x84}, 0x9}, {{&(0x7f0000000cc0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/140, 0x8c}, {&(0x7f0000000f00)=""/180, 0xb4}, {0x0}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x6, &(0x7f0000001200)=""/230, 0xe6}, 0x95e}], 0x3, 0x2, &(0x7f0000001400)={0x77359400}) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x3) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf2531000000080001003d0000000c009900080000002e0000000800db00", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sync() 10:45:04 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 10:45:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) [ 144.374518][ T5844] usb 6-1: can't read configurations, error -71 10:45:04 executing program 0: syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x1) 10:45:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) [ 145.693630][ T5844] usb 6-1: new high-speed USB device number 5 using dummy_hcd 10:45:06 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 10:45:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000006300)=@base={0x0, 0x0, 0x0, 0x0, 0x204}, 0x48) 10:45:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x6554}]}) 10:45:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x5}]}) 10:45:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000006300)=@base={0x14}, 0x48) 10:45:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000006300)=@base={0x2}, 0x48) 10:45:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 145.879955][ T27] audit: type=1326 audit(1705056306.118:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0356e7cd29 code=0x0 10:45:06 executing program 1: syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f9bb8b102104f0045f8e0102030109022b00010000600009046d00020202ff"], 0x0) 10:45:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b80)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 10:45:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:06 executing program 3: bpf$MAP_CREATE(0x11, &(0x7f0000006300), 0x48) [ 145.954166][ T5844] usb 6-1: Using ep0 maxpacket: 16 10:45:06 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0, 0x0) 10:45:06 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r0, 0x1}, 0x14}}, 0x0) 10:45:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, r2, 0xa03}, 0x14}}, 0x0) 10:45:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000000c0)={[{@debug}, {@nodiscard}, {@nodiscard}, {@test_dummy_encryption}, {@nojournal_checksum}, {@init_itable_val}, {@stripe={'stripe', 0x3d, 0x3096}}, {@usrquota}], [{@subj_role={'subj_role', 0x3d, '{'}}, {@smackfshat={'smackfshat', 0x3d, 'debug'}}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") 10:45:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000013c0)={0x2, &(0x7f0000001380)=[{}, {0x5}]}) 10:45:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0xc67b, 0x4) [ 146.090593][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.105942][ T5844] usb 6-1: config 0 has no interfaces? 10:45:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000080000000000160000000c000180"], 0x48}}, 0x0) 10:45:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:06 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') 10:45:06 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xffffffff}, 0x0, 0x0) 10:45:06 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r1, 0x0) ftruncate(r1, 0x0) [ 146.153687][ T6993] loop2: detected capacity change from 0 to 1024 [ 146.167576][ T6993] ext3: Unknown parameter 'subj_role' [ 146.186015][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:45:06 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) 10:45:06 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8970, &(0x7f0000000140)={'gre0\x00', {0x2, 0x0, @private}}) 10:45:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x3, 0x0, 0x0, 0x20}]}) [ 146.270397][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.280876][ T5844] usb 6-1: New USB device found, idVendor=0930, idProduct=0219, bcdDevice=2e.47 [ 146.319502][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.356113][ T5844] usb 6-1: Product: syz [ 146.360285][ T5844] usb 6-1: Manufacturer: syz [ 146.377258][ T5844] usb 6-1: SerialNumber: syz [ 146.386810][ T5844] usb 6-1: config 0 descriptor?? [ 146.540388][ T8] usb 2-1: Using ep0 maxpacket: 16 10:45:06 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041c6bb1030091902472e01020301090224"], 0x0) 10:45:06 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f0000006300), 0x48) 10:45:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000006300)=@base={0x3, 0x0, 0x0, 0x0, 0x204}, 0x48) 10:45:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x40}}], 0x1, 0x0) 10:45:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:06 executing program 0: socket$netlink(0x10, 0x3, 0x6) [ 146.575551][ T5154] usb 6-1: USB disconnect, device number 5 10:45:06 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @loopback}}, 0x24) 10:45:06 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3f, 0x10002, 0x9, 0x0, 0x0, 0x0, 0x6}) 10:45:06 executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) 10:45:06 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) 10:45:06 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 146.660714][ T8] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 146.684553][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 10:45:06 executing program 3: clock_adjtime(0x0, &(0x7f0000000200)={0x10000}) 10:45:07 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x15, 0x0, &(0x7f0000000180)) 10:45:07 executing program 2: getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) [ 146.726784][ T8] usb 2-1: config 0 has no interface number 0 [ 146.757782][ T8] usb 2-1: config 0 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.930552][ T8] usb 2-1: New USB device found, idVendor=0421, idProduct=04f0, bcdDevice=8e.5f [ 146.939922][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.948679][ T8] usb 2-1: Product: syz [ 146.953107][ T8] usb 2-1: Manufacturer: syz [ 146.957728][ T8] usb 2-1: SerialNumber: syz [ 146.963786][ T8] usb 2-1: config 0 descriptor?? [ 147.000574][ T5154] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 147.002065][ T8] usb 2-1: bad CDC descriptors [ 147.013164][ T8] cdc_acm 2-1:0.109: Zero length descriptor references [ 147.020005][ T8] cdc_acm: probe of 2-1:0.109 failed with error -22 [ 147.204044][ T43] usb 2-1: USB disconnect, device number 3 [ 147.260503][ T5154] usb 6-1: Using ep0 maxpacket: 16 [ 147.391514][ T5154] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.401596][ T5154] usb 6-1: config 0 has no interfaces? [ 147.561646][ T5154] usb 6-1: New USB device found, idVendor=0930, idProduct=0219, bcdDevice=2e.47 [ 147.572400][ T5154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.580415][ T5154] usb 6-1: Product: syz [ 147.584568][ T5154] usb 6-1: Manufacturer: syz [ 147.589141][ T5154] usb 6-1: SerialNumber: syz [ 147.594841][ T5154] usb 6-1: config 0 descriptor?? 10:45:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 10:45:07 executing program 0: r0 = socket(0x22, 0x2, 0x4) getsockname$unix(r0, 0x0, 0x0) 10:45:07 executing program 2: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) 10:45:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="800037bbfa9ba1ce", 0x5dc, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 10:45:07 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x9, 0x0, &(0x7f0000000180)) 10:45:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f"], 0x28}}, 0x0) 10:45:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40014000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c080}, 0x800) ioctl(r0, 0xfffffc50, &(0x7f0000000140)="d2861988e4f69c4fe7087612d08930391115c5f43aa9944f826f3ddca0817b808be71a3b66159358a9a20d84bcbd09486ebd6d5b08e1158fc8b3dba0a3dba0b43f951cbb30bfffdd60e2ef238f20fdd360706f708954a2fb5de5559095b866295b67") socket$inet(0x2, 0x800, 0xff0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000012100)={0x0, 0x8}) epoll_create1(0x80000) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000132c0)=0x3, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000013300), 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000013340), 0xffffffffffffffff) 10:45:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlinkprop={0x24, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x5}]}, 0x24}}, 0x0) 10:45:08 executing program 1: r0 = socket(0x22, 0x2, 0x4) recvmsg$can_j1939(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10040) 10:45:08 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x29, 0x0, 0x0, 0x0) [ 147.856977][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.896563][ T5842] usb 6-1: USB disconnect, device number 6 [ 147.899053][ T27] audit: type=1804 audit(1705056308.141:5): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/145/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 10:45:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001f"], 0x28}}, 0x0) 10:45:08 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, 0x0, 0xfffffffffffffffe) 10:45:08 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000180)=0x144, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x71) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x4006, 0x4) [ 147.951232][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:45:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:08 executing program 3: r0 = socket(0x2, 0xa, 0x0) bind$can_j1939(r0, 0x0, 0x0) [ 148.004761][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:08 executing program 3: r0 = socket(0x11, 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x107, 0x5, 0x0, 0x0) 10:45:08 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=0x1, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:45:08 executing program 0: r0 = socket(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) 10:45:08 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x152}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/245, 0xf5}, {0x0}], 0x2}, 0x0) 10:45:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:08 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x3) 10:45:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f00000120c0)) 10:45:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xf, &(0x7f0000000080)=""/15, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x90) 10:45:08 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000042c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 10:45:08 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000003f80)) 10:45:08 executing program 1: pipe(&(0x7f0000000000)) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x24032, 0xffffffffffffffff, 0x0) 10:45:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0xb000000, 0x0, &(0x7f0000000040)) 10:45:08 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 10:45:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0) 10:45:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:08 executing program 5: r0 = socket(0x18, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 10:45:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) [ 148.654414][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:08 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) 10:45:09 executing program 0: bpf$BPF_PROG_QUERY(0xe, &(0x7f0000000200)={@cgroup, 0x0, 0xe748462c46c19fed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/18, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e00040000"], 0x54}}, 0x0) 10:45:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:09 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000027c0)=[{0x0}, {0x0}], 0x2}, 0x0) 10:45:09 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, &(0x7f0000000180)) 10:45:09 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f00000147c0), 0xffffffffffffffff) [ 148.859684][ T27] audit: type=1804 audit(1705056309.101:6): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/146/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 [ 148.896157][ T7118] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 10:45:09 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000000140)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 10:45:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 10:45:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:09 executing program 5: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) [ 148.910694][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0xe}, 0x0) 10:45:09 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 10:45:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:09 executing program 1: r0 = socket(0xa, 0x3, 0x3) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x7fffdf005000, 0x0, 0x12, r0, 0x0) 10:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x21, 0x0, &(0x7f0000000040)) 10:45:09 executing program 5: r0 = socket(0x22, 0x2, 0x4) sendmsg$unix(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x20000841) 10:45:09 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) 10:45:09 executing program 0: r0 = socket(0x15, 0x5, 0x0) bind$bt_l2cap(r0, 0xffffffffffffffff, 0x0) 10:45:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) [ 149.155357][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x9, 0x7, 0x6, 0x1}, 0x48) 10:45:09 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x30}}, 0x0) 10:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x0, 0x0, 0x0) 10:45:09 executing program 0: r0 = socket(0x1e, 0x5, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1}, 0x0) 10:45:09 executing program 1: r0 = socket(0x22, 0x2, 0x4) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 10:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x4d, 0x0, &(0x7f0000000040)) 10:45:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1cd}, 0x48) 10:45:09 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$XDP_RX_RING(r0, 0x88, 0x2, 0x0, 0x0) 10:45:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 149.475819][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x63, 0x4) 10:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4107}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:09 executing program 0: r0 = socket(0x18, 0x0, 0x1) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) 10:45:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0xfffffc50, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000131c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000013340), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000014700)=0x1000) 10:45:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) [ 149.618269][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:09 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000064c0)='cpu.stat\x00', 0x0, 0x0) 10:45:09 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 10:45:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:10 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) 10:45:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe14de956fda7abdd, 0x1, &(0x7f0000000180)=@raw=[@generic], &(0x7f00000001c0)='GPL\x00'}, 0x90) 10:45:10 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 149.801648][ T27] audit: type=1804 audit(1705056310.031:7): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/147/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 149.852433][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x1e, 0x0, &(0x7f0000000040)) 10:45:10 executing program 1: r0 = socket(0x23, 0x5, 0x0) bind$bt_l2cap(r0, 0xffffffffffffffff, 0x0) 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) 10:45:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x0, 0x0, 0x6}, 0x48) 10:45:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}]}}, {"d4"}}}}}, 0x5f) 10:45:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="03"], 0x28}}, 0x0) 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/18, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e0004"], 0x54}}, 0x0) 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) [ 150.313862][ T7239] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 10:45:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}]}}, {"d4"}}}}}, 0x5f) 10:45:10 executing program 0: r0 = socket(0x2b, 0x1, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 10:45:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:10 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:10 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:10 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}]}}, {"d4"}}}}}, 0x5f) [ 150.678734][ T7254] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 10:45:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) [ 150.716166][ T27] audit: type=1804 audit(1705056310.961:8): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/148/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x2}]}}, {"d4"}}}}}, 0x5f) 10:45:11 executing program 1: r0 = socket(0x1, 0x1, 0x0) bind$bt_l2cap(r0, 0xffffffffffffffff, 0x0) 10:45:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:11 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000180)) 10:45:11 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) 10:45:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x2}]}}, {"d4"}}}}}, 0x5f) 10:45:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) 10:45:11 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 151.255214][ T7302] __nla_validate_parse: 8 callbacks suppressed [ 151.255227][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) 10:45:11 executing program 1: r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 10:45:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10:45:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x38}}, 0x0) 10:45:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x2}]}}, {"d4"}}}}}, 0x5f) 10:45:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000a008) 10:45:11 executing program 1: r0 = socket(0xa, 0x2, 0x0) bind$isdn(r0, 0x0, 0x0) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 151.506401][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:11 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xe, 0x0, &(0x7f0000000180)) 10:45:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10:45:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10:45:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000a008) 10:45:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000406010100000000000000000a0000010500010007"], 0x40}}, 0x0) [ 151.643116][ T27] audit: type=1804 audit(1705056311.891:9): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/149/cgroup.controllers" dev="sda1" ino=1985 res=1 errno=0 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 151.722913][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.771909][ T7342] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 10:45:12 executing program 1: r0 = socket(0x22, 0x2, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:45:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x10000a008) 10:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 151.825357][ T27] audit: type=1804 audit(1705056312.071:10): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/150/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 10:45:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xc, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x53) 10:45:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10:45:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c65831300000000000000000000000000000000000000000000000002"], 0x48) 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 151.971726][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10:45:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000a008) [ 152.084146][ T27] audit: type=1804 audit(1705056312.331:11): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/151/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xc, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x53) [ 152.188105][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 152.294761][ T27] audit: type=1804 audit(1705056312.541:12): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/152/cgroup.controllers" dev="sda1" ino=1985 res=1 errno=0 10:45:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xc, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x53) 10:45:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf, &(0x7f0000000040)='syzkaller\x00'}, 0x90) [ 152.424587][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x0, 0x0, 0x0, {{}, {}, {0x3, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf, &(0x7f0000000040)='syzkaller\x00'}, 0x90) [ 152.620002][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0x2}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) [ 152.784234][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) [ 152.984955][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 5: sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000a008) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0x2}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:13 executing program 5: sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:13 executing program 5: sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 153.223485][ T27] audit: type=1804 audit(1705056313.471:13): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/153/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0x2}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:13 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:13 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x0, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0x8, "d58838848b91"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5b) 10:45:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 10:45:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x0, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x0, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0x8, "d58838848b91"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5b) 10:45:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 10:45:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000a008) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:45:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0x8, "d58838848b91"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5b) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) [ 154.218851][ T27] audit: type=1804 audit(1705056314.451:14): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/154/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0 10:45:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x1b, 0x0}, 0x0) 10:45:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xb, "d58838848b91ad416e"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:14 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xb, 0x0, &(0x7f0000000180)) 10:45:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20}}, 0x1c}}, 0x0) 10:45:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlinkprop={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x34}}, 0x0) 10:45:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xb, "d58838848b91ad416e"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xd}, 0x48) 10:45:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x200, 0x118, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_to_team\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 10:45:15 executing program 5: r0 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 10:45:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32, @ANYBLOB="08009e00"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000a008) 10:45:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e25, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 10:45:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xb, "d58838848b91ad416e"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001180)=[{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e80)='S', 0x1}], 0x1}], 0x1, 0x20004000) 10:45:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, 0x0}, 0x90) [ 155.127874][ T27] audit: type=1804 audit(1705056315.371:15): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/155/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 10:45:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)) 10:45:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, 0x0}, 0x90) 10:45:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 10:45:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xd, "d58838848b91ad416efe62"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:15 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, 0x0}, 0x90) 10:45:15 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x80, 0x0}, 0x0) 10:45:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x78, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast}, 0x0, @random, 0x0, @val, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 10:45:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlinkprop={0x20}, 0x33fe0}}, 0x0) 10:45:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:45:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xd, "d58838848b91ad416efe62"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:15 executing program 1: r0 = socket(0x11, 0x2, 0x0) getpeername$tipc(r0, 0x0, 0x0) 10:45:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @local, 0xa}, 0x1c) 10:45:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11}, 0x48) 10:45:16 executing program 5: r0 = socket(0x26, 0x5, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 10:45:16 executing program 1: socket(0x2b, 0x1, 0x76) 10:45:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) 10:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32, @ANYBLOB="08009e00"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000a008) 10:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:45:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xd, "d58838848b91ad416efe62"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:16 executing program 1: r0 = socket(0x22, 0x2, 0x4) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) 10:45:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0) 10:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 156.157952][ T27] audit: type=1804 audit(1705056316.401:16): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/156/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 10:45:16 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x6e}}}}}, 0x30}}, 0x0) 10:45:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:16 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) [ 156.386789][ T7693] __nla_validate_parse: 4 callbacks suppressed [ 156.386804][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:16 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 1: r0 = socket(0x1e, 0x5, 0x0) bind$bt_l2cap(r0, 0xffffffffffffffff, 0x0) 10:45:16 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) [ 156.503112][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) [ 156.732685][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32, @ANYBLOB="08009e00"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000a008) 10:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) [ 156.932967][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) [ 157.146144][ T27] audit: type=1804 audit(1705056317.381:17): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/157/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 10:45:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x0, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) [ 157.196918][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 10:45:17 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000001) 10:45:17 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:17 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000001) [ 157.399279][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 10:45:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x0, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000001) 10:45:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80), 0x0, 0x4000001) 10:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 157.638516][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80), 0x0, 0x4000001) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80), 0x0, 0x4000001) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 10:45:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x0, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 157.824706][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:45:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 158.093206][ T27] audit: type=1804 audit(1705056318.331:18): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/158/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 10:45:18 executing program 5: r0 = socket(0x1, 0x1, 0x0) bind$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) 10:45:18 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000000)=@l2tp6={0x2, 0x7400, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0}, 0x0) 10:45:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="220000006c0001"], 0x24}}, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0], 0x54}}, 0x0) 10:45:18 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0], 0x54}}, 0x0) 10:45:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:18 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r0, 0x8b2a, &(0x7f0000000040)) [ 158.451565][ T7845] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.474126][ T7847] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0], 0x54}}, 0x0) 10:45:18 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x48005) 10:45:18 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 10:45:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlinkprop={0x4c, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}]}]}, 0x4c}}, 0x0) 10:45:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) 10:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlinkprop={0x4c, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}]}]}, 0x4c}}, 0x0) 10:45:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x63) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) 10:45:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 10:45:19 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, &(0x7f0000000180)) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000"], 0x54}}, 0x0) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x1d, &(0x7f0000000140)={0x0, 0x84}}, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000"], 0x54}}, 0x0) 10:45:19 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x24) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) [ 159.017976][ T27] audit: type=1804 audit(1705056319.261:19): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/159/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000"], 0x54}}, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 5: r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a900"], 0x54}}, 0x0) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2000) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a900"], 0x54}}, 0x0) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 10:45:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a900"], 0x54}}, 0x0) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b"], 0x54}}, 0x0) 10:45:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b"], 0x54}}, 0x0) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b"], 0x54}}, 0x0) 10:45:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006c0013394216f97a089e245d", @ANYRES32=0x0, @ANYBLOB='4'], 0x20}}, 0x0) 10:45:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b000000"], 0x54}}, 0x0) 10:45:20 executing program 5: r0 = socket(0xa, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x2000) 10:45:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000013440)=@o_path={0x0}, 0x18) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b000000"], 0x54}}, 0x0) 10:45:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 5: r0 = socket(0x11, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) [ 159.962551][ T27] audit: type=1804 audit(1705056320.201:20): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/160/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b000000"], 0x54}}, 0x0) 10:45:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000013340), r0) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b0000000800"], 0x54}}, 0x0) 10:45:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)="fcffffff", 0x4) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b0000000800"], 0x54}}, 0x0) 10:45:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:20 executing program 5: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0xa, 0x0, &(0x7f0000000180)) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b0000000800"], 0x54}}, 0x0) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)="fdffffff", 0x4) 10:45:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x4, 0x0, 0x4, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x57) 10:45:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010"], 0x28}}, 0x0) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000040)) 10:45:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 10:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5b) 10:45:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlinkprop={0x24, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) 10:45:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:21 executing program 5: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006540), 0x48) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/20, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x78, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {@wo_ht={{}, {}, @broadcast}, 0x0, @random, 0x0, @val, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0xb}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 10:45:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5b) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) [ 160.957752][ T27] audit: type=1804 audit(1705056321.201:21): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/161/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 5: r0 = socket(0x29, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x53a) 10:45:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x4}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5b) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x794, 0x8, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82b41b47c67f1a894a394bfd3ef12378b57b832b95e3e0f71356e2034c012870"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x65c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x354, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7c897e4559991611bb96af70fe32a969dff9a150a0689563b15978ecb2607c63"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_PEERS={0xbd4, 0x8, 0x0, 0x1, [{0x330, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "17f0d5efe4ee76851d547bd02dcb99e4e0cc211f4d4f28400ebabddcd7dc75c4"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c4c240e7e16f86f8ce419779b69e2aa12af9e9952ea42d975381edb51af05ccd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}, {0x358, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x3a8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31dd6cb99f59afcbb86a5367849326f3ee8534641fdf2174a855d7402ae85483"}, @WGPEER_A_ALLOWEDIPS={0x338, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37b61a846d770d27c4e8ff3307ceeb37690c7c812fb02d09221c948b541bbd66"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x120, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e2c363bda8167150dfccb6c346aa1a6580e9f33d67ad725adca154b3aca1b05c"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x9b0, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x96c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x590, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x338, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebc3f69c868a4894b4b8e7de8ed1f062741a70a4f7464d6b00c21e183aa17db4"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x14c, 0x8, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}]}]}]}, 0x1ec4}}, 0x0) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000080)="4631ea9db75e57fd", 0x8}], 0x1}}], 0x2, 0x0) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 10:45:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x8, 0xf989, "f7c05a13"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 161.493672][ T8096] __nla_validate_parse: 28 callbacks suppressed [ 161.493688][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000004000), r0) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x8, 0xf989, "f7c05a13"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 10:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c0001000000", @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)) [ 161.748897][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.783150][ T8117] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c0001000000", @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0x2, 0x6, @dev}, 0x10) 10:45:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0x8, 0xf989, "f7c05a13"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) [ 161.804475][ T27] audit: type=1804 audit(1705056322.031:22): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/162/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 10:45:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x107, 0x7, 0x0, 0x0) [ 161.867306][ T8122] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:45:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c0001000000", @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c00010000000000000000", @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) [ 162.004924][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.014790][ T8133] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:45:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000006c000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004001904"], 0x24}}, 0x0) 10:45:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xa, 0xf989, "f7c05a133bd4"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:22 executing program 5: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0) [ 162.149887][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x301}, 0x14}}, 0x0) ioctl(r0, 0xfffffc50, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000013340), r1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000147c0), 0xffffffffffffffff) 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c00010000000000000000", @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x107, 0xa, 0x0, 0x0) [ 162.327179][ T8161] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:45:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c00010000000000000000", @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:22 executing program 5: r0 = socket(0xa, 0x3, 0x3) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/18, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) [ 162.419784][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.450029][ T8173] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 10:45:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xa, 0xf989, "f7c05a133bd4"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:22 executing program 5: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xb4050000) 10:45:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/18, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) [ 162.514234][ T8177] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 10:45:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 10:45:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0x0, 0x0) [ 162.618028][ T8186] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 10:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/18, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:22 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x78, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x5a, 0x2, {@wo_ht={{}, {}, @broadcast}, 0x0, @random, 0x0, @val, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x78}}, 0x0) 10:45:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xf, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xa, 0xf989, "f7c05a133bd4"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}, {"d4"}}}}}, 0x5f) 10:45:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a008) [ 162.750843][ T8197] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 10:45:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/19, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/19, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a008) 10:45:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}}}}}, 0x62) 10:45:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000006c000100"/19, @ANYRES32=0x0, @ANYBLOB="004601000000000008002e000400000014000300766c616e30000000000000000000000008000d00a9000000050021003b00000008001c"], 0x54}}, 0x0) 10:45:23 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}], 0x1, 0x4000051) 10:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:23 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a008) 10:45:23 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000040)) 10:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}}}}}, 0x62) 10:45:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000040)) 10:45:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlinkprop={0x20}, 0x9}}, 0x0) 10:45:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$sock(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 10:45:23 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003801480"], 0xb4}}, 0x0) 10:45:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x4, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xb, 0xf989, "f7c05a133bd4b8"}, @window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x5445, 0x800800}, @generic={0x0, 0xe, "d58838848b91ad416efe625f"}, @fastopen={0x22, 0x3, 'y'}]}}}}}}, 0x62) 10:45:23 executing program 1: syz_emit_ethernet(0x4ff9, 0x0, 0x0) 10:45:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:23 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 10:45:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10:45:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000000)="fbffffff", 0x4) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10:45:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x10020}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000625000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) 10:45:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10:45:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 10:45:24 executing program 1: sendto$l2tp(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 10:45:24 executing program 1: sendto$l2tp(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 164.331702][ T27] audit: type=1800 audit(1705056324.581:23): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1979 res=0 errno=0 10:45:24 executing program 1: sendto$l2tp(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 1: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19ab"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xb4}}, 0x0) 10:45:24 executing program 1: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xb4}}, 0x0) 10:45:24 executing program 1: socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) 10:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xb4}}, 0x0) 10:45:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19ab"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:25 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xb4}}, 0x0) 10:45:25 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x107, 0x2, 0x0, 0xf00) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19ab"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xb4}}, 0x0) 10:45:25 executing program 1: write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d81702000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xb4}}, 0x0) 10:45:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x0, @private0}, 0x80, 0x0}, 0xe00) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d81702000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a010000"], 0xb4}}, 0x0) 10:45:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffff}, 0x90) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d81702000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) [ 165.356538][ T27] audit: type=1804 audit(1705056325.601:24): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/168/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a010000"], 0xb4}}, 0x0) 10:45:25 executing program 4: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x33, 0x0, &(0x7f0000000180)) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d81702000000000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 10:45:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001180)=[{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e80)='S', 0x1}], 0x1, &(0x7f0000001080)=[@prinfo={0x18, 0x84, 0x5, {0x10}}], 0x18}], 0x1, 0x20004000) 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a010000"], 0xb4}}, 0x0) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d81702000000000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:25 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x149}, @void}}}, 0x1c}}, 0x0) 10:45:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30"], 0xb4}}, 0x0) 10:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d81702000000000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:25 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, &(0x7f0000000180)) 10:45:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30"], 0xb4}}, 0x0) 10:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(r0, 0x0, 0x0) 10:45:26 executing program 4: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 10:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30"], 0xb4}}, 0x0) 10:45:26 executing program 1: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1bb5eab7) 10:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000040)) 10:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000240000000"], 0xb4}}, 0x0) 10:45:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x600000}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="b400000030008b04000000000000000000000000a0000100480002000b0001006374696e666f00001c000280180003000000000000000000090000000000000000000000040006000c00070000000000000000000c00087832e14b7f042b7c00540001000800010072"], 0xb4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10:45:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000240000000"], 0xb4}}, 0x0) 10:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x9, 0x7, 0x6}, 0x48) 10:45:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 166.268368][ T27] audit: type=1804 audit(1705056326.511:25): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/169/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 10:45:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x9, 0x7, 0x6}, 0x48) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008000240000000"], 0xb4}}, 0x0) 10:45:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:26 executing program 1: bpf$BPF_PROG_QUERY(0x7, &(0x7f0000000200)={@cgroup, 0x0, 0xe748462c46c19fed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000"], 0xb4}}, 0x0) 10:45:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}}, 0x0) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000"], 0xb4}}, 0x0) 10:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) [ 166.570168][ T8509] __nla_validate_parse: 33 callbacks suppressed [ 166.570183][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.593456][ T8508] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 10:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) 10:45:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000"], 0xb4}}, 0x0) [ 166.623802][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:26 executing program 4: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:27 executing program 4: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) [ 166.722557][ T8518] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 10:45:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003"], 0xb4}}, 0x0) 10:45:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003"], 0xb4}}, 0x0) 10:45:27 executing program 4: sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) [ 166.798285][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c0003"], 0xb4}}, 0x0) 10:45:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c00038014"], 0xb4}}, 0x0) 10:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) [ 166.971757][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c00038014"], 0xb4}}, 0x0) 10:45:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 167.108589][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:27 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a008) 10:45:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080002400000000008000140000000002c00038014"], 0xb4}}, 0x0) 10:45:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x0, 0x0, 0x6}, 0x48) [ 167.236557][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:27 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a008) 10:45:27 executing program 5: r0 = socket(0x11, 0x2, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x40010041, 0x0, 0x0) 10:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:27 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r0, 0x0, 0x10000a008) 10:45:27 executing program 5: r0 = socket(0x22, 0x2, 0x4) recvfrom$unix(r0, 0x0, 0x0, 0x40000021, 0x0, 0x0) 10:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) [ 167.443926][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:27 executing program 1: r0 = socket(0xa, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2) 10:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 10:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:27 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x107, 0x17, 0x0, 0x0) 10:45:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) [ 167.615066][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000040)=0xfffffffffffffd4e) 10:45:27 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 10:45:28 executing program 5: socket(0x23, 0x0, 0x80000000) 10:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 10:45:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:28 executing program 5: r0 = socket(0x2a, 0x2, 0x0) accept$netrom(r0, 0x0, 0x0) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) 10:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffff2}}, 0x0) 10:45:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0), 0x0, 0x0) 10:45:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f000000a5c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)="8d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006bc0)="de", 0x1}], 0x1, &(0x7f0000006f00)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0) 10:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0), 0x0, 0x0) 10:45:28 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b0e", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0), 0x0, 0x0) 10:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x84}, 0x2}, 0x0) 10:45:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:28 executing program 5: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003940)='lp\x00', 0x3) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b0e", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:28 executing program 1: fspick(0xffffffffffffffff, &(0x7f00000028c0)='./file0\x00', 0x0) 10:45:28 executing program 5: stat(&(0x7f00000062c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 168.544335][ T27] audit: type=1804 audit(1705056328.791:26): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/185/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 10:45:28 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 10:45:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:28 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x30) 10:45:29 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 1: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000004640), 0x2, 0x0) readv(r0, &(0x7f0000005c40)=[{&(0x7f0000004680)=""/157, 0x9d}, {0x0}], 0x2) 10:45:29 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x478182, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 1: fsopen(&(0x7f0000001940)='sockfs\x00', 0x0) 10:45:29 executing program 5: r0 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:29 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003600)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 169.469120][ T27] audit: type=1804 audit(1705056329.711:27): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/186/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 10:45:29 executing program 5: r0 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002540), 0x81, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3e80000000) 10:45:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:29 executing program 5: r0 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:29 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4a10}}], 0x20}], 0x1, 0x0) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}], 0x1, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:30 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000014}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 170.515812][ T27] audit: type=1804 audit(1705056330.761:28): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/187/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 10:45:30 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000014}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:30 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x90000014}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 1: statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6000, 0x0, 0x0) 10:45:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}], 0x1, 0x0) 10:45:31 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x210100, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:31 executing program 1: r0 = io_uring_setup(0x2740, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x4, 0x0, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:31 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 171.407859][ T27] audit: type=1804 audit(1705056331.651:29): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/188/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 10:45:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x163040, 0x0) 10:45:31 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) preadv(r0, &(0x7f0000002900)=[{&(0x7f0000002600)=""/158, 0x9e}], 0x1, 0x0, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:31 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:31 executing program 1: r0 = io_uring_setup(0x2740, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x15, 0x0, 0x0) [ 171.675064][ T8861] __nla_validate_parse: 23 callbacks suppressed [ 171.675077][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:32 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000065c0), 0x20) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x28f03, 0x0) read$rfkill(r0, 0x0, 0x0) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) [ 171.855413][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x0, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000005ec0), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000006000)={0x1, {0x0, 0x0, 0x0}}, 0x48) 10:45:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}], 0x1, 0x0) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) [ 172.045509][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x0, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) [ 172.252335][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x0, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) [ 172.392650][ T27] audit: type=1804 audit(1705056332.641:30): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/189/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 172.489494][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:32 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x0, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:32 executing program 5: r0 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) [ 172.687259][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x0, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) [ 172.825937][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:33 executing program 5: r0 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x0, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)}], 0x1, 0x0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) [ 173.022404][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) [ 173.223177][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) [ 173.378117][ T27] audit: type=1804 audit(1705056333.621:31): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/190/cgroup.controllers" dev="sda1" ino=1982 res=1 errno=0 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) [ 173.445415][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) epoll_pwait(r0, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:33 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:33 executing program 1: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)}], 0x1, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(0xffffffffffffffff, &(0x7f0000002180), 0x51, 0x0, 0x0, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c40900000000"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000002200)={0x5a473c446f618371}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x90000014}) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 174.316932][ T27] audit: type=1804 audit(1705056334.561:32): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/191/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 10:45:34 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000005140), 0x0, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:34 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 10:45:34 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0xb406c630dc739ee8) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000000}) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:34 executing program 5: r0 = epoll_create1(0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002200)={0x90000004}) 10:45:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:34 executing program 5: connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x0, @remote, 'dvmrp0\x00'}}, 0x1e) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) 10:45:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)}], 0x1, 0x0) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:35 executing program 5: bpf$PROG_LOAD_XDP(0x23, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x90) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40049409, 0x0) 10:45:35 executing program 5: socketpair$unix(0x8, 0x0, 0x0, &(0x7f0000000300)) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:35 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100ba00000000001d030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f00000002c0)=""/167, 0x26, 0xa7, 0x1}, 0x20) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 5: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:45:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c40900000000"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:35 executing program 5: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 5: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 175.294565][ T27] audit: type=1804 audit(1705056335.541:33): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/192/cgroup.controllers" dev="sda1" ino=1986 res=1 errno=0 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 5: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000080)) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:35 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, &(0x7f0000000040)=""/220, 0xdc) 10:45:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000080)) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20}], 0x20}], 0x1, 0x0) 10:45:35 executing program 5: syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xa, &(0x7f00000004c0)={[{@fmask={'fmask', 0x3d, 0x7}}, {@sparse}, {@sys_immutable}, {@fmask}, {@nohidden}, {@force}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@force}, {@showmeta}, {@sparse}, {@fmask={'fmask', 0x3d, 0x6}}, {@acl}, {@gid}]}, 0x0, 0x1f24d, &(0x7f000003e940)="$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") 10:45:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, r2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000080)) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 10:45:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 175.844947][ T9136] loop5: detected capacity change from 0 to 4096 [ 175.871205][ T9136] /dev/loop5: Can't open blockdev 10:45:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 10:45:36 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c40900000000"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4) 10:45:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:36 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r0) 10:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:36 executing program 5: syz_open_dev$media(&(0x7f0000007900), 0x0, 0x0) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xa0) 10:45:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000180)) 10:45:36 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) [ 176.248226][ T27] audit: type=1804 audit(1705056336.491:34): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/193/cgroup.controllers" dev="sda1" ino=1981 res=1 errno=0 10:45:36 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, 0x0) 10:45:36 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) getpid() socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x10c, 0x0, 0x200, 0x7, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48088}, 0x40000800) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20}], 0x20}], 0x1, 0x0) 10:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 176.768670][ T9203] __nla_validate_parse: 21 callbacks suppressed [ 176.768680][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 176.906697][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c657"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) [ 177.014362][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000180)) [ 177.174965][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.195666][ T27] audit: type=1804 audit(1705056337.441:35): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/194/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) getpid() socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x10c, 0x0, 0x200, 0x7, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48088}, 0x40000800) 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 177.365093][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001000000000000"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000500)=[@sndinfo={0x20}], 0x20}], 0x1, 0x0) [ 177.466160][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001000000000000"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 177.641484][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 177.746483][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001000000000000"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="0503460008003e000000020088ca", 0x36, 0x0, 0x0, 0x0) [ 177.851553][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.871690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #50!!! 10:45:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c657"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001000000000000000000"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) [ 177.962472][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000180)) [ 178.142660][ T27] audit: type=1804 audit(1705056338.381:36): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/195/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) getpid() socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x10c, 0x0, 0x200, 0x7, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48088}, 0x40000800) 10:45:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001000000000000000000"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 10:45:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200), 0x10) [ 178.411117][ T5095] Bluetooth: hci0: command 0x080f tx timeout 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 10:45:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd700006000000020000002c000680060001000a0000000800060000000000050002003f000000080006001e000000060001000a0000000800040008000000040006801c0001"], 0x70}}, 0x0) 10:45:38 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@rand_addr, @empty}) 10:45:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff00000001000000000000000000"], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x3d7f4ba9}) 10:45:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 10:45:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000500)={0x0}) 10:45:39 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd606275cd00303a00fe702d8fb57669122c020000000000bbff65e58e6835", @ANYRES32], 0x0) 10:45:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/23], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:39 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x90) 10:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 10:45:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c657"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:39 executing program 4: prctl$PR_SET_KEEPCAPS(0x1c, 0xdaffffffffffffff) 10:45:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 10:45:39 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 10:45:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000180)) 10:45:39 executing program 4: ustat(0x100000001, &(0x7f0000000500)) 10:45:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/23], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:39 executing program 4: bpf$PROG_LOAD_XDP(0x3, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x90) 10:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e", 0x7, 0x0, 0x0, 0x0) [ 179.154449][ T27] audit: type=1804 audit(1705056339.381:37): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/196/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 10:45:39 executing program 4: iopl(0x4) [ 179.201338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 179.210189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 179.230612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! 10:45:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/23], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:39 executing program 4: prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 10:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e", 0x7, 0x0, 0x0, 0x0) 10:45:39 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 10:45:39 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3ea, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e", 0x7, 0x0, 0x0, 0x0) 10:45:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:39 executing program 1: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x48) futex(&(0x7f0000000400), 0x3, 0x0, 0x0, &(0x7f0000000480)=0x1, 0x0) 10:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002", 0xb, 0x0, 0x0, 0x0) 10:45:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 10:45:39 executing program 1: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 10:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002", 0xb, 0x0, 0x0, 0x0) 10:45:40 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002", 0xb, 0x0, 0x0, 0x0) 10:45:40 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x541b, 0x0) 10:45:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 10:45:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x3f, 0x100, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x7}, 0x48) 10:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088", 0xd, 0x0, 0x0, 0x0) 10:45:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa05"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "995b30"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) 10:45:40 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x4000020c) 10:45:40 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000180)) 10:45:40 executing program 1: socketpair(0x23, 0x0, 0x800, &(0x7f0000000280)) 10:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088", 0xd, 0x0, 0x0, 0x0) 10:45:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) 10:45:40 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000180)) 10:45:40 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) 10:45:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) [ 180.167800][ T27] audit: type=1804 audit(1705056340.411:38): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/197/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 10:45:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 10:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc8}}}}]}, 0x58}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e000000020088", 0xd, 0x0, 0x0, 0x0) 10:45:40 executing program 5: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000180)) 10:45:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc0045878, 0x0) 10:45:40 executing program 4: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x20, 0x0) 10:45:40 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000180)) 10:45:40 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x541b, 0x0) 10:45:40 executing program 3: io_uring_setup(0x3b88, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:45:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="740800005a0001"], 0x874}}, 0x0) 10:45:40 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000180)) 10:45:40 executing program 4: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x0) 10:45:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) [ 180.482163][ T5095] Bluetooth: hci0: command 0x080f tx timeout 10:45:40 executing program 3: io_uring_setup(0x3b88, &(0x7f0000000000)={0x0, 0x0, 0x2}) 10:45:40 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000180)) 10:45:40 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000003b80), 0x0, 0x0) 10:45:40 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) 10:45:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000180)) 10:45:40 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{}, {}]}) 10:45:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10:45:40 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 10:45:40 executing program 4: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x421}, 0x14}}, 0x0) 10:45:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000180)) [ 180.759973][ T5095] Bluetooth: hci3: ACL packet for unknown connection handle 0 10:45:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa05"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18}, 0x0) 10:45:41 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280), 0x4) 10:45:41 executing program 4: socket(0x1, 0x0, 0x2) 10:45:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000180)) 10:45:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10:45:41 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000000)={0x80000000, &(0x7f00000000c0), &(0x7f0000000140)}) 10:45:41 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xc}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:41 executing program 1: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket(0x8, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x0, 0x0) 10:45:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 10:45:41 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000080)=""/98, 0x62, 0x0, 0x0, 0x2}}, 0x48) 10:45:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 10:45:41 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{}, "727bf82c30c38c9f", "77c03ab35ef81ed787a0774dbfd69ca5", "6d14f48c", "0f91b50015e29c15"}, 0x28) 10:45:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "995b30", 0x0, 0x20}) write$bt_hci(r0, 0x0, 0x0) 10:45:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) [ 181.079484][ T27] audit: type=1804 audit(1705056341.321:39): pid=9465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/198/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 10:45:41 executing program 1: r0 = syz_usbip_server_init(0x2) write$usbip_server(r0, &(0x7f0000000040)=@ret_unlink, 0x30) 10:45:41 executing program 4: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000500)={0x18}, 0x18) 10:45:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4142, 0x0) 10:45:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 10:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}}, 0x0) [ 181.246806][ T9478] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 181.253354][ T9478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 181.269130][ T9478] vhci_hcd vhci_hcd.0: Device attached 10:45:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4142, 0x0) 10:45:41 executing program 5: r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r0, 0x6919, 0x0, 0x0, 0x0, 0x0) 10:45:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x0, &(0x7f0000000040)) [ 181.303306][ T9479] vhci_hcd: connection closed [ 181.310377][ T11] vhci_hcd: stop threads [ 181.331962][ T11] vhci_hcd: release socket [ 181.354914][ T11] vhci_hcd: disconnect device 10:45:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4142, 0x0) 10:45:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000003c0)) 10:45:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) 10:45:41 executing program 4: socketpair(0x0, 0x13, 0x0, 0x0) 10:45:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4142, 0x0) 10:45:41 executing program 4: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x2, 0x9, {}, {}, 0xc9a, 0x4}) syz_clone(0x40000000, &(0x7f0000000040), 0x0, &(0x7f0000000080), 0x0, 0x0) 10:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x2c}}, 0x0) 10:45:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x0, &(0x7f0000000040)) 10:45:41 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r0, 0x6919, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x800, @mcast2, 0x6}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="daffc308ef002c52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000080)='\x00', 0x1}], 0x2}, 0x0) 10:45:42 executing program 4: bpf$PROG_LOAD_XDP(0x12, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x90) 10:45:42 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x0, &(0x7f0000000040)) 10:45:42 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 10:45:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa05"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:42 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x40086602, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:45:42 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff5}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 10:45:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)) 10:45:42 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0x7, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x0, 0x0, 0x0, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) 10:45:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, 0x0) 10:45:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "995b30"}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) 10:45:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "11bcdd"}) [ 182.341619][ T27] audit: type=1804 audit(1705056342.581:40): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/199/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 10:45:42 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90) 10:45:42 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 10:45:42 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000380), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000003c0)) 10:45:42 executing program 4: syz_genetlink_get_family_id$smc(&(0x7f00000022c0), 0xffffffffffffffff) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={0x0}}, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000004680)) 10:45:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, 0x0) 10:45:42 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 10:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:45:42 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r0, 0x6919, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x800, @mcast2, 0x6}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="daffc308ef002c52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000080)='\x00', 0x1}], 0x2}, 0x0) 10:45:42 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x90) [ 182.562444][ T5095] Bluetooth: hci0: command 0x080f tx timeout 10:45:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) 10:45:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040), 0x8) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:45:43 executing program 5: sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x25b6b587c227bfdc) 10:45:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="8cdd47eb81ba04bf2d1931bed795084efabc988043f88aa2e3c64b487a6eec1b92189b10b341382b2965700d4bef9b2581282427bd3f21db7e6fbef20b8929b027ec19abbd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3d4504041cffffff0000000100"/24], 0xd8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl(r1, 0x8b2a, 0x0) 10:45:43 executing program 4: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000140)={[{@stats}], [{@dont_measure}]}) 10:45:43 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 10:45:43 executing program 5: prctl$PR_SET_KEEPCAPS(0x7, 0x0) 10:45:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:43 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000180)=@ringbuf, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, &(0x7f00000002c0)}, 0x90) 10:45:43 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) 10:45:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 183.273195][ T9588] binder: Unknown parameter 'dont_measure' 10:45:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 10:45:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 10:45:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b9, &(0x7f0000000f40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@can_newroute={0x38, 0x18, 0x600, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x2}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x24005) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) write(r0, &(0x7f0000000300)="ba7d68abe19be01b2f555e797d778d73d062cdbf066bcf02359b7468dc8195ca35d87e1fd086a2f43ab6ebef8271a90b83ea971d993a082d24aa53e81448d0e47a72a97552d499feaf7cd56d36003864ada64c66e66675ed083413398f6eec0621c4a4e4d75960b2327e1ae64e83ae514ad671cbcf7b35b7a44665b3bbe111e839", 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) 10:45:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=@raw=[@ringbuf_query], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1}, 0x90) [ 183.411826][ T27] audit: type=1804 audit(1705056343.661:41): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/200/cgroup.controllers" dev="sda1" ino=1986 res=1 errno=0 [ 183.463942][ T9604] loop5: detected capacity change from 0 to 128 10:45:43 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r0, 0x6919, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x800, @mcast2, 0x6}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="daffc308ef002c52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000080)='\x00', 0x1}], 0x2}, 0x0) 10:45:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:45:43 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 10:45:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000004c0)) 10:45:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:45:43 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:45:45 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0xa5b0cb5b7125d2f4}) 10:45:45 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}) [ 184.960411][ T5095] Bluetooth: hci0: command 0x080f tx timeout [ 184.977723][ T27] audit: type=1804 audit(1705056345.101:42): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir657308138/syzkaller.JNZNgZ/420/bus" dev="sda1" ino=1980 res=1 errno=0 10:45:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:45:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 10:45:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b9, &(0x7f0000000f40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@can_newroute={0x38, 0x18, 0x600, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x2}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x24005) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) write(r0, &(0x7f0000000300)="ba7d68abe19be01b2f555e797d778d73d062cdbf066bcf02359b7468dc8195ca35d87e1fd086a2f43ab6ebef8271a90b83ea971d993a082d24aa53e81448d0e47a72a97552d499feaf7cd56d36003864ada64c66e66675ed083413398f6eec0621c4a4e4d75960b2327e1ae64e83ae514ad671cbcf7b35b7a44665b3bbe111e839", 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r5, r6, 0x0, 0x1dd00) [ 185.103713][ T27] audit: type=1800 audit(1705056345.101:43): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1980 res=0 errno=0 10:45:45 executing program 1: r0 = io_uring_setup(0x2e10, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 10:45:45 executing program 3: bpf$PROG_LOAD_XDP(0xa, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x90) 10:45:45 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 10:45:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:45:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 10:45:45 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, 0x0}) [ 185.262903][ T9638] loop5: detected capacity change from 0 to 128 10:45:45 executing program 3: clock_settime(0x0, &(0x7f0000003a80)={0x77359400}) 10:45:45 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) [ 185.292038][ T27] audit: type=1804 audit(1705056345.527:44): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/201/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 03:33:20 executing program 1: bpf$PROG_LOAD_XDP(0x7, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x90) 03:33:20 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x7fffffffffffffff]}, 0x8}) 03:33:20 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x61, 0x0, 0x0, 0x0, 0x85ffffff}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 03:33:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:20 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) 03:33:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 03:33:20 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:20 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002380)={0x6, 0xf, &(0x7f0000002180)=@ringbuf, &(0x7f0000002240)='syzkaller\x00', 0x9, 0x14, &(0x7f0000002280)=""/20}, 0x90) [ 185.760514][ T27] audit: type=1804 audit(2000000000.359:45): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir657308138/syzkaller.JNZNgZ/421/bus" dev="sda1" ino=1967 res=1 errno=0 03:33:20 executing program 1: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000002c00), 0x1, 0x0) 03:33:20 executing program 3: syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$unix(r1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, 0x0, 0x12c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) [ 185.885488][ T27] audit: type=1800 audit(2000000000.359:46): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1967 res=0 errno=0 03:33:20 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 03:33:20 executing program 1: write$usbip_server(0xffffffffffffffff, 0x0, 0x0) syz_usbip_server_init(0x3) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 03:33:20 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:21 executing program 5: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x10301) 03:33:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:21 executing program 0: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 186.446484][ T9682] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 186.453038][ T9682] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 03:33:21 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) 03:33:21 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) [ 186.489775][ T9682] vhci_hcd vhci_hcd.0: Device attached [ 186.509920][ T9683] vhci_hcd: connection closed [ 186.515203][ T2854] vhci_hcd: stop threads 03:33:21 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) [ 186.549281][ T2854] vhci_hcd: release socket 03:33:21 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) [ 186.579131][ T2854] vhci_hcd: disconnect device 03:33:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x8, 0x4) [ 186.616315][ T27] audit: type=1804 audit(2000000001.259:47): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/202/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 03:33:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) 03:33:21 executing program 0: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:21 executing program 4: r0 = syz_open_dev$media(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 03:33:21 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x6}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 03:33:21 executing program 5: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 03:33:21 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 03:33:21 executing program 3: syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$unix(r1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, 0x0, 0x12c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) 03:33:21 executing program 5: syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$unix(r1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, 0x0, 0x12c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) 03:33:21 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 03:33:21 executing program 0: r0 = socket$inet6(0xa, 0x0, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 187.070538][ T5090] Bluetooth: hci0: command 0x0401 tx timeout 03:33:22 executing program 3: syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$unix(r1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, 0x0, 0x12c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) 03:33:22 executing program 5: syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$unix(r1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, 0x0, 0x12c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) 03:33:22 executing program 1: syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$unix(r1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, 0x0, 0x12c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) 03:33:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:23 executing program 4: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0, 0x0) 03:33:23 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:33:24 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:33:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:33:24 executing program 3: mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 03:33:24 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 03:33:24 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) [ 189.817780][ T27] audit: type=1804 audit(2000000004.449:48): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/203/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x0, "973128", 0x9, 0x8f}) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) [ 189.921137][ T5090] Bluetooth: hci0: command 0x0401 tx timeout 03:33:24 executing program 5: mq_open(&(0x7f0000000b00)='netdevsim\x00', 0x0, 0x0, 0x0) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340), 0x0, 0x0, 0x0) 03:33:24 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x90) 03:33:24 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000003c0)) 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) 03:33:24 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) 03:33:24 executing program 1: setrlimit(0x0, &(0x7f0000000000)={0x7, 0x9}) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) 03:33:24 executing program 1: clock_getres(0xbb3282ccaefeb7ef, 0x0) 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:24 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0) 03:33:24 executing program 5: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)={0x7}, &(0x7f00000001c0), 0x0) 03:33:24 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1}, 0x5) 03:33:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd700006000000020000002c000680060001000a0000000800060000000000050002003f000000080006001e000000060001000a0000000800040008000000040006801c00018008000300ffffffff0500020065000000060005"], 0x70}}, 0x0) 03:33:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)) [ 190.419991][ T9826] __nla_validate_parse: 19 callbacks suppressed [ 190.420006][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:33:25 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 03:33:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:25 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x6a00}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 03:33:25 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x90) 03:33:25 executing program 4: clock_gettime(0x0, &(0x7f0000000f80)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000ec0), 0x0, 0x0, &(0x7f0000000fc0)={0x0, r0+60000000}, &(0x7f0000001040)={&(0x7f0000001000)={[0xa6]}, 0x8}) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:25 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) 03:33:25 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x4020940d, &(0x7f0000000880)) 03:33:25 executing program 5: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 03:33:25 executing program 1: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000140)={[{@stats}]}) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:25 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x81, 0x8}}}}, 0x15) [ 190.712275][ T9847] binder: Binderfs stats mode cannot be changed during a remount 03:33:25 executing program 3: r0 = io_uring_setup(0x2e10, &(0x7f00000000c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 03:33:25 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x801c581f, 0x0) 03:33:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 190.766732][ T27] audit: type=1804 audit(2000000005.409:49): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/204/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 03:33:25 executing program 1: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x8}}}}, 0x15) 03:33:25 executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000033c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:25 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 03:33:25 executing program 1: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r0, 0x421, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 03:33:25 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000140)=@raw=[@func], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x90) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:25 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$vhost_msg(r0, 0x0, 0x0) 03:33:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x61}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x90) 03:33:25 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x200900, 0x2) 03:33:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x5450, 0x0) 03:33:25 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x3) 03:33:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 03:33:25 executing program 1: syz_open_dev$usbmon(&(0x7f00000003c0), 0x7ff, 0x0) 03:33:25 executing program 3: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x9302da60e7152d2e) 03:33:25 executing program 5: prctl$PR_SET_KEEPCAPS(0x59616d61, 0x0) [ 191.138526][ T9885] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 191.145067][ T9885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.189960][ T9885] vhci_hcd vhci_hcd.0: Device attached [ 191.212254][ T9887] vhci_hcd: connection closed [ 191.213519][ T2509] vhci_hcd: stop threads [ 191.245266][ T2509] vhci_hcd: release socket [ 191.254147][ T2509] vhci_hcd: disconnect device 03:33:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:26 executing program 1: socket$inet6(0xa, 0x80000, 0xcb) open$dir(&(0x7f0000000000)='./file0\x00', 0x8040, 0x58) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000180)=""/253, &(0x7f0000000280)=0xfd) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "2f6697338acd5d29", "c35c4e86b153d4a29ea0ed9437bed5881f4690e63ca874f7a742d6b66713ab14", "b3e7f719", "98aae2bcba79efb9"}, 0x38) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x40000422) mq_open(&(0x7f0000000040)='@\x00', 0x40, 0x10, &(0x7f0000000080)={0x0, 0x10000, 0x4, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000002c0)) 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 03:33:26 executing program 3: process_vm_writev(0x0, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) 03:33:26 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:33:26 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x781040, 0x0) 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 03:33:26 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 03:33:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "55d9bca742681d46", "8a76ea2bf371274618e8ec7405657053", "7ba70f9e", "6b62914fb5b0f944"}, 0x28) 03:33:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) 03:33:26 executing program 1: timer_create(0x3, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)) 03:33:26 executing program 3: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/183) 03:33:26 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x208800, 0xe) 03:33:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff7000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 03:33:26 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x4500, 0x16) [ 191.701702][ T27] audit: type=1804 audit(2000000006.339:50): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/205/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 03:33:26 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 03:33:26 executing program 5: pipe2$9p(&(0x7f00000000c0), 0x80000) 03:33:26 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) 03:33:26 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x4402, 0x0) 03:33:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 03:33:26 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x86101, 0x50) 03:33:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') flock(r0, 0x8) 03:33:26 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flock(r0, 0x8) 03:33:26 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000001680), 0x600, 0x0) 03:33:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3486, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 03:33:26 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x200000, 0x28) 03:33:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 191.992660][ T27] audit: type=1804 audit(2000000006.639:51): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir657308138/syzkaller.JNZNgZ/450/file0" dev="sda1" ino=1967 res=1 errno=0 [ 192.017335][ T5090] Bluetooth: hci4: command 0x0401 tx timeout [ 192.017359][ T5090] Bluetooth: hci0: command 0x0401 tx timeout 03:33:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) 03:33:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000140)) 03:33:27 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0) 03:33:27 executing program 5: shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) 03:33:27 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x185002, 0x0) 03:33:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 03:33:27 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x92ce89b84d105f60, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x84400, 0x52) 03:33:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:27 executing program 3: clock_gettime(0x289f727e789f1e3c, 0x0) 03:33:27 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:33:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 03:33:27 executing program 0: open$dir(&(0x7f0000000140)='./file0\x00', 0x4a40, 0x0) [ 192.488075][ T27] audit: type=1800 audit(2000000007.129:52): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1982 res=0 errno=0 03:33:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0xffffffffffffff21) 03:33:27 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x0) [ 192.561487][ T27] audit: type=1800 audit(2000000007.129:53): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1982 res=0 errno=0 03:33:27 executing program 5: open$dir(&(0x7f0000000040)='.\x00', 0x80081, 0x0) 03:33:27 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x10000, 0x0) 03:33:27 executing program 1: recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40002041, 0x0, 0x0) 03:33:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:27 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) [ 192.631418][ T27] audit: type=1800 audit(2000000007.239:54): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1977 res=0 errno=0 [ 192.652228][ C1] vkms_vblank_simulate: vblank timer overrun 03:33:27 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 03:33:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=0xffffffffffffffff) 03:33:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x41, 0xb, "79d0ccf0fd87267d418b08ebe406d7946b6ee8729654ca963c2c92ca99d768275bc0ca3149c9454e905ee3600cff59b7f758b8d2374a820897f18ad927"}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc1, 0xb, "39c9c5c25205818697db061b6fd2d9c668bec9dc0d1abc816339b027b8696ed31ccc096ccbef837cd4a812f244ab390d377e1e8c36e638ab9f3bc53f081b8fa432927c78280b563a0baa40eb4cd0f7ea9e33b1b7dd395273eb43bb8843c26d2f14b95b2e198bb3ddb02dab62187c4b692ca1e7a59d82ab963b6c1e9a7225bf9038e8b5bdfe00028f72bdf926903ddd66b67f069ccaa323a110a0c2e27adc44c9b225a94e8a38412beff119630d6a6c0440bf931ba21594034dbcd9b1de"}]}, @NL80211_ATTR_NAN_FUNC={0xd94, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd6c, 0xe, 0x0, 0x1, [{0x99, 0x0, "2f4c704cc764ffb3f7cc58a72571cce8ef6fd8c661175bf7f87c8c1f8e081bd480c19aaf4b5b0e59c0f71c11d07cd284c256a45e49a071cce5ecff23b4ab945eae928bcbbf3f1c9aba55885a4b9116cbef1249c8d9585e439e3abdc4a5e1be66e6766ac113f7526baa418b1fb9a21e15828d73bf74398b9d5345ab6b54a87882d401b8436f0baf4bc9477a222f5e35262ed55857fc"}, {0xb9, 0x0, "8847756d72c61943a2ac1e13d234ed4886d1be6002019aa46436a73f11bc386b5f5dc026f5e9bc41948fc6b72a108ccd7041d7b73872478be25a31d5e8056321b67386609ec408933ca2a7218522cb97c77bdcd41d08dd813f8e277024b0ff0fcd2d2bf56e32af20beb4a3520da338fcfc3c128a582d71857e340da975a2064755aae600668a0800fe94b52abc35714d590f8c904252c14ca29a2f62e5ee2c66058366d09d1aff823629e378d9f441acc955fe74d9"}, {0x2d, 0x0, "cb3f7552b1ad402d82db98d48604d3a200214e7ef192a382deab8429387bec48aad35986191365e622"}, {0x41, 0x0, "d7733cc50baf193e707482ee9ff03bc044b4c13e0ef2b43067dd53b365bb91029c855156ff16452c7a07eaeaef2599ddb7c954be80bd407170f211bade"}, {0x101, 0x0, "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"}, {0xa95, 0x0, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x4}]}]}, 0xec4}}, 0x20004004) 03:33:27 executing program 0: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) 03:33:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080), &(0x7f0000000140)=0x4) 03:33:27 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$char_usb(r0, 0x0, 0xffffffffffffff7e) 03:33:27 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x24cb40, 0x152) 03:33:27 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) listen(r0, 0x0) 03:33:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:27 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0/file0\x00', 0x40000004) 03:33:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 03:33:27 executing program 5: io_setup(0x970, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x0, 0x0) 03:33:27 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x22000, 0x0) 03:33:27 executing program 1: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) 03:33:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 03:33:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x18) 03:33:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 03:33:27 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:33:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:27 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1040, 0x0) 03:33:27 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) 03:33:27 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x85101, 0x50) 03:33:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:33:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) 03:33:27 executing program 3: timer_create(0x2, &(0x7f0000000140)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) [ 193.107102][ T27] audit: type=1804 audit(2000000007.749:55): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1387582663/syzkaller.0IIuOo/383/file0" dev="sda1" ino=1985 res=1 errno=0 03:33:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 03:33:27 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 03:33:27 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) 03:33:27 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) 03:33:27 executing program 4: select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x2}, 0x0, &(0x7f00000001c0)={0x77359400}) 03:33:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 03:33:27 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000200), 0x0) 03:33:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) 03:33:27 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc18) 03:33:27 executing program 4: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) 03:33:27 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x216201, 0x80) 03:33:28 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:33:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) 03:33:28 executing program 1: shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffa000/0x1000)=nil) 03:33:28 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 03:33:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) futimesat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 03:33:28 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') 03:33:28 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xc) 03:33:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 03:33:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 03:33:28 executing program 4: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000001980), 0x8) 03:33:28 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x8c1, 0x0) 03:33:28 executing program 3: rt_sigreturn() syz_open_procfs(0x0, 0x0) 03:33:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0xfffffffffffffffe) 03:33:28 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) futimesat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x77359400}, {0x77359400}}) 03:33:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:28 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x103) futimesat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 03:33:28 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 03:33:28 executing program 5: timer_create(0x7, 0x0, &(0x7f00000001c0)) 03:33:28 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x80141, 0x11) [ 193.815312][ T27] audit: type=1804 audit(2000000008.459:56): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/209/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 193.841650][ C1] vkms_vblank_simulate: vblank timer overrun 03:33:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 03:33:28 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x103) 03:33:28 executing program 3: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1800) 03:33:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) [ 193.923457][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.929882][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 03:33:28 executing program 5: mq_open(&(0x7f0000000000)='#-!\x00', 0x40, 0x170, &(0x7f0000000040)) 03:33:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_pts(r0, 0x200) 03:33:28 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 03:33:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendto$inet_nvme_pdu(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:33:28 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x130) 03:33:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 03:33:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0xfffffffffffffe88) 03:33:28 executing program 1: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ff5000/0x4000)=nil, 0x3000) 03:33:28 executing program 5: select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x2}, 0x0, 0x0) 03:33:28 executing program 0: pipe2$9p(0x0, 0xc080) 03:33:28 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 03:33:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$cgroup_devices(r0, 0x0, 0x0) 03:33:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) futimesat(r0, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0xea60}}) 03:33:28 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 03:33:29 executing program 5: r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000600)=[{0xfffffffffffffffe}], 0x1, 0x0) 03:33:29 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x498) 03:33:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=@fragment, 0x8) 03:33:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x3b) 03:33:29 executing program 5: timer_create(0x1, &(0x7f0000000000)={0x0, 0x1, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) 03:33:29 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x0, 0xc9) 03:33:29 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0xe0000, 0x0) 03:33:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000040)) 03:33:29 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 03:33:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:29 executing program 5: open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x2) 03:33:29 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80301, 0x190) 03:33:29 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2a0200, 0x8) 03:33:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 03:33:29 executing program 3: timer_create(0x6, &(0x7f0000000000)={0x0, 0xe}, &(0x7f0000000040)) [ 194.707772][ T27] audit: type=1804 audit(2000000009.349:57): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/210/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 03:33:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=@fragment, 0x8) 03:33:29 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 03:33:29 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) [ 194.760386][ T27] audit: type=1804 audit(2000000009.399:58): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1948355062/syzkaller.iIyydj/341/file0" dev="sda1" ino=1974 res=1 errno=0 03:33:29 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3486, 0x0) write$char_usb(r0, 0x0, 0x0) 03:33:29 executing program 0: mq_open(&(0x7f0000000000)=')/^\x00', 0x0, 0x0, 0x0) 03:33:29 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x418) 03:33:29 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/power_supply', 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) 03:33:29 executing program 4: setreuid(0xee01, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0xee01, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 03:33:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 03:33:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:33:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) 03:33:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f0000000080)) 03:33:29 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) timerfd_gettime(r0, 0x0) 03:33:29 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) 03:33:29 executing program 0: pselect6(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x989680}, 0x0) 03:33:29 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/power_supply', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) getpgid(r1) 03:33:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 03:33:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 03:33:29 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x52000680) 03:33:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/class/net', 0x240243, 0x0) 03:33:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 03:33:29 executing program 0: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 03:33:29 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) 03:33:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 03:33:29 executing program 4: mq_open(&(0x7f0000000000)='({+(+](--%\x00', 0x40, 0x0, &(0x7f0000000040)={0x80, 0x0, 0xfffffffffffffffb, 0x7}) 03:33:29 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) 03:33:30 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) 03:33:30 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 03:33:30 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 03:33:30 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder1\x00', 0x8fa52a7ba8615dc0, 0x0) 03:33:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 03:33:30 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 03:33:30 executing program 5: mq_open(&(0x7f0000000000)='#-!\x00', 0x40, 0x170, 0x0) [ 195.497213][ T27] audit: type=1804 audit(2000000010.139:59): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/211/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 03:33:30 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 03:33:30 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) 03:33:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@phonet, 0x80, 0x0}, 0x0) 03:33:30 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x84c00, 0x0) 03:33:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) 03:33:30 executing program 5: eventfd(0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 03:33:30 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) futimesat(r0, 0x0, 0x0) 03:33:30 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) 03:33:30 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 03:33:30 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 03:33:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 03:33:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000080)=0x4) 03:33:30 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x254503, 0xff) 03:33:30 executing program 1: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/47) 03:33:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 03:33:30 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 03:33:30 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 03:33:30 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) 03:33:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) 03:33:30 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 03:33:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 03:33:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 03:33:30 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x20040, 0x0) 03:33:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:33:30 executing program 5: pselect6(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={0x0}) 03:33:30 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:33:30 executing program 1: open$dir(&(0x7f0000000000)='.\x00', 0x282143, 0x0) 03:33:30 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 03:33:31 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x212201, 0x10b) 03:33:31 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/199) 03:33:31 executing program 4: open$dir(&(0x7f0000000100)='./file0\x00', 0x4040, 0x50) 03:33:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0xfffffffffffffe61) 03:33:31 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:33:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:31 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x22000, 0x10) 03:33:31 executing program 3: r0 = open$dir(&(0x7f00000006c0)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000740)='./file0\x00', 0x2000, 0x103) 03:33:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 03:33:31 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0xee01, r0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 03:33:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000), 0xffffffffffffff98) 03:33:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@srh, 0x8) 03:33:31 executing program 5: mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 03:33:31 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x400, 0xa2) 03:33:31 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 03:33:31 executing program 0: setreuid(0xee01, 0x0) r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000fed000/0x13000)=nil) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0xee01, r1) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 03:33:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='smaps\x00') 03:33:31 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 03:33:31 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 03:33:31 executing program 1: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 03:33:31 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 03:33:31 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xea60}) 03:33:31 executing program 5: pipe2$9p(&(0x7f0000000580), 0x80800) 03:33:31 executing program 0: r0 = memfd_create(&(0x7f0000000300)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x50, 0x0, &(0x7f0000000000)) 03:33:31 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net', 0x480000, 0x0) 03:33:31 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') 03:33:31 executing program 3: setreuid(0xee01, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0xee01, r0) syz_socket_connect_nvme_tcp() 03:33:31 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 03:33:31 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x216241, 0x123) 03:33:31 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 03:33:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x5, 0x0, [], 0x0, 0x0, 0x0}, 0x8b6) 03:33:31 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 03:33:31 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000003c0)='./bus\x00', 0x0) utimes(&(0x7f00000002c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLOPEN(r1, 0x0, 0x0) close(r1) rt_sigreturn() mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) utimes(&(0x7f0000000140)='./bus\x00', 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futimesat(r0, 0x0, 0x0) readlinkat(r0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840)=""/175, 0xaf) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) socket$unix(0x1, 0x2, 0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 03:33:31 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) write(r0, &(0x7f0000000400)="99", 0x1) utime(&(0x7f00000003c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLOPEN(r1, 0x0, 0x0) close(r1) rt_sigreturn() socket$inet_udp(0x2, 0x2, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='o']) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) 03:33:31 executing program 1: r0 = open(0x0, 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) rt_sigreturn() mknodat$loop(r0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) utimes(0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 196.977230][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 196.977245][ T27] audit: type=1800 audit(2000000011.619:62): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1972 res=0 errno=0 03:33:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x46002, 0x0, 0x0) [ 197.023942][ T27] audit: type=1800 audit(2000000011.629:63): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1981 res=0 errno=0 03:33:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x6000000, 0x0, 0x0) [ 197.072275][ T27] audit: type=1804 audit(2000000011.719:64): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/213/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 03:33:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:31 executing program 5: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 03:33:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) 03:33:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto$inet_nvme_pdu(r0, 0x0, 0x11, 0x0, 0x0, 0x0) 03:33:31 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 03:33:31 executing program 4: socket(0x10, 0x802, 0x0) 03:33:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @empty}, 0x10) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000040)=""/27, &(0x7f0000000080)=0x1b) 03:33:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:33:31 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 03:33:32 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 03:33:32 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto$inet_nvme_icreq_pdu(r0, 0x0, 0x24, 0x0, 0x0, 0x0) [ 197.364338][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 03:33:32 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmsg$inet_nvme(r0, 0x0, 0x10000) 03:33:32 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 03:33:32 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 03:33:32 executing program 3: r0 = socket(0x11, 0x2, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f00000000c0)) 03:33:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4090, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) 03:33:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002ac0)={0x2020}, 0x2020) 03:33:32 executing program 3: r0 = msgget$private(0x0, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000018c0)=""/183) 03:33:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000140)) 03:33:32 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4048010, 0x0, 0x0) 03:33:32 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4048400, 0x0, 0x0) 03:33:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0xfffffd13) [ 197.847320][ T27] audit: type=1804 audit(2000000012.489:65): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/214/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 03:33:32 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 03:33:32 executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x100000}, 0x20) 03:33:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000046c0)) 03:33:32 executing program 4: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 03:33:32 executing program 3: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0xb29b3c03ad01d9fa) 03:33:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:32 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/144, 0x83}], 0x1, 0x0, 0x0) 03:33:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000440)=@l) 03:33:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, 0x0) 03:33:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) 03:33:32 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 03:33:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:32 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/uts\x00') 03:33:32 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/uts\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) 03:33:32 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') 03:33:32 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80881, 0x0) 03:33:32 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 03:33:33 executing program 1: r0 = socket$inet(0x2, 0x801, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 03:33:33 executing program 0: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 03:33:33 executing program 3: connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) 03:33:33 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000980)='ns/ipc\x00') 03:33:33 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) 03:33:33 executing program 0: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 03:33:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 03:33:33 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 03:33:33 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/uts\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 03:33:33 executing program 0: ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 03:33:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}}, 0x0) 03:33:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:33 executing program 1: socketpair(0x28, 0x0, 0xfffffff8, &(0x7f00000002c0)) 03:33:33 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:33 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) 03:33:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:33 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82101, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 03:33:33 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x20) 03:33:33 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:33 executing program 4: syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb000d04"], 0x0) 03:33:33 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x0, 0x6, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3]}}}) 03:33:33 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80881, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x1269) 03:33:33 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 03:33:33 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 03:33:33 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x90000, 0x0) 03:33:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:33 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "303a3ecf"}}) 03:33:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000000)) 03:33:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) write$tun(r0, 0x0, 0x0) 03:33:33 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 03:33:33 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "26454c06"}}) 03:33:33 executing program 3: ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 03:33:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 03:33:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000880)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61d311cc"}}) 03:33:33 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 03:33:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:33 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82101, 0x0) 03:33:33 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 03:33:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) 03:33:33 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) 03:33:33 executing program 3: ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 03:33:33 executing program 4: mount_setattr(0xffffffffffffffff, &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f0000002400)={0x1}, 0x20) 03:33:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 03:33:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 03:33:33 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000200)={0x7}) 03:33:33 executing program 3: ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 03:33:33 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) 03:33:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) [ 199.278243][ T27] audit: type=1804 audit(2000000013.909:66): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/218/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 03:33:34 executing program 5: r0 = socket(0x2a, 0x2, 0x0) bind$bt_hci(r0, 0x0, 0x0) 03:33:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:34 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000300)={0x2}) 03:33:34 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @sdr}) 03:33:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) 03:33:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:33:34 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000540)) 03:33:34 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 03:33:34 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x80881, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) 03:33:34 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0xc01c7c02, 0x0) 03:33:34 executing program 4: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:34 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 03:33:34 executing program 0: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 03:33:34 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, 0x0) 03:33:34 executing program 4: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 03:33:34 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000080)=@ringbuf, 0x0}, 0x90) 03:33:34 executing program 1: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 03:33:34 executing program 4: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)) 03:33:34 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9ecca57535537892e7f258d192fa3b0a"}) 03:33:34 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000140)) 03:33:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x6, 0xff, 0xc62, 0x0, 0x1}, 0x48) 03:33:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xc88}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 03:33:34 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 03:33:34 executing program 3: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) [ 200.192209][ T27] audit: type=1804 audit(2000000014.839:67): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/219/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0 03:33:34 executing program 5: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8953, 0x0) 03:33:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) 03:33:35 executing program 4: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000000)={'wlan1\x00'}) [ 200.336560][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.369061][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:35 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 03:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 03:33:35 executing program 4: syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xc88}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 03:33:35 executing program 3: memfd_create(&(0x7f00000001c0)='/dev/zero\x00', 0x0) 03:33:35 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 03:33:35 executing program 4: syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:35 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) [ 200.556122][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.585653][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 03:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 03:33:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) 03:33:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x29}, 0x20) 03:33:35 executing program 4: syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) 03:33:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x10000a008) 03:33:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 03:33:35 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 03:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private}}}}) 03:33:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) 03:33:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x7}) 03:33:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004680), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) 03:33:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 03:33:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x2}]}) 03:33:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) 03:33:35 executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x40000) [ 201.068872][ T27] audit: type=1804 audit(2000000015.709:68): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/220/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 03:33:35 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 03:33:35 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000100), 0x0, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) 03:33:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 03:33:35 executing program 3: syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 03:33:35 executing program 1: r0 = socket(0x2a, 0x2, 0x0) connect$rds(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) [ 201.195207][T10723] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 03:33:35 executing program 5: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 03:33:35 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000000)={'wlan1\x00'}) 03:33:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5450, 0x0) 03:33:35 executing program 1: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00'}) 03:33:35 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) 03:33:36 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)='\x00\x00\x00', 0x3}}, 0x0) 03:33:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x28, 0x26, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x28}}, 0x0) 03:33:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) [ 201.352132][T10737] wlan1: mtu less than device minimum 03:33:36 executing program 3: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan0\x00'}) 03:33:36 executing program 5: openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x6d0000, 0x0) 03:33:36 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0x8}) 03:33:36 executing program 0: r0 = openat$zero(0xffffff9c, &(0x7f0000000240), 0x48102, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)={[{0x0, 'pids'}]}, 0x6) 03:33:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x100804, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) 03:33:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 03:33:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 03:33:36 executing program 1: openat$tun(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) 03:33:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8927, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 03:33:36 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f0000000000)={'wlan1\x00'}) 03:33:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) 03:33:36 executing program 5: setuid(0xee01) openat$zero(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:33:36 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1f}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:33:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 03:33:36 executing program 3: r0 = openat$vmci(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a6, 0x0) 03:33:36 executing program 5: r0 = socket(0x2, 0x3, 0x3) bind$phonet(r0, &(0x7f00000000c0), 0x10) 03:33:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:36 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, 0x0) 03:33:36 executing program 5: r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 03:33:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000780), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f00000007c0)) 03:33:36 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000800), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e020b8"}, 0x0, 0x1, {0x0}}) 03:33:36 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 03:33:36 executing program 5: socketpair(0xa, 0x0, 0x80000001, &(0x7f0000000040)) 03:33:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000240)=""/144, 0x26, 0x90, 0x1}, 0x20) [ 202.011837][ T27] audit: type=1804 audit(2000000016.649:69): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/221/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 03:33:36 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) select(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000000100)={r0}) 03:33:36 executing program 4: bpf$PROG_LOAD(0x10, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}, 0x90) 03:33:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0189436, &(0x7f00000000c0)) 03:33:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x3}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x2c}, 0x20) 03:33:36 executing program 4: setuid(0xee01) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 03:33:36 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x66, 0x0, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7d, 0x0, 0x1f}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x12, 0x0, 0x9, 0x10, 0xff}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x1f, 0x7700, 0x4, [0xf0, 0x7f0100]}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x8, 0xff0f, 0x8001, [0xc000, 0x3fc0]}]}, 0x9, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0xa5, &(0x7f0000000180)=@string={0xa5, 0x3, "d9507b9e462f2ba4ecbcbc63d9edfd7d52292c3605a6d284d233944f666c8b7db214d13454ca2506aae2cb851ad27879437c4314c3fd22e5e88254713d43ed23a3d006cc88245b3a6d0f2f67e8ff8538c5207f21d95ee59ee563925b542d810f3380de8b011810f20499e6b39b03aff5b05369e8f9fa862e10d97879af2d4413e6c11c1924a0b1af2309044b69b6d84d5707a5dfcd4c737bd216716373351ba9a60ca8"}}, {0x2, &(0x7f0000000240)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}, {0x5e, &(0x7f0000000400)=@string={0x5e, 0x3, "7c1767298a4b639b4d01347baac8059f9733a83842b72455354b958dd1f0ed179e6f08e7d3a19914895921d765e584aaa8126d42e2bd5fe42caa2d5601294b17cf0de76daf87ac3cf1ad7f3ea86a232c687564b8ba664286c1538b97"}}, {0xda, &(0x7f0000000480)=@string={0xda, 0x3, "a4d09a92130d0e7d4ad267a9dc6f8054760f0d707d854eef3dad9fc01e8ebcea3f85c71a443339b14da0af8a7a1da5cbe928d8eb00598d2306ae6fb962798ac74423f42eb0be731f1a1325b86f1f7519f6121dc3f262b6c5cf2977d623e5b481ba87c57cefb47896ed3494ab9f9726fd700020c8900c10a2523ed167a126cbdc118ece247dda0d29d1a134023099ed3e0da5f7fe100e6df5202b30e1b9c7c39f77b1b2d9b17e93b8ddd8f02101e74f298bd18c498dbaf17dbea454a21069813e2566f6a0cf9f0c49d26a2664eda7e9f92b9feafc85ace158"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2801}}]}) [ 202.200937][ T5154] usb 2-1: new high-speed USB device number 4 using dummy_hcd 03:33:36 executing program 5: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, 0x0) 03:33:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5421, &(0x7f00000000c0)) 03:33:36 executing program 5: r0 = socket(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 03:33:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x541b, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 03:33:37 executing program 5: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0xfea7) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0xffffffffa003e45c, 0x0) 03:33:37 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1f}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) [ 202.470669][ T5154] usb 2-1: Using ep0 maxpacket: 8 [ 202.560411][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.596757][T10826] loop5: detected capacity change from 0 to 32768 [ 202.604611][T10826] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (10826) [ 202.610524][ T5154] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.633240][T10826] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 202.643570][T10826] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 202.653389][T10826] BTRFS info (device loop5): using free-space-tree [ 202.700520][ T5190] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.725958][ T27] audit: type=1800 audit(2000000017.369:70): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 03:33:37 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 03:33:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) [ 202.817712][ T5088] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 202.838401][ T5154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.859243][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.883870][ T5154] usb 2-1: Product: syz [ 202.888313][ T5154] usb 2-1: Manufacturer: syz [ 202.893569][ T5154] usb 2-1: SerialNumber: syz [ 202.920670][ T8] usb 4-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 0 03:33:37 executing program 0: syz_usb_connect(0x0, 0x38, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xda, 0x49, 0xdb, 0x10, 0x1110, 0x9032, 0x2d0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe4, 0xc5, 0xce, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x71, 0x18, 0x42}}]}}]}}, 0x0) [ 202.948398][ T5190] usb 5-1: Using ep0 maxpacket: 8 [ 202.958443][ T27] audit: type=1804 audit(2000000017.599:71): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/222/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 202.986191][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 03:33:37 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"aebb579c", 0x0, 0x0, 0x0, 0x0, 0x0, "f3e5857234870e62072fe16fedff54", "cd844b1c", "7e1e7c3f", "409a9da8", ["f79770dd8129b0889276353d", "ef7e71c5cc28a9734ddaa4fc", "5fe403a3a542c8948118d4f7", "8fcf2dcf957c3a6d39f01482"]}) 03:33:37 executing program 5: r0 = socket(0x2, 0x3, 0x3) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 03:33:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 03:33:37 executing program 5: syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040e04001020a3"], 0x7) socket$packet(0x11, 0x3, 0x300) [ 203.100788][ T5190] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 03:33:37 executing program 5: syz_open_dev$video4linux(&(0x7f0000000040), 0xfff, 0x0) [ 203.177644][ T5095] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 203.223386][ T5154] usb 2-1: USB disconnect, device number 4 [ 203.231062][ T8] usb 4-1: string descriptor 0 read error: -22 [ 203.241139][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.253012][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.280841][ T5190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.289995][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.299337][T10816] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.307499][ T5190] usb 5-1: Product: syz [ 203.311841][ T5190] usb 5-1: Manufacturer: syz [ 203.316539][ T5190] usb 5-1: SerialNumber: syz [ 203.321401][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 203.526520][ T5154] usb 4-1: USB disconnect, device number 2 [ 203.560699][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 203.614947][ T5190] usb 5-1: USB disconnect, device number 2 03:33:38 executing program 1: openat$nvram(0xffffff9c, &(0x7f0000000040), 0x8c80, 0x0) openat$nvram(0xffffff9c, &(0x7f0000001c80), 0x2, 0x0) 03:33:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 03:33:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 03:33:38 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000180), 0x4) [ 203.680439][ T5844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 203.693307][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 203.705651][ T5844] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping 03:33:38 executing program 5: syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x0) 03:33:38 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x1c}}, 0x0) io_uring_setup(0x531a, &(0x7f0000000280)={0x0, 0x0, 0x82}) syz_io_uring_setup(0x14b7, &(0x7f00000004c0)={0x0, 0x0, 0x200}, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_io_uring_setup(0x2a2b, &(0x7f0000000a00)={0x0, 0x0, 0x1000}, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), 0xffffffffffffffff) 03:33:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) [ 203.826839][ T27] audit: type=1804 audit(2000000018.469:72): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/223/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 03:33:38 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 03:33:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) [ 203.878295][ T5090] Bluetooth: hci6: sending frame failed (-49) [ 203.890933][ T5095] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 203.892353][ T5844] usb 1-1: New USB device found, idVendor=1110, idProduct=9032, bcdDevice=2d.0b [ 203.910127][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 03:33:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) [ 203.949816][ T5844] usb 1-1: Product: syz [ 203.972871][ T5090] Bluetooth: hci6: sending frame failed (-49) [ 203.975625][ T5844] usb 1-1: Manufacturer: syz [ 203.979047][ T5095] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 204.013618][ T5844] usb 1-1: SerialNumber: syz [ 204.033931][ T5844] usb 1-1: config 0 descriptor?? 03:33:38 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) 03:33:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 03:33:38 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000000) read$snapshot(r0, &(0x7f0000004940)=""/19, 0x13) [ 204.076002][ T5844] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9032) Rev (0X2D0B): Eagle III 03:33:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) 03:33:38 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 03:33:38 executing program 4: io_uring_setup(0x531a, &(0x7f0000000280)) 03:33:38 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:33:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) [ 204.223813][T10892] Bluetooth: hci8: Frame reassembly failed (-84) [ 204.252192][ T5844] usb 1-1: reset high-speed USB device number 3 using dummy_hcd 03:33:38 executing program 4: select(0x40, &(0x7f0000004980), 0x0, 0x0, &(0x7f0000004a80)) 03:33:39 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0) fcntl$setown(r0, 0x6, 0x0) 03:33:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0x1}) 03:33:39 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x72d4161e) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) 03:33:39 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000000) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000004a40)={0x0, 0x0}) select(0x40, &(0x7f0000004980)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20}, &(0x7f00000049c0)={0x0, 0x0, 0x58f, 0x0, 0x30aadbe1}, &(0x7f0000004a00)={0xff00000000000000, 0x0, 0x0, 0xfffffffffffffff9}, &(0x7f0000004a80)={0x0, r0/1000+10000}) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xcbfeb) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 03:33:39 executing program 4: alarm(0x4) 03:33:39 executing program 4: getresgid(&(0x7f0000000080), &(0x7f00000000c0), 0x0) 03:33:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="74080000130001"], 0x874}}, 0x0) [ 204.577307][T10915] netlink: 2132 bytes leftover after parsing attributes in process `syz-executor.4'. 03:33:39 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) 03:33:39 executing program 4: bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x0, 0x0, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_RECV_SEQ={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) io_uring_setup(0x531a, &(0x7f0000000280)={0x0, 0x0, 0x82, 0x2}) syz_io_uring_setup(0x14b7, &(0x7f00000004c0)={0x0, 0x0, 0x200, 0x0, 0x1df}, &(0x7f0000000540), &(0x7f0000000580)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0), 0x56003, 0x0) syz_io_uring_setup(0x2a2b, &(0x7f0000000a00)={0x0, 0x0, 0x1000}, &(0x7f0000000a80), &(0x7f0000000ac0)) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 03:33:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 03:33:39 executing program 4: select(0x40, &(0x7f0000004980), 0x0, &(0x7f0000004a00)={0xff00000000000000}, 0x0) 03:33:39 executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 03:33:39 executing program 0: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000c40)='syzkaller\x00', 0x8}, 0x90) 03:33:39 executing program 4: syz_io_uring_setup(0x14b7, &(0x7f00000004c0)={0x0, 0x0, 0x200}, &(0x7f0000000540), &(0x7f0000000580)) 03:33:39 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="dc", 0x1}], 0x1) 03:33:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r0) [ 204.855452][ T27] audit: type=1804 audit(2000000019.499:73): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2336536636/syzkaller.XxTEld/224/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 03:33:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 03:33:39 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80)) 03:33:39 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) 03:33:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000bc0)='./bus\x00', 0x3c) ftruncate(r4, 0x7fc) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r6, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f00000004c0)=""/59, 0x3b}, {0x0}, {&(0x7f0000000e40)=""/164, 0xa4}, {&(0x7f0000000c80)=""/116, 0x74}], 0x6}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) signalfd(r7, &(0x7f0000000dc0)={[0x3]}, 0x8) recvmsg(r6, 0x0, 0x40000110) sendfile(0xffffffffffffffff, r6, 0x0, 0xc7) sendfile(r4, r5, 0x0, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000007c0)='./file0\x00', 0x1014009, &(0x7f0000000e00)=ANY=[@ANYRES64], 0x1, 0x2a8, &(0x7f0000000500)="$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") [ 205.113414][ T5844] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 205.121428][ T5844] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleIII.fw [ 205.131154][ T5190] usb 1-1: Direct firmware load for ueagle-atm/eagleIII.fw failed with error -2 [ 205.142334][ T5190] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleIII.fw [ 205.203888][ T5844] usb 1-1: USB disconnect, device number 3 [ 205.262644][ T27] audit: type=1804 audit(2000000019.869:74): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir311015411/syzkaller.x3bk5t/391/bus" dev="sda1" ino=1985 res=1 errno=0 [ 205.290621][ T27] audit: type=1800 audit(2000000019.869:75): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1985 res=0 errno=0 [ 205.331007][T10945] loop4: detected capacity change from 0 to 128 [ 205.491494][ T5190] ================================================================== [ 205.499690][ T5190] BUG: KASAN: slab-use-after-free in kernfs_next_descendant_post+0x233/0x300 [ 205.508509][ T5190] Read of size 2 at addr ffff8880242aa950 by task kworker/0:8/5190 [ 205.516508][ T5190] [ 205.518834][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Not tainted 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 205.528565][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 03:33:40 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000c80)) [ 205.538633][ T5190] Workqueue: events request_firmware_work_func [ 205.544841][ T5190] Call Trace: [ 205.548137][ T5190] [ 205.551082][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 205.555688][ T5190] print_report+0xc4/0x620 [ 205.560118][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 205.565186][ T5190] ? __phys_addr+0xc6/0x140 [ 205.570251][ T5190] kasan_report+0xda/0x110 [ 205.574707][ T5190] ? kernfs_next_descendant_post+0x233/0x300 [ 205.580711][ T5190] ? kernfs_next_descendant_post+0x233/0x300 [ 205.586718][ T5190] kernfs_next_descendant_post+0x233/0x300 [ 205.592556][ T5190] kernfs_add_one+0x3b5/0x510 [ 205.597279][ T5190] kernfs_create_dir_ns+0x181/0x210 [ 205.602506][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 205.607635][ T5190] ? sysfs_create_mount_point+0xb0/0xb0 [ 205.613197][ T5190] ? spin_bug+0x1d0/0x1d0 [ 205.617522][ T5190] ? rcu_is_watching+0x12/0xb0 [ 205.622375][ T5190] ? do_raw_spin_unlock+0x173/0x230 [ 205.628091][ T5190] kobject_add_internal+0x2c8/0x970 [ 205.633294][ T5190] kobject_add+0x16f/0x240 [ 205.637725][ T5190] ? kset_create_and_add+0x190/0x190 [ 205.643013][ T5190] get_device_parent+0x393/0x4e0 [ 205.647957][ T5190] device_add+0x1ae/0x1aa0 [ 205.652377][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 205.659247][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 205.664644][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 205.670199][ T5190] _request_firmware+0xe3a/0x1260 [ 205.675231][ T5190] ? lock_release+0x4bf/0x690 [ 205.679915][ T5190] ? assign_fw+0x5f0/0x5f0 [ 205.684329][ T5190] ? lock_acquire+0x464/0x520 [ 205.688993][ T5190] request_firmware_work_func+0xeb/0x240 [ 205.694625][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 205.700963][ T5190] process_one_work+0x886/0x15d0 [ 205.705911][ T5190] ? lock_sync+0x190/0x190 [ 205.710315][ T5190] ? workqueue_congested+0x300/0x300 [ 205.715605][ T5190] ? assign_work+0x1a0/0x250 [ 205.720277][ T5190] worker_thread+0x8b9/0x1290 [ 205.725044][ T5190] ? __kthread_parkme+0x14b/0x220 [ 205.730058][ T5190] ? process_one_work+0x15d0/0x15d0 [ 205.735246][ T5190] kthread+0x2c6/0x3a0 [ 205.739302][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 205.745017][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 205.750653][ T5190] ret_from_fork+0x45/0x80 [ 205.755064][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 205.760687][ T5190] ret_from_fork_asm+0x11/0x20 [ 205.765445][ T5190] [ 205.768447][ T5190] [ 205.770754][ T5190] Allocated by task 5190: [ 205.775070][ T5190] kasan_save_stack+0x33/0x50 [ 205.779735][ T5190] kasan_save_track+0x14/0x30 [ 205.784405][ T5190] __kasan_slab_alloc+0x81/0x90 [ 205.789242][ T5190] kmem_cache_alloc+0x136/0x320 [ 205.794089][ T5190] __kernfs_new_node+0xd3/0x890 [ 205.798931][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 205.804035][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 205.809406][ T5190] kobject_add_internal+0x2c8/0x970 [ 205.814773][ T5190] kobject_add+0x16f/0x240 [ 205.819187][ T5190] get_device_parent+0x393/0x4e0 [ 205.824127][ T5190] device_add+0x1ae/0x1aa0 [ 205.828554][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 205.834045][ T5190] _request_firmware+0xe3a/0x1260 [ 205.839078][ T5190] request_firmware_work_func+0xeb/0x240 [ 205.844709][ T5190] process_one_work+0x886/0x15d0 [ 205.849737][ T5190] worker_thread+0x8b9/0x1290 [ 205.854503][ T5190] kthread+0x2c6/0x3a0 [ 205.858566][ T5190] ret_from_fork+0x45/0x80 [ 205.862978][ T5190] ret_from_fork_asm+0x11/0x20 [ 205.867755][ T5190] [ 205.870062][ T5190] Freed by task 5844: [ 205.874026][ T5190] kasan_save_stack+0x33/0x50 [ 205.878702][ T5190] kasan_save_track+0x14/0x30 [ 205.883384][ T5190] kasan_save_free_info+0x3f/0x60 [ 205.888423][ T5190] __kasan_slab_free+0x121/0x1b0 [ 205.893366][ T5190] kmem_cache_free+0x129/0x350 [ 205.898127][ T5190] kernfs_put.part.0+0x22a/0x490 [ 205.903060][ T5190] kernfs_put+0x47/0x50 [ 205.907216][ T5190] __kernfs_remove+0x3ff/0x650 [ 205.911973][ T5190] kernfs_remove+0x79/0xa0 [ 205.916383][ T5190] sysfs_remove_dir+0xc5/0x100 [ 205.921145][ T5190] __kobject_del+0xd3/0x1e0 [ 205.925640][ T5190] kobject_del+0x3f/0x60 [ 205.929876][ T5190] device_del+0x66d/0xa50 [ 205.934232][ T5190] usb_disconnect+0x588/0x910 [ 205.938930][ T5190] hub_event+0x1db7/0x4e10 [ 205.943434][ T5190] process_one_work+0x886/0x15d0 [ 205.948364][ T5190] worker_thread+0x8b9/0x1290 [ 205.953035][ T5190] kthread+0x2c6/0x3a0 [ 205.957464][ T5190] ret_from_fork+0x45/0x80 [ 205.961916][ T5190] ret_from_fork_asm+0x11/0x20 [ 205.966726][ T5190] [ 205.969042][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 205.969042][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 205.983694][ T5190] The buggy address is located 152 bytes inside of [ 205.983694][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 205.997998][ T5190] [ 206.000312][ T5190] The buggy address belongs to the physical page: [ 206.006708][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 206.016844][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 206.024379][ T5190] page_type: 0xffffffff() [ 206.028700][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 206.037282][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 206.045851][ T5190] page dumped because: kasan: bad access detected [ 206.052245][ T5190] page_owner tracks the page as allocated [ 206.057937][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 206.077052][ T5190] post_alloc_hook+0x2d0/0x350 [ 206.081850][ T5190] get_page_from_freelist+0xa28/0x3780 [ 206.087313][ T5190] __alloc_pages+0x22f/0x2440 [ 206.092023][ T5190] new_slab+0xcc/0x3a0 [ 206.096093][ T5190] ___slab_alloc+0x4af/0x19a0 [ 206.100908][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 206.106283][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 206.111141][ T5190] __kernfs_new_node+0xd3/0x890 [ 206.115987][ T5190] kernfs_new_node+0x94/0x110 [ 206.120664][ T5190] __kernfs_create_file+0x53/0x340 [ 206.125765][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 206.131400][ T5190] internal_create_group+0x31c/0xb50 [ 206.136702][ T5190] internal_create_groups+0x9d/0x150 [ 206.141997][ T5190] device_add+0x7b4/0x1aa0 [ 206.146410][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 206.151510][ T5190] usb_new_device+0x1036/0x19f0 [ 206.156351][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 206.163444][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 206.168900][ T5190] free_unref_page_list+0xe6/0xb40 [ 206.174011][ T5190] release_pages+0x32a/0x14f0 [ 206.178680][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 206.183868][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 206.188555][ T5190] exit_mmap+0x3da/0xb50 [ 206.192788][ T5190] __mmput+0x12a/0x4d0 [ 206.196845][ T5190] mmput+0x62/0x70 [ 206.200552][ T5190] do_exit+0x9a5/0x2ad0 [ 206.204694][ T5190] do_group_exit+0xd4/0x2a0 [ 206.209177][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 206.214187][ T5190] do_syscall_64+0xd3/0x250 [ 206.218689][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 206.224573][ T5190] [ 206.226880][ T5190] Memory state around the buggy address: [ 206.232492][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 206.240547][ T5190] ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 206.248588][ T5190] >ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 206.256629][ T5190] ^ [ 206.263285][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.271333][ T5190] ffff8880242aaa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.279378][ T5190] ================================================================== [ 206.291521][ T5090] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 206.297753][ T5090] Bluetooth: hci8: command 0x1003 tx timeout [ 206.314624][ T5095] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 206.321097][ T5099] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 206.327209][ T5190] ================================================================== [ 206.335273][ T5190] BUG: KASAN: slab-use-after-free in rb_first+0x6f/0x80 03:33:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000bc0)='./bus\x00', 0x3c) ftruncate(r4, 0x7fc) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r6, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f00000004c0)=""/59, 0x3b}, {0x0}, {&(0x7f0000000e40)=""/164, 0xa4}, {&(0x7f0000000c80)=""/116, 0x74}], 0x6}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) signalfd(r7, &(0x7f0000000dc0)={[0x3]}, 0x8) recvmsg(r6, 0x0, 0x40000110) sendfile(0xffffffffffffffff, r6, 0x0, 0xc7) sendfile(r4, r5, 0x0, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000007c0)='./file0\x00', 0x1014009, &(0x7f0000000e00)=ANY=[@ANYRES64], 0x1, 0x2a8, &(0x7f0000000500)="$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") [ 206.342490][ T5190] Read of size 8 at addr ffff8880242aa928 by task kworker/0:8/5190 [ 206.350391][ T5190] [ 206.352727][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 206.363917][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 206.373970][ T5190] Workqueue: events request_firmware_work_func [ 206.380144][ T5190] Call Trace: [ 206.383437][ T5190] [ 206.386461][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 206.391056][ T5190] print_report+0xc4/0x620 [ 206.395482][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 206.400510][ T5190] ? __phys_addr+0xc6/0x140 [ 206.405015][ T5190] kasan_report+0xda/0x110 [ 206.409421][ T5190] ? rb_first+0x6f/0x80 [ 206.413565][ T5190] ? rb_first+0x6f/0x80 [ 206.417709][ T5190] rb_first+0x6f/0x80 [ 206.421685][ T5190] kernfs_next_descendant_post+0x28a/0x300 [ 206.427482][ T5190] kernfs_add_one+0x3b5/0x510 [ 206.432153][ T5190] kernfs_create_dir_ns+0x181/0x210 [ 206.437352][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 206.442466][ T5190] ? sysfs_create_mount_point+0xb0/0xb0 [ 206.448008][ T5190] ? spin_bug+0x1d0/0x1d0 [ 206.452324][ T5190] ? rcu_is_watching+0x12/0xb0 [ 206.457080][ T5190] ? do_raw_spin_unlock+0x173/0x230 [ 206.462267][ T5190] kobject_add_internal+0x2c8/0x970 [ 206.467494][ T5190] kobject_add+0x16f/0x240 [ 206.471903][ T5190] ? kset_create_and_add+0x190/0x190 [ 206.477212][ T5190] get_device_parent+0x393/0x4e0 [ 206.482167][ T5190] device_add+0x1ae/0x1aa0 [ 206.486584][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 206.493433][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 206.498803][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 206.504263][ T5190] _request_firmware+0xe3a/0x1260 [ 206.509286][ T5190] ? lock_release+0x4bf/0x690 [ 206.513963][ T5190] ? assign_fw+0x5f0/0x5f0 [ 206.518377][ T5190] ? lock_acquire+0x464/0x520 [ 206.523041][ T5190] request_firmware_work_func+0xeb/0x240 [ 206.528674][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 206.535010][ T5190] process_one_work+0x886/0x15d0 [ 206.539954][ T5190] ? lock_sync+0x190/0x190 [ 206.544377][ T5190] ? workqueue_congested+0x300/0x300 [ 206.549666][ T5190] ? assign_work+0x1a0/0x250 [ 206.554263][ T5190] worker_thread+0x8b9/0x1290 [ 206.558944][ T5190] ? __kthread_parkme+0x14b/0x220 [ 206.563962][ T5190] ? process_one_work+0x15d0/0x15d0 [ 206.569159][ T5190] kthread+0x2c6/0x3a0 [ 206.573222][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 206.578851][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 206.584482][ T5190] ret_from_fork+0x45/0x80 [ 206.588903][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 206.594536][ T5190] ret_from_fork_asm+0x11/0x20 [ 206.599300][ T5190] [ 206.602307][ T5190] [ 206.604612][ T5190] Allocated by task 5190: [ 206.608923][ T5190] kasan_save_stack+0x33/0x50 [ 206.613587][ T5190] kasan_save_track+0x14/0x30 [ 206.618249][ T5190] __kasan_slab_alloc+0x81/0x90 [ 206.623084][ T5190] kmem_cache_alloc+0x136/0x320 [ 206.627923][ T5190] __kernfs_new_node+0xd3/0x890 [ 206.632759][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 206.637861][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 206.642968][ T5190] kobject_add_internal+0x2c8/0x970 [ 206.648161][ T5190] kobject_add+0x16f/0x240 [ 206.652573][ T5190] get_device_parent+0x393/0x4e0 [ 206.657500][ T5190] device_add+0x1ae/0x1aa0 [ 206.661916][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 206.667371][ T5190] _request_firmware+0xe3a/0x1260 [ 206.672393][ T5190] request_firmware_work_func+0xeb/0x240 [ 206.678022][ T5190] process_one_work+0x886/0x15d0 [ 206.682952][ T5190] worker_thread+0x8b9/0x1290 [ 206.687620][ T5190] kthread+0x2c6/0x3a0 [ 206.691688][ T5190] ret_from_fork+0x45/0x80 [ 206.696095][ T5190] ret_from_fork_asm+0x11/0x20 [ 206.700940][ T5190] [ 206.703251][ T5190] Freed by task 5844: [ 206.707217][ T5190] kasan_save_stack+0x33/0x50 [ 206.711879][ T5190] kasan_save_track+0x14/0x30 [ 206.716544][ T5190] kasan_save_free_info+0x3f/0x60 [ 206.721554][ T5190] __kasan_slab_free+0x121/0x1b0 [ 206.726477][ T5190] kmem_cache_free+0x129/0x350 [ 206.731244][ T5190] kernfs_put.part.0+0x22a/0x490 [ 206.736170][ T5190] kernfs_put+0x47/0x50 [ 206.740314][ T5190] __kernfs_remove+0x3ff/0x650 [ 206.745066][ T5190] kernfs_remove+0x79/0xa0 [ 206.749472][ T5190] sysfs_remove_dir+0xc5/0x100 [ 206.754231][ T5190] __kobject_del+0xd3/0x1e0 [ 206.758722][ T5190] kobject_del+0x3f/0x60 [ 206.762952][ T5190] device_del+0x66d/0xa50 [ 206.767270][ T5190] usb_disconnect+0x588/0x910 [ 206.771941][ T5190] hub_event+0x1db7/0x4e10 [ 206.776350][ T5190] process_one_work+0x886/0x15d0 [ 206.781279][ T5190] worker_thread+0x8b9/0x1290 [ 206.785946][ T5190] kthread+0x2c6/0x3a0 [ 206.790000][ T5190] ret_from_fork+0x45/0x80 [ 206.794406][ T5190] ret_from_fork_asm+0x11/0x20 [ 206.799158][ T5190] [ 206.801467][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 206.801467][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 206.816030][ T5190] The buggy address is located 112 bytes inside of [ 206.816030][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 206.829818][ T5190] [ 206.832131][ T5190] The buggy address belongs to the physical page: [ 206.838545][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 206.848690][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 206.856228][ T5190] page_type: 0xffffffff() [ 206.860548][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 206.869126][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 206.877695][ T5190] page dumped because: kasan: bad access detected [ 206.884094][ T5190] page_owner tracks the page as allocated [ 206.889789][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 206.908188][ T5190] post_alloc_hook+0x2d0/0x350 [ 206.912953][ T5190] get_page_from_freelist+0xa28/0x3780 [ 206.918411][ T5190] __alloc_pages+0x22f/0x2440 [ 206.923080][ T5190] new_slab+0xcc/0x3a0 [ 206.927146][ T5190] ___slab_alloc+0x4af/0x19a0 [ 206.931820][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 206.937188][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 206.942041][ T5190] __kernfs_new_node+0xd3/0x890 [ 206.946886][ T5190] kernfs_new_node+0x94/0x110 [ 206.951586][ T5190] __kernfs_create_file+0x53/0x340 [ 206.956696][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 206.962066][ T5190] internal_create_group+0x31c/0xb50 [ 206.967345][ T5190] internal_create_groups+0x9d/0x150 [ 206.972622][ T5190] device_add+0x7b4/0x1aa0 [ 206.977042][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 206.982065][ T5190] usb_new_device+0x1036/0x19f0 [ 206.986907][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 206.993415][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 206.998867][ T5190] free_unref_page_list+0xe6/0xb40 [ 207.003970][ T5190] release_pages+0x32a/0x14f0 [ 207.008633][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 207.013860][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 207.018527][ T5190] exit_mmap+0x3da/0xb50 [ 207.022761][ T5190] __mmput+0x12a/0x4d0 [ 207.026818][ T5190] mmput+0x62/0x70 [ 207.030529][ T5190] do_exit+0x9a5/0x2ad0 [ 207.034680][ T5190] do_group_exit+0xd4/0x2a0 [ 207.039170][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 207.044178][ T5190] do_syscall_64+0xd3/0x250 [ 207.048673][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 207.054555][ T5190] [ 207.056865][ T5190] Memory state around the buggy address: [ 207.062476][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 207.070523][ T5190] ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 207.078572][ T5190] >ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 207.086616][ T5190] ^ [ 207.091972][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.100015][ T5190] ffff8880242aaa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.108058][ T5190] ================================================================== [ 207.146045][ T5190] ================================================================== [ 207.154138][ T5190] BUG: KASAN: slab-use-after-free in kernfs_activate_one+0x261/0x2c0 [ 207.162224][ T5190] Read of size 2 at addr ffff8880242aa950 by task kworker/0:8/5190 [ 207.170118][ T5190] [ 207.172447][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 207.183640][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 207.193677][ T5190] Workqueue: events request_firmware_work_func [ 207.199820][ T5190] Call Trace: [ 207.200494][ T4458] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 207.203076][ T5190] [ 207.211336][ T4458] Bluetooth: hci0: Injecting HCI hardware error event [ 207.214196][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 207.221048][ T4458] Bluetooth: hci0: hardware error 0x00 [ 207.225491][ T5190] print_report+0xc4/0x620 [ 207.235332][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 207.240345][ T5190] ? __phys_addr+0xc6/0x140 [ 207.244829][ T5190] kasan_report+0xda/0x110 [ 207.249224][ T5190] ? kernfs_activate_one+0x261/0x2c0 [ 207.254496][ T5190] ? kernfs_activate_one+0x261/0x2c0 [ 207.259780][ T5190] kernfs_activate_one+0x261/0x2c0 [ 207.264892][ T5190] kernfs_add_one+0x3a5/0x510 [ 207.269562][ T5190] kernfs_create_dir_ns+0x181/0x210 [ 207.274755][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 207.279860][ T5190] ? sysfs_create_mount_point+0xb0/0xb0 [ 207.285491][ T5190] ? spin_bug+0x1d0/0x1d0 [ 207.289808][ T5190] ? rcu_is_watching+0x12/0xb0 [ 207.294647][ T5190] ? do_raw_spin_unlock+0x173/0x230 [ 207.299835][ T5190] kobject_add_internal+0x2c8/0x970 [ 207.305031][ T5190] kobject_add+0x16f/0x240 [ 207.309440][ T5190] ? kset_create_and_add+0x190/0x190 [ 207.314719][ T5190] get_device_parent+0x393/0x4e0 [ 207.319660][ T5190] device_add+0x1ae/0x1aa0 [ 207.324070][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 207.330912][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 207.336375][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 207.341840][ T5190] _request_firmware+0xe3a/0x1260 [ 207.346862][ T5190] ? lock_release+0x4bf/0x690 [ 207.351552][ T5190] ? assign_fw+0x5f0/0x5f0 [ 207.355963][ T5190] ? lock_acquire+0x464/0x520 [ 207.360627][ T5190] request_firmware_work_func+0xeb/0x240 [ 207.366259][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 207.372583][ T5190] process_one_work+0x886/0x15d0 [ 207.377517][ T5190] ? lock_sync+0x190/0x190 [ 207.381918][ T5190] ? workqueue_congested+0x300/0x300 [ 207.387196][ T5190] ? assign_work+0x1a0/0x250 [ 207.391777][ T5190] worker_thread+0x8b9/0x1290 [ 207.396449][ T5190] ? __kthread_parkme+0x14b/0x220 [ 207.401461][ T5190] ? process_one_work+0x15d0/0x15d0 [ 207.406651][ T5190] kthread+0x2c6/0x3a0 [ 207.410708][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 207.416327][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 207.421949][ T5190] ret_from_fork+0x45/0x80 [ 207.426365][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 207.431987][ T5190] ret_from_fork_asm+0x11/0x20 [ 207.436756][ T5190] [ 207.439757][ T5190] [ 207.442065][ T5190] Allocated by task 5190: [ 207.446375][ T5190] kasan_save_stack+0x33/0x50 [ 207.451038][ T5190] kasan_save_track+0x14/0x30 [ 207.455720][ T5190] __kasan_slab_alloc+0x81/0x90 [ 207.460558][ T5190] kmem_cache_alloc+0x136/0x320 [ 207.465397][ T5190] __kernfs_new_node+0xd3/0x890 [ 207.470235][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 207.475345][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 207.480448][ T5190] kobject_add_internal+0x2c8/0x970 [ 207.485633][ T5190] kobject_add+0x16f/0x240 [ 207.490039][ T5190] get_device_parent+0x393/0x4e0 [ 207.494968][ T5190] device_add+0x1ae/0x1aa0 [ 207.499373][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 207.504824][ T5190] _request_firmware+0xe3a/0x1260 [ 207.509843][ T5190] request_firmware_work_func+0xeb/0x240 [ 207.515472][ T5190] process_one_work+0x886/0x15d0 [ 207.520398][ T5190] worker_thread+0x8b9/0x1290 [ 207.525061][ T5190] kthread+0x2c6/0x3a0 [ 207.529114][ T5190] ret_from_fork+0x45/0x80 [ 207.533520][ T5190] ret_from_fork_asm+0x11/0x20 [ 207.538273][ T5190] [ 207.540581][ T5190] Freed by task 5844: [ 207.544628][ T5190] kasan_save_stack+0x33/0x50 [ 207.549309][ T5190] kasan_save_track+0x14/0x30 [ 207.553975][ T5190] kasan_save_free_info+0x3f/0x60 [ 207.558988][ T5190] __kasan_slab_free+0x121/0x1b0 [ 207.563914][ T5190] kmem_cache_free+0x129/0x350 [ 207.568683][ T5190] kernfs_put.part.0+0x22a/0x490 [ 207.573616][ T5190] kernfs_put+0x47/0x50 [ 207.579327][ T5190] __kernfs_remove+0x3ff/0x650 [ 207.584087][ T5190] kernfs_remove+0x79/0xa0 [ 207.588490][ T5190] sysfs_remove_dir+0xc5/0x100 [ 207.593244][ T5190] __kobject_del+0xd3/0x1e0 [ 207.597736][ T5190] kobject_del+0x3f/0x60 [ 207.601969][ T5190] device_del+0x66d/0xa50 [ 207.606294][ T5190] usb_disconnect+0x588/0x910 [ 207.611311][ T5190] hub_event+0x1db7/0x4e10 [ 207.615723][ T5190] process_one_work+0x886/0x15d0 [ 207.620653][ T5190] worker_thread+0x8b9/0x1290 [ 207.625319][ T5190] kthread+0x2c6/0x3a0 [ 207.629375][ T5190] ret_from_fork+0x45/0x80 [ 207.633788][ T5190] ret_from_fork_asm+0x11/0x20 [ 207.638547][ T5190] [ 207.640854][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 207.640854][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 207.655433][ T5190] The buggy address is located 152 bytes inside of [ 207.655433][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 207.669218][ T5190] [ 207.671529][ T5190] The buggy address belongs to the physical page: [ 207.677917][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 207.688051][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 207.695578][ T5190] page_type: 0xffffffff() [ 207.699892][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 207.708459][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 207.717021][ T5190] page dumped because: kasan: bad access detected [ 207.723410][ T5190] page_owner tracks the page as allocated [ 207.729105][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 207.747499][ T5190] post_alloc_hook+0x2d0/0x350 [ 207.752263][ T5190] get_page_from_freelist+0xa28/0x3780 [ 207.757717][ T5190] __alloc_pages+0x22f/0x2440 [ 207.762376][ T5190] new_slab+0xcc/0x3a0 [ 207.766430][ T5190] ___slab_alloc+0x4af/0x19a0 [ 207.771096][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 207.776463][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 207.781308][ T5190] __kernfs_new_node+0xd3/0x890 [ 207.786151][ T5190] kernfs_new_node+0x94/0x110 [ 207.790825][ T5190] __kernfs_create_file+0x53/0x340 [ 207.795932][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 207.801297][ T5190] internal_create_group+0x31c/0xb50 [ 207.806572][ T5190] internal_create_groups+0x9d/0x150 [ 207.811849][ T5190] device_add+0x7b4/0x1aa0 [ 207.816258][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 207.821265][ T5190] usb_new_device+0x1036/0x19f0 [ 207.826106][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 207.832587][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 207.838037][ T5190] free_unref_page_list+0xe6/0xb40 [ 207.843140][ T5190] release_pages+0x32a/0x14f0 [ 207.847809][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 207.853005][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 207.857673][ T5190] exit_mmap+0x3da/0xb50 [ 207.861909][ T5190] __mmput+0x12a/0x4d0 [ 207.865963][ T5190] mmput+0x62/0x70 [ 207.869681][ T5190] do_exit+0x9a5/0x2ad0 [ 207.873822][ T5190] do_group_exit+0xd4/0x2a0 [ 207.878311][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 207.883319][ T5190] do_syscall_64+0xd3/0x250 [ 207.887809][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 207.893691][ T5190] [ 207.895998][ T5190] Memory state around the buggy address: [ 207.901609][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 207.909657][ T5190] ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 207.917706][ T5190] >ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 207.925749][ T5190] ^ [ 207.932400][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.940449][ T5190] ffff8880242aaa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 207.948496][ T5190] ================================================================== [ 208.104221][ T27] audit: type=1804 audit(2000000022.689:76): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir311015411/syzkaller.x3bk5t/392/bus" dev="sda1" ino=1961 res=1 errno=0 [ 208.275661][ T5190] ================================================================== [ 208.280502][ T27] audit: type=1800 audit(2000000022.689:77): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 208.283740][ T5190] BUG: KASAN: slab-use-after-free in kernfs_active+0xd8/0x150 [ 208.283769][ T5190] Read of size 4 at addr ffff8880242aa8bc by task kworker/0:8/5190 [ 208.283782][ T5190] [ 208.283787][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 208.283805][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 208.283816][ T5190] Workqueue: events request_firmware_work_func [ 208.283844][ T5190] Call Trace: [ 208.283850][ T5190] [ 208.283856][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 208.283877][ T5190] print_report+0xc4/0x620 [ 208.283896][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 208.283919][ T5190] ? __phys_addr+0xc6/0x140 [ 208.283942][ T5190] kasan_report+0xda/0x110 [ 208.283959][ T5190] ? kernfs_active+0xd8/0x150 [ 208.283980][ T5190] ? kernfs_active+0xd8/0x150 [ 208.284003][ T5190] kasan_check_range+0xef/0x190 [ 208.284022][ T5190] kernfs_active+0xd8/0x150 [ 208.284043][ T5190] kernfs_activate_one+0x107/0x2c0 [ 208.284064][ T5190] kernfs_add_one+0x3a5/0x510 [ 208.284089][ T5190] kernfs_create_dir_ns+0x181/0x210 [ 208.284113][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 208.284139][ T5190] ? sysfs_create_mount_point+0xb0/0xb0 [ 208.284164][ T5190] ? spin_bug+0x1d0/0x1d0 [ 208.284181][ T5190] ? rcu_is_watching+0x12/0xb0 [ 208.284202][ T5190] ? do_raw_spin_unlock+0x173/0x230 [ 208.284220][ T5190] kobject_add_internal+0x2c8/0x970 [ 208.284244][ T5190] kobject_add+0x16f/0x240 [ 208.284265][ T5190] ? kset_create_and_add+0x190/0x190 [ 208.284293][ T5190] get_device_parent+0x393/0x4e0 [ 208.284319][ T5190] device_add+0x1ae/0x1aa0 [ 208.284345][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 208.284371][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 208.284399][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 208.284429][ T5190] _request_firmware+0xe3a/0x1260 [ 208.284458][ T5190] ? lock_release+0x4bf/0x690 [ 208.284483][ T5190] ? assign_fw+0x5f0/0x5f0 [ 208.284508][ T5190] ? lock_acquire+0x464/0x520 [ 208.284524][ T5190] request_firmware_work_func+0xeb/0x240 [ 208.284552][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 208.284582][ T5190] process_one_work+0x886/0x15d0 [ 208.284608][ T5190] ? lock_sync+0x190/0x190 [ 208.518995][ T5190] ? workqueue_congested+0x300/0x300 [ 208.524283][ T5190] ? assign_work+0x1a0/0x250 [ 208.528865][ T5190] worker_thread+0x8b9/0x1290 [ 208.533537][ T5190] ? __kthread_parkme+0x14b/0x220 [ 208.538550][ T5190] ? process_one_work+0x15d0/0x15d0 [ 208.543740][ T5190] kthread+0x2c6/0x3a0 [ 208.547797][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 208.553416][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 208.559039][ T5190] ret_from_fork+0x45/0x80 [ 208.563446][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 208.569068][ T5190] ret_from_fork_asm+0x11/0x20 [ 208.573829][ T5190] [ 208.576918][ T5190] [ 208.579225][ T5190] Allocated by task 5190: [ 208.583533][ T5190] kasan_save_stack+0x33/0x50 [ 208.588196][ T5190] kasan_save_track+0x14/0x30 [ 208.592856][ T5190] __kasan_slab_alloc+0x81/0x90 [ 208.597693][ T5190] kmem_cache_alloc+0x136/0x320 [ 208.602532][ T5190] __kernfs_new_node+0xd3/0x890 [ 208.607369][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 208.612571][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 208.617672][ T5190] kobject_add_internal+0x2c8/0x970 [ 208.622858][ T5190] kobject_add+0x16f/0x240 [ 208.627263][ T5190] get_device_parent+0x393/0x4e0 [ 208.632194][ T5190] device_add+0x1ae/0x1aa0 [ 208.636601][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 208.642055][ T5190] _request_firmware+0xe3a/0x1260 [ 208.647075][ T5190] request_firmware_work_func+0xeb/0x240 [ 208.652699][ T5190] process_one_work+0x886/0x15d0 [ 208.657626][ T5190] worker_thread+0x8b9/0x1290 [ 208.662291][ T5190] kthread+0x2c6/0x3a0 [ 208.666347][ T5190] ret_from_fork+0x45/0x80 [ 208.670750][ T5190] ret_from_fork_asm+0x11/0x20 [ 208.675501][ T5190] [ 208.677812][ T5190] Freed by task 5844: [ 208.681767][ T5190] kasan_save_stack+0x33/0x50 [ 208.686430][ T5190] kasan_save_track+0x14/0x30 [ 208.691091][ T5190] kasan_save_free_info+0x3f/0x60 [ 208.696103][ T5190] __kasan_slab_free+0x121/0x1b0 [ 208.701026][ T5190] kmem_cache_free+0x129/0x350 [ 208.705776][ T5190] kernfs_put.part.0+0x22a/0x490 [ 208.710702][ T5190] kernfs_put+0x47/0x50 [ 208.714843][ T5190] __kernfs_remove+0x3ff/0x650 [ 208.719591][ T5190] kernfs_remove+0x79/0xa0 [ 208.724001][ T5190] sysfs_remove_dir+0xc5/0x100 [ 208.728753][ T5190] __kobject_del+0xd3/0x1e0 [ 208.733242][ T5190] kobject_del+0x3f/0x60 [ 208.737468][ T5190] device_del+0x66d/0xa50 [ 208.742310][ T5190] usb_disconnect+0x588/0x910 [ 208.746999][ T5190] hub_event+0x1db7/0x4e10 [ 208.751405][ T5190] process_one_work+0x886/0x15d0 [ 208.756330][ T5190] worker_thread+0x8b9/0x1290 [ 208.760995][ T5190] kthread+0x2c6/0x3a0 [ 208.765049][ T5190] ret_from_fork+0x45/0x80 [ 208.769451][ T5190] ret_from_fork_asm+0x11/0x20 [ 208.774205][ T5190] [ 208.776511][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 208.776511][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 208.791067][ T5190] The buggy address is located 4 bytes inside of [ 208.791067][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 208.804672][ T5190] [ 208.806999][ T5190] The buggy address belongs to the physical page: [ 208.813390][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 208.823524][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 208.831051][ T5190] page_type: 0xffffffff() [ 208.835366][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 208.843934][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 208.852495][ T5190] page dumped because: kasan: bad access detected [ 208.858888][ T5190] page_owner tracks the page as allocated [ 208.864582][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 208.882974][ T5190] post_alloc_hook+0x2d0/0x350 [ 208.887733][ T5190] get_page_from_freelist+0xa28/0x3780 [ 208.893190][ T5190] __alloc_pages+0x22f/0x2440 [ 208.897851][ T5190] new_slab+0xcc/0x3a0 [ 208.901916][ T5190] ___slab_alloc+0x4af/0x19a0 [ 208.906584][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 208.911944][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 208.916795][ T5190] __kernfs_new_node+0xd3/0x890 [ 208.921637][ T5190] kernfs_new_node+0x94/0x110 [ 208.926401][ T5190] __kernfs_create_file+0x53/0x340 [ 208.931503][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 208.936863][ T5190] internal_create_group+0x31c/0xb50 [ 208.942141][ T5190] internal_create_groups+0x9d/0x150 [ 208.947424][ T5190] device_add+0x7b4/0x1aa0 [ 208.951831][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 208.956842][ T5190] usb_new_device+0x1036/0x19f0 [ 208.961688][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 208.968166][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 208.973619][ T5190] free_unref_page_list+0xe6/0xb40 [ 208.978724][ T5190] release_pages+0x32a/0x14f0 [ 208.983387][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 208.988586][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 208.993252][ T5190] exit_mmap+0x3da/0xb50 [ 208.997490][ T5190] __mmput+0x12a/0x4d0 [ 209.001553][ T5190] mmput+0x62/0x70 [ 209.005292][ T5190] do_exit+0x9a5/0x2ad0 [ 209.009435][ T5190] do_group_exit+0xd4/0x2a0 [ 209.013924][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 209.018933][ T5190] do_syscall_64+0xd3/0x250 [ 209.023429][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 209.029311][ T5190] [ 209.031619][ T5190] Memory state around the buggy address: [ 209.037228][ T5190] ffff8880242aa780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 209.045297][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 209.053345][ T5190] >ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 209.061387][ T5190] ^ [ 209.067257][ T5190] ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 209.075303][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.083348][ T5190] ================================================================== [ 209.097523][ T5190] ================================================================== [ 209.105597][ T5190] BUG: KASAN: slab-use-after-free in kernfs_active+0x138/0x150 [ 209.113177][ T5190] Read of size 4 at addr ffff8880242aa8bc by task kworker/0:8/5190 [ 209.121108][ T5190] [ 209.123425][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 209.134594][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 209.144631][ T5190] Workqueue: events request_firmware_work_func [ 209.150773][ T5190] Call Trace: [ 209.154049][ T5190] [ 209.156958][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 209.161531][ T5190] print_report+0xc4/0x620 [ 209.165929][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 209.170937][ T5190] ? __phys_addr+0xc6/0x140 [ 209.175418][ T5190] kasan_report+0xda/0x110 [ 209.179809][ T5190] ? kernfs_active+0x138/0x150 [ 209.184552][ T5190] ? kernfs_active+0x138/0x150 [ 209.189295][ T5190] kernfs_active+0x138/0x150 [ 209.193865][ T5190] kernfs_activate_one+0x107/0x2c0 [ 209.198957][ T5190] kernfs_add_one+0x3a5/0x510 [ 209.203641][ T5190] kernfs_create_dir_ns+0x181/0x210 [ 209.208827][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 209.213925][ T5190] ? sysfs_create_mount_point+0xb0/0xb0 [ 209.219453][ T5190] ? spin_bug+0x1d0/0x1d0 [ 209.223760][ T5190] ? rcu_is_watching+0x12/0xb0 [ 209.228503][ T5190] ? do_raw_spin_unlock+0x173/0x230 [ 209.233691][ T5190] kobject_add_internal+0x2c8/0x970 [ 209.238868][ T5190] kobject_add+0x16f/0x240 [ 209.243273][ T5190] ? kset_create_and_add+0x190/0x190 [ 209.248555][ T5190] get_device_parent+0x393/0x4e0 [ 209.253475][ T5190] device_add+0x1ae/0x1aa0 [ 209.257873][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 209.264702][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 209.270057][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 209.275498][ T5190] _request_firmware+0xe3a/0x1260 [ 209.280505][ T5190] ? lock_release+0x4bf/0x690 [ 209.285168][ T5190] ? assign_fw+0x5f0/0x5f0 [ 209.289561][ T5190] ? lock_acquire+0x464/0x520 [ 209.294240][ T5190] request_firmware_work_func+0xeb/0x240 [ 209.299852][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 209.306161][ T5190] process_one_work+0x886/0x15d0 [ 209.311087][ T5190] ? lock_sync+0x190/0x190 [ 209.315477][ T5190] ? workqueue_congested+0x300/0x300 [ 209.320744][ T5190] ? assign_work+0x1a0/0x250 [ 209.325311][ T5190] worker_thread+0x8b9/0x1290 [ 209.329968][ T5190] ? __kthread_parkme+0x14b/0x220 [ 209.334970][ T5190] ? process_one_work+0x15d0/0x15d0 [ 209.340148][ T5190] kthread+0x2c6/0x3a0 [ 209.344222][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 209.349830][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 209.355440][ T5190] ret_from_fork+0x45/0x80 [ 209.359835][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 209.365448][ T5190] ret_from_fork_asm+0x11/0x20 [ 209.370197][ T5190] [ 209.373201][ T5190] [ 209.375500][ T5190] Allocated by task 5190: [ 209.379796][ T5190] kasan_save_stack+0x33/0x50 [ 209.384455][ T5190] kasan_save_track+0x14/0x30 [ 209.389104][ T5190] __kasan_slab_alloc+0x81/0x90 [ 209.393929][ T5190] kmem_cache_alloc+0x136/0x320 [ 209.398786][ T5190] __kernfs_new_node+0xd3/0x890 [ 209.403625][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 209.408721][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 209.413834][ T5190] kobject_add_internal+0x2c8/0x970 [ 209.419012][ T5190] kobject_add+0x16f/0x240 [ 209.423409][ T5190] get_device_parent+0x393/0x4e0 [ 209.428326][ T5190] device_add+0x1ae/0x1aa0 [ 209.432732][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 209.438178][ T5190] _request_firmware+0xe3a/0x1260 [ 209.443190][ T5190] request_firmware_work_func+0xeb/0x240 [ 209.448806][ T5190] process_one_work+0x886/0x15d0 [ 209.453730][ T5190] worker_thread+0x8b9/0x1290 [ 209.458391][ T5190] kthread+0x2c6/0x3a0 [ 209.462437][ T5190] ret_from_fork+0x45/0x80 [ 209.466836][ T5190] ret_from_fork_asm+0x11/0x20 [ 209.471583][ T5190] [ 209.473884][ T5190] Freed by task 5844: [ 209.477857][ T5190] kasan_save_stack+0x33/0x50 [ 209.482512][ T5190] kasan_save_track+0x14/0x30 [ 209.487166][ T5190] kasan_save_free_info+0x3f/0x60 [ 209.492180][ T5190] __kasan_slab_free+0x121/0x1b0 [ 209.497096][ T5190] kmem_cache_free+0x129/0x350 [ 209.501836][ T5190] kernfs_put.part.0+0x22a/0x490 [ 209.506749][ T5190] kernfs_put+0x47/0x50 [ 209.510884][ T5190] __kernfs_remove+0x3ff/0x650 [ 209.515631][ T5190] kernfs_remove+0x79/0xa0 [ 209.520110][ T5190] sysfs_remove_dir+0xc5/0x100 [ 209.524852][ T5190] __kobject_del+0xd3/0x1e0 [ 209.529331][ T5190] kobject_del+0x3f/0x60 [ 209.533551][ T5190] device_del+0x66d/0xa50 [ 209.537856][ T5190] usb_disconnect+0x588/0x910 [ 209.542519][ T5190] hub_event+0x1db7/0x4e10 [ 209.546950][ T5190] process_one_work+0x886/0x15d0 [ 209.551878][ T5190] worker_thread+0x8b9/0x1290 [ 209.556532][ T5190] kthread+0x2c6/0x3a0 [ 209.560577][ T5190] ret_from_fork+0x45/0x80 [ 209.564968][ T5190] ret_from_fork_asm+0x11/0x20 [ 209.569712][ T5190] [ 209.572016][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 209.572016][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 209.586570][ T5190] The buggy address is located 4 bytes inside of [ 209.586570][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 209.600167][ T5190] [ 209.602472][ T5190] The buggy address belongs to the physical page: [ 209.608859][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 209.620549][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 209.628066][ T5190] page_type: 0xffffffff() [ 209.632372][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 209.640954][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 209.649550][ T5190] page dumped because: kasan: bad access detected [ 209.655943][ T5190] page_owner tracks the page as allocated [ 209.661634][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 209.680024][ T5190] post_alloc_hook+0x2d0/0x350 [ 209.684782][ T5190] get_page_from_freelist+0xa28/0x3780 [ 209.690229][ T5190] __alloc_pages+0x22f/0x2440 [ 209.694980][ T5190] new_slab+0xcc/0x3a0 [ 209.699053][ T5190] ___slab_alloc+0x4af/0x19a0 [ 209.703723][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 209.709081][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 209.713915][ T5190] __kernfs_new_node+0xd3/0x890 [ 209.718767][ T5190] kernfs_new_node+0x94/0x110 [ 209.723451][ T5190] __kernfs_create_file+0x53/0x340 [ 209.728550][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 209.733907][ T5190] internal_create_group+0x31c/0xb50 [ 209.739175][ T5190] internal_create_groups+0x9d/0x150 [ 209.744447][ T5190] device_add+0x7b4/0x1aa0 [ 209.748847][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 209.753846][ T5190] usb_new_device+0x1036/0x19f0 [ 209.758677][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 209.765148][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 209.770591][ T5190] free_unref_page_list+0xe6/0xb40 [ 209.775680][ T5190] release_pages+0x32a/0x14f0 [ 209.780340][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 209.785521][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 209.790174][ T5190] exit_mmap+0x3da/0xb50 [ 209.794398][ T5190] __mmput+0x12a/0x4d0 [ 209.798445][ T5190] mmput+0x62/0x70 [ 209.802138][ T5190] do_exit+0x9a5/0x2ad0 [ 209.806270][ T5190] do_group_exit+0xd4/0x2a0 [ 209.810747][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 209.815745][ T5190] do_syscall_64+0xd3/0x250 [ 209.820235][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 209.826129][ T5190] [ 209.828428][ T5190] Memory state around the buggy address: [ 209.834034][ T5190] ffff8880242aa780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 209.842087][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 209.850140][ T5190] >ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 209.858181][ T5190] ^ [ 209.864047][ T5190] ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 209.872084][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 209.880140][ T5190] ================================================================== [ 209.891296][ T5190] ================================================================== [ 209.899360][ T5190] BUG: KASAN: slab-use-after-free in kernfs_activate_one+0x26e/0x2c0 [ 209.907420][ T5190] Read of size 2 at addr ffff8880242aa950 by task kworker/0:8/5190 [ 209.915295][ T5190] [ 209.917603][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 209.928778][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 209.938823][ T5190] Workqueue: events request_firmware_work_func [ 209.944982][ T5190] Call Trace: [ 209.948250][ T5190] [ 209.951174][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 209.955756][ T5190] print_report+0xc4/0x620 [ 209.960160][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 209.965186][ T5190] ? __phys_addr+0xc6/0x140 [ 209.969679][ T5190] kasan_report+0xda/0x110 [ 209.974082][ T5190] ? kernfs_activate_one+0x26e/0x2c0 [ 209.979362][ T5190] ? kernfs_activate_one+0x26e/0x2c0 [ 209.984725][ T5190] kernfs_activate_one+0x26e/0x2c0 [ 209.989828][ T5190] kernfs_add_one+0x3a5/0x510 [ 209.994502][ T5190] kernfs_create_dir_ns+0x181/0x210 [ 209.999781][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 210.004885][ T5190] ? sysfs_create_mount_point+0xb0/0xb0 [ 210.010424][ T5190] ? spin_bug+0x1d0/0x1d0 [ 210.014741][ T5190] ? rcu_is_watching+0x12/0xb0 [ 210.019496][ T5190] ? do_raw_spin_unlock+0x173/0x230 [ 210.024687][ T5190] kobject_add_internal+0x2c8/0x970 [ 210.029897][ T5190] kobject_add+0x16f/0x240 [ 210.034309][ T5190] ? kset_create_and_add+0x190/0x190 [ 210.039597][ T5190] get_device_parent+0x393/0x4e0 [ 210.044531][ T5190] device_add+0x1ae/0x1aa0 [ 210.048949][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 210.055797][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 210.061175][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 210.066629][ T5190] _request_firmware+0xe3a/0x1260 [ 210.071650][ T5190] ? lock_release+0x4bf/0x690 [ 210.076320][ T5190] ? assign_fw+0x5f0/0x5f0 [ 210.080727][ T5190] ? lock_acquire+0x464/0x520 [ 210.085394][ T5190] request_firmware_work_func+0xeb/0x240 [ 210.091026][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 210.097352][ T5190] process_one_work+0x886/0x15d0 [ 210.102282][ T5190] ? lock_sync+0x190/0x190 [ 210.106682][ T5190] ? workqueue_congested+0x300/0x300 [ 210.111957][ T5190] ? assign_work+0x1a0/0x250 [ 210.116541][ T5190] worker_thread+0x8b9/0x1290 [ 210.121208][ T5190] ? __kthread_parkme+0x14b/0x220 [ 210.126217][ T5190] ? process_one_work+0x15d0/0x15d0 [ 210.131407][ T5190] kthread+0x2c6/0x3a0 [ 210.135465][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 210.141086][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 210.146705][ T5190] ret_from_fork+0x45/0x80 [ 210.151112][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 210.156734][ T5190] ret_from_fork_asm+0x11/0x20 [ 210.161490][ T5190] [ 210.164500][ T5190] [ 210.166809][ T5190] Allocated by task 5190: [ 210.171116][ T5190] kasan_save_stack+0x33/0x50 [ 210.175779][ T5190] kasan_save_track+0x14/0x30 [ 210.180440][ T5190] __kasan_slab_alloc+0x81/0x90 [ 210.185278][ T5190] kmem_cache_alloc+0x136/0x320 [ 210.190118][ T5190] __kernfs_new_node+0xd3/0x890 [ 210.194957][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 210.200057][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 210.205159][ T5190] kobject_add_internal+0x2c8/0x970 [ 210.210351][ T5190] kobject_add+0x16f/0x240 [ 210.214756][ T5190] get_device_parent+0x393/0x4e0 [ 210.219683][ T5190] device_add+0x1ae/0x1aa0 [ 210.224088][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 210.229549][ T5190] _request_firmware+0xe3a/0x1260 [ 210.234586][ T5190] request_firmware_work_func+0xeb/0x240 [ 210.240210][ T5190] process_one_work+0x886/0x15d0 [ 210.245137][ T5190] worker_thread+0x8b9/0x1290 [ 210.249807][ T5190] kthread+0x2c6/0x3a0 [ 210.253860][ T5190] ret_from_fork+0x45/0x80 [ 210.258268][ T5190] ret_from_fork_asm+0x11/0x20 [ 210.263027][ T5190] [ 210.265336][ T5190] Freed by task 5844: [ 210.269301][ T5190] kasan_save_stack+0x33/0x50 [ 210.273966][ T5190] kasan_save_track+0x14/0x30 [ 210.278623][ T5190] kasan_save_free_info+0x3f/0x60 [ 210.283631][ T5190] __kasan_slab_free+0x121/0x1b0 [ 210.288550][ T5190] kmem_cache_free+0x129/0x350 [ 210.293312][ T5190] kernfs_put.part.0+0x22a/0x490 [ 210.298236][ T5190] kernfs_put+0x47/0x50 [ 210.302375][ T5190] __kernfs_remove+0x3ff/0x650 [ 210.307125][ T5190] kernfs_remove+0x79/0xa0 [ 210.311527][ T5190] sysfs_remove_dir+0xc5/0x100 [ 210.316288][ T5190] __kobject_del+0xd3/0x1e0 [ 210.320779][ T5190] kobject_del+0x3f/0x60 [ 210.325009][ T5190] device_del+0x66d/0xa50 [ 210.329327][ T5190] usb_disconnect+0x588/0x910 [ 210.333999][ T5190] hub_event+0x1db7/0x4e10 [ 210.338408][ T5190] process_one_work+0x886/0x15d0 [ 210.343335][ T5190] worker_thread+0x8b9/0x1290 [ 210.348026][ T5190] kthread+0x2c6/0x3a0 [ 210.352080][ T5190] ret_from_fork+0x45/0x80 [ 210.356484][ T5190] ret_from_fork_asm+0x11/0x20 [ 210.361234][ T5190] [ 210.363538][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 210.363538][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 210.378093][ T5190] The buggy address is located 152 bytes inside of [ 210.378093][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 210.391873][ T5190] [ 210.394187][ T5190] The buggy address belongs to the physical page: [ 210.400602][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 210.410746][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 210.418276][ T5190] page_type: 0xffffffff() [ 210.422590][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 210.431169][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 210.439744][ T5190] page dumped because: kasan: bad access detected [ 210.446148][ T5190] page_owner tracks the page as allocated [ 210.451848][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 210.470253][ T5190] post_alloc_hook+0x2d0/0x350 [ 210.475026][ T5190] get_page_from_freelist+0xa28/0x3780 [ 210.480488][ T5190] __alloc_pages+0x22f/0x2440 [ 210.485154][ T5190] new_slab+0xcc/0x3a0 [ 210.489224][ T5190] ___slab_alloc+0x4af/0x19a0 [ 210.493896][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 210.499260][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 210.504102][ T5190] __kernfs_new_node+0xd3/0x890 [ 210.508942][ T5190] kernfs_new_node+0x94/0x110 [ 210.513608][ T5190] __kernfs_create_file+0x53/0x340 [ 210.518711][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 210.524076][ T5190] internal_create_group+0x31c/0xb50 [ 210.529353][ T5190] internal_create_groups+0x9d/0x150 [ 210.534630][ T5190] device_add+0x7b4/0x1aa0 [ 210.539044][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 210.544059][ T5190] usb_new_device+0x1036/0x19f0 [ 210.548907][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 210.555388][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 210.560843][ T5190] free_unref_page_list+0xe6/0xb40 [ 210.565949][ T5190] release_pages+0x32a/0x14f0 [ 210.570618][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 210.575808][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 210.580476][ T5190] exit_mmap+0x3da/0xb50 [ 210.584710][ T5190] __mmput+0x12a/0x4d0 [ 210.588857][ T5190] mmput+0x62/0x70 [ 210.592569][ T5190] do_exit+0x9a5/0x2ad0 [ 210.596712][ T5190] do_group_exit+0xd4/0x2a0 [ 210.601199][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 210.606215][ T5190] do_syscall_64+0xd3/0x250 [ 210.610707][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 210.616593][ T5190] [ 210.618900][ T5190] Memory state around the buggy address: [ 210.624510][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 210.632556][ T5190] ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 210.640601][ T5190] >ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 210.648646][ T5190] ^ [ 210.655302][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.663344][ T5190] ffff8880242aaa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.671388][ T5190] ================================================================== [ 210.696778][ T5190] ================================================================== [ 210.704856][ T5190] BUG: KASAN: slab-use-after-free in kernfs_get.part.0+0x17/0x80 [ 210.708656][T10953] loop4: detected capacity change from 0 to 128 [ 210.712606][ T5190] Read of size 4 at addr ffff8880242aa8b8 by task kworker/0:8/5190 [ 210.712634][ T5190] [ 210.712647][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 210.712668][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 210.712684][ T5190] Workqueue: events request_firmware_work_func [ 210.712738][ T5190] Call Trace: [ 210.712747][ T5190] [ 210.712754][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 210.767885][ T5190] print_report+0xc4/0x620 [ 210.767911][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 210.767934][ T5190] ? __phys_addr+0xc6/0x140 [ 210.767956][ T5190] kasan_report+0xda/0x110 [ 210.767973][ T5190] ? kernfs_get.part.0+0x17/0x80 [ 210.767995][ T5190] ? kernfs_get.part.0+0x17/0x80 [ 210.768018][ T5190] kasan_check_range+0xef/0x190 [ 210.768038][ T5190] kernfs_get.part.0+0x17/0x80 [ 210.768059][ T5190] kernfs_get+0x1f/0x30 [ 210.768079][ T5190] kobject_add_internal+0x500/0x970 [ 210.768104][ T5190] kobject_add+0x16f/0x240 [ 210.768126][ T5190] ? kset_create_and_add+0x190/0x190 [ 210.768153][ T5190] get_device_parent+0x393/0x4e0 [ 210.768180][ T5190] device_add+0x1ae/0x1aa0 [ 210.768206][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 210.768231][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 210.768259][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 210.768289][ T5190] _request_firmware+0xe3a/0x1260 [ 210.768320][ T5190] ? lock_release+0x4bf/0x690 [ 210.768346][ T5190] ? assign_fw+0x5f0/0x5f0 [ 210.768370][ T5190] ? lock_acquire+0x464/0x520 [ 210.768386][ T5190] request_firmware_work_func+0xeb/0x240 [ 210.768414][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 210.882437][ T5190] process_one_work+0x886/0x15d0 [ 210.887376][ T5190] ? lock_sync+0x190/0x190 [ 210.891777][ T5190] ? workqueue_congested+0x300/0x300 [ 210.897055][ T5190] ? assign_work+0x1a0/0x250 [ 210.901636][ T5190] worker_thread+0x8b9/0x1290 [ 210.906309][ T5190] ? __kthread_parkme+0x14b/0x220 [ 210.911322][ T5190] ? process_one_work+0x15d0/0x15d0 [ 210.916514][ T5190] kthread+0x2c6/0x3a0 [ 210.920575][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 210.926200][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 210.931826][ T5190] ret_from_fork+0x45/0x80 [ 210.936235][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 210.941857][ T5190] ret_from_fork_asm+0x11/0x20 [ 210.946629][ T5190] [ 210.949646][ T5190] [ 210.951956][ T5190] Allocated by task 5190: [ 210.956265][ T5190] kasan_save_stack+0x33/0x50 [ 210.960931][ T5190] kasan_save_track+0x14/0x30 [ 210.965592][ T5190] __kasan_slab_alloc+0x81/0x90 [ 210.970429][ T5190] kmem_cache_alloc+0x136/0x320 [ 210.975271][ T5190] __kernfs_new_node+0xd3/0x890 [ 210.980107][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 210.985207][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 210.990317][ T5190] kobject_add_internal+0x2c8/0x970 [ 210.995507][ T5190] kobject_add+0x16f/0x240 [ 210.999913][ T5190] get_device_parent+0x393/0x4e0 [ 211.004841][ T5190] device_add+0x1ae/0x1aa0 [ 211.009250][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 211.014701][ T5190] _request_firmware+0xe3a/0x1260 [ 211.019715][ T5190] request_firmware_work_func+0xeb/0x240 [ 211.025345][ T5190] process_one_work+0x886/0x15d0 [ 211.031228][ T5190] worker_thread+0x8b9/0x1290 [ 211.035896][ T5190] kthread+0x2c6/0x3a0 [ 211.039948][ T5190] ret_from_fork+0x45/0x80 [ 211.044353][ T5190] ret_from_fork_asm+0x11/0x20 [ 211.049118][ T5190] [ 211.051437][ T5190] Freed by task 5844: [ 211.055399][ T5190] kasan_save_stack+0x33/0x50 [ 211.060065][ T5190] kasan_save_track+0x14/0x30 [ 211.064734][ T5190] kasan_save_free_info+0x3f/0x60 [ 211.069748][ T5190] __kasan_slab_free+0x121/0x1b0 [ 211.074668][ T5190] kmem_cache_free+0x129/0x350 [ 211.079444][ T5190] kernfs_put.part.0+0x22a/0x490 [ 211.084984][ T5190] kernfs_put+0x47/0x50 [ 211.089132][ T5190] __kernfs_remove+0x3ff/0x650 [ 211.093890][ T5190] kernfs_remove+0x79/0xa0 [ 211.098294][ T5190] sysfs_remove_dir+0xc5/0x100 [ 211.103051][ T5190] __kobject_del+0xd3/0x1e0 [ 211.107543][ T5190] kobject_del+0x3f/0x60 [ 211.111770][ T5190] device_del+0x66d/0xa50 [ 211.116088][ T5190] usb_disconnect+0x588/0x910 [ 211.120757][ T5190] hub_event+0x1db7/0x4e10 [ 211.125184][ T5190] process_one_work+0x886/0x15d0 [ 211.130132][ T5190] worker_thread+0x8b9/0x1290 [ 211.134811][ T5190] kthread+0x2c6/0x3a0 [ 211.138870][ T5190] ret_from_fork+0x45/0x80 [ 211.143370][ T5190] ret_from_fork_asm+0x11/0x20 [ 211.148132][ T5190] [ 211.150442][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 211.150442][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 211.165007][ T5190] The buggy address is located 0 bytes inside of [ 211.165007][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 211.178616][ T5190] [ 211.180923][ T5190] The buggy address belongs to the physical page: [ 211.187315][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 211.197451][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 211.204982][ T5190] page_type: 0xffffffff() [ 211.209299][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 211.217871][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 211.226439][ T5190] page dumped because: kasan: bad access detected [ 211.232838][ T5190] page_owner tracks the page as allocated [ 211.238533][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 211.256938][ T5190] post_alloc_hook+0x2d0/0x350 [ 211.261710][ T5190] get_page_from_freelist+0xa28/0x3780 [ 211.267173][ T5190] __alloc_pages+0x22f/0x2440 [ 211.271846][ T5190] new_slab+0xcc/0x3a0 [ 211.275903][ T5190] ___slab_alloc+0x4af/0x19a0 [ 211.280570][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 211.285936][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 211.290783][ T5190] __kernfs_new_node+0xd3/0x890 [ 211.295628][ T5190] kernfs_new_node+0x94/0x110 [ 211.300299][ T5190] __kernfs_create_file+0x53/0x340 [ 211.305404][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 211.310769][ T5190] internal_create_group+0x31c/0xb50 [ 211.316053][ T5190] internal_create_groups+0x9d/0x150 [ 211.321331][ T5190] device_add+0x7b4/0x1aa0 [ 211.325740][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 211.330755][ T5190] usb_new_device+0x1036/0x19f0 [ 211.335602][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 211.342084][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 211.347536][ T5190] free_unref_page_list+0xe6/0xb40 [ 211.352640][ T5190] release_pages+0x32a/0x14f0 [ 211.357313][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 211.362509][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 211.367185][ T5190] exit_mmap+0x3da/0xb50 [ 211.371446][ T5190] __mmput+0x12a/0x4d0 [ 211.375501][ T5190] mmput+0x62/0x70 [ 211.379207][ T5190] do_exit+0x9a5/0x2ad0 [ 211.383350][ T5190] do_group_exit+0xd4/0x2a0 [ 211.387839][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 211.392856][ T5190] do_syscall_64+0xd3/0x250 [ 211.397352][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 211.403323][ T5190] [ 211.405633][ T5190] Memory state around the buggy address: [ 211.411246][ T5190] ffff8880242aa780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 211.419297][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 211.427372][ T5190] >ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 211.435420][ T5190] ^ [ 211.441302][ T5190] ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 211.449367][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.457678][ T5190] ================================================================== 03:33:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 03:33:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="98e12290ed832d2a59fbc9c409000000000000c7edbbf368c6572da3fa0576cf4f0a"], 0xe535e40b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000457e813000000021f2000008000300", @ANYRES32, @ANYBLOB="08009e00"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x10000a008) 03:33:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000bc0)='./bus\x00', 0x3c) ftruncate(r4, 0x7fc) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r6, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f00000004c0)=""/59, 0x3b}, {0x0}, {&(0x7f0000000e40)=""/164, 0xa4}, {&(0x7f0000000c80)=""/116, 0x74}], 0x6}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) signalfd(r7, &(0x7f0000000dc0)={[0x3]}, 0x8) recvmsg(r6, 0x0, 0x40000110) sendfile(0xffffffffffffffff, r6, 0x0, 0xc7) sendfile(r4, r5, 0x0, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000007c0)='./file0\x00', 0x1014009, &(0x7f0000000e00)=ANY=[@ANYRES64], 0x1, 0x2a8, &(0x7f0000000500)="$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") 03:33:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000bc0)='./bus\x00', 0x3c) ftruncate(r4, 0x7fc) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r6, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f00000004c0)=""/59, 0x3b}, {0x0}, {&(0x7f0000000e40)=""/164, 0xa4}, {&(0x7f0000000c80)=""/116, 0x74}], 0x6}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) signalfd(r7, &(0x7f0000000dc0)={[0x3]}, 0x8) recvmsg(r6, 0x0, 0x40000110) sendfile(0xffffffffffffffff, r6, 0x0, 0xc7) sendfile(r4, r5, 0x0, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000007c0)='./file0\x00', 0x1014009, &(0x7f0000000e00)=ANY=[@ANYRES64], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") 03:33:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = creat(&(0x7f0000000bc0)='./bus\x00', 0x3c) ftruncate(r4, 0x7fc) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x24080, 0x0) epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r6, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f00000004c0)=""/59, 0x3b}, {0x0}, {&(0x7f0000000e40)=""/164, 0xa4}, {&(0x7f0000000c80)=""/116, 0x74}], 0x6}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) signalfd(r7, &(0x7f0000000dc0)={[0x3]}, 0x8) recvmsg(r6, 0x0, 0x40000110) sendfile(0xffffffffffffffff, r6, 0x0, 0xc7) sendfile(r4, r5, 0x0, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000007c0)='./file0\x00', 0x1014009, &(0x7f0000000e00)=ANY=[@ANYRES64], 0x1, 0x2a8, &(0x7f0000000500)="$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") 03:33:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) [ 211.589940][ T5090] Bluetooth: hci6: sending frame failed (-49) [ 211.596831][ T5099] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 211.600819][ T5190] ================================================================== [ 211.610889][ T5190] BUG: KASAN: slab-use-after-free in kernfs_get.part.0+0x77/0x80 [ 211.618620][ T5190] Read of size 4 at addr ffff8880242aa8b8 by task kworker/0:8/5190 [ 211.626510][ T5190] [ 211.628834][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 211.640031][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 211.650089][ T5190] Workqueue: events request_firmware_work_func [ 211.656264][ T5190] Call Trace: [ 211.659546][ T5190] [ 211.662479][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 211.667091][ T5190] print_report+0xc4/0x620 [ 211.671518][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 211.676566][ T5190] ? __phys_addr+0xc6/0x140 [ 211.676592][ T5190] kasan_report+0xda/0x110 [ 211.676611][ T5190] ? kernfs_get.part.0+0x77/0x80 [ 211.676634][ T5190] ? kernfs_get.part.0+0x77/0x80 [ 211.676658][ T5190] kernfs_get.part.0+0x77/0x80 [ 211.676680][ T5190] kernfs_get+0x1f/0x30 [ 211.676701][ T5190] kobject_add_internal+0x500/0x970 [ 211.676727][ T5190] kobject_add+0x16f/0x240 [ 211.676750][ T5190] ? kset_create_and_add+0x190/0x190 [ 211.676778][ T5190] get_device_parent+0x393/0x4e0 [ 211.676806][ T5190] device_add+0x1ae/0x1aa0 [ 211.676833][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 211.676867][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 211.676903][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 211.676935][ T5190] _request_firmware+0xe3a/0x1260 [ 211.676966][ T5190] ? lock_release+0x4bf/0x690 [ 211.676993][ T5190] ? assign_fw+0x5f0/0x5f0 [ 211.677020][ T5190] ? lock_acquire+0x464/0x520 [ 211.677036][ T5190] request_firmware_work_func+0xeb/0x240 [ 211.677065][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 211.677097][ T5190] process_one_work+0x886/0x15d0 [ 211.677124][ T5190] ? lock_sync+0x190/0x190 [ 211.677139][ T5190] ? workqueue_congested+0x300/0x300 [ 211.677165][ T5190] ? assign_work+0x1a0/0x250 [ 211.677196][ T5190] worker_thread+0x8b9/0x1290 [ 211.677223][ T5190] ? __kthread_parkme+0x14b/0x220 [ 211.677243][ T5190] ? process_one_work+0x15d0/0x15d0 [ 211.677266][ T5190] kthread+0x2c6/0x3a0 [ 211.677286][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 211.677307][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 211.677328][ T5190] ret_from_fork+0x45/0x80 [ 211.677350][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 211.677372][ T5190] ret_from_fork_asm+0x11/0x20 [ 211.677402][ T5190] [ 211.677407][ T5190] [ 211.677410][ T5190] Allocated by task 5190: [ 211.677417][ T5190] kasan_save_stack+0x33/0x50 [ 211.677433][ T5190] kasan_save_track+0x14/0x30 [ 211.677448][ T5190] __kasan_slab_alloc+0x81/0x90 [ 211.677463][ T5190] kmem_cache_alloc+0x136/0x320 [ 211.677484][ T5190] __kernfs_new_node+0xd3/0x890 [ 211.677502][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 211.677523][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 211.677547][ T5190] kobject_add_internal+0x2c8/0x970 [ 211.677567][ T5190] kobject_add+0x16f/0x240 [ 211.677587][ T5190] get_device_parent+0x393/0x4e0 [ 211.677609][ T5190] device_add+0x1ae/0x1aa0 [ 211.677631][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 211.677657][ T5190] _request_firmware+0xe3a/0x1260 [ 211.677680][ T5190] request_firmware_work_func+0xeb/0x240 [ 211.677706][ T5190] process_one_work+0x886/0x15d0 [ 211.677727][ T5190] worker_thread+0x8b9/0x1290 [ 211.677748][ T5190] kthread+0x2c6/0x3a0 [ 211.677766][ T5190] ret_from_fork+0x45/0x80 [ 211.677784][ T5190] ret_from_fork_asm+0x11/0x20 [ 211.677805][ T5190] [ 211.677808][ T5190] Freed by task 5844: [ 211.677815][ T5190] kasan_save_stack+0x33/0x50 [ 211.677829][ T5190] kasan_save_track+0x14/0x30 [ 211.677844][ T5190] kasan_save_free_info+0x3f/0x60 [ 211.677862][ T5190] __kasan_slab_free+0x121/0x1b0 [ 211.677878][ T5190] kmem_cache_free+0x129/0x350 [ 211.677898][ T5190] kernfs_put.part.0+0x22a/0x490 [ 211.677918][ T5190] kernfs_put+0x47/0x50 [ 211.677938][ T5190] __kernfs_remove+0x3ff/0x650 [ 211.677964][ T5190] kernfs_remove+0x79/0xa0 [ 211.677989][ T5190] sysfs_remove_dir+0xc5/0x100 [ 211.678013][ T5190] __kobject_del+0xd3/0x1e0 [ 211.678032][ T5190] kobject_del+0x3f/0x60 [ 211.678051][ T5190] device_del+0x66d/0xa50 [ 211.678071][ T5190] usb_disconnect+0x588/0x910 [ 211.678096][ T5190] hub_event+0x1db7/0x4e10 [ 211.678118][ T5190] process_one_work+0x886/0x15d0 [ 211.678140][ T5190] worker_thread+0x8b9/0x1290 [ 211.678160][ T5190] kthread+0x2c6/0x3a0 [ 211.678184][ T5190] ret_from_fork+0x45/0x80 [ 211.678202][ T5190] ret_from_fork_asm+0x11/0x20 [ 211.678224][ T5190] [ 211.678227][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 211.678227][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 211.678240][ T5190] The buggy address is located 0 bytes inside of [ 211.678240][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 211.678256][ T5190] [ 211.678259][ T5190] The buggy address belongs to the physical page: [ 211.678265][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 211.678283][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 211.678297][ T5190] page_type: 0xffffffff() [ 211.678311][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 211.678326][ T5190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 211.678335][ T5190] page dumped because: kasan: bad access detected [ 211.678342][ T5190] page_owner tracks the page as allocated [ 211.678346][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 211.678375][ T5190] post_alloc_hook+0x2d0/0x350 [ 211.678399][ T5190] get_page_from_freelist+0xa28/0x3780 [ 211.678425][ T5190] __alloc_pages+0x22f/0x2440 [ 211.678438][ T5190] new_slab+0xcc/0x3a0 [ 211.678457][ T5190] ___slab_alloc+0x4af/0x19a0 [ 211.678478][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 211.678499][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 211.678520][ T5190] __kernfs_new_node+0xd3/0x890 [ 211.678539][ T5190] kernfs_new_node+0x94/0x110 [ 211.678559][ T5190] __kernfs_create_file+0x53/0x340 [ 211.678581][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 211.678605][ T5190] internal_create_group+0x31c/0xb50 [ 211.678630][ T5190] internal_create_groups+0x9d/0x150 [ 211.678654][ T5190] device_add+0x7b4/0x1aa0 [ 211.678677][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 211.678692][ T5190] usb_new_device+0x1036/0x19f0 [ 211.678715][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 211.678724][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 211.678747][ T5190] free_unref_page_list+0xe6/0xb40 [ 211.678772][ T5190] release_pages+0x32a/0x14f0 [ 211.678790][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 211.678813][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 211.678835][ T5190] exit_mmap+0x3da/0xb50 [ 211.678855][ T5190] __mmput+0x12a/0x4d0 [ 211.678872][ T5190] mmput+0x62/0x70 [ 211.678887][ T5190] do_exit+0x9a5/0x2ad0 [ 211.678902][ T5190] do_group_exit+0xd4/0x2a0 [ 211.678915][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 211.678930][ T5190] do_syscall_64+0xd3/0x250 [ 211.678951][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 211.678968][ T5190] [ 211.678970][ T5190] Memory state around the buggy address: [ 211.678977][ T5190] ffff8880242aa780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 211.678988][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 211.678998][ T5190] >ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 211.679008][ T5190] ^ [ 211.679017][ T5190] ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 211.679030][ T5190] ffff8880242aa980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 211.679042][ T5190] ================================================================== [ 212.167184][T10972] loop0: detected capacity change from 0 to 128 [ 212.178135][T10974] loop4: detected capacity change from 0 to 128 [ 212.317177][ T27] audit: type=1804 audit(2000000026.739:78): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1948355062/syzkaller.iIyydj/401/bus" dev="sda1" ino=1985 res=1 errno=0 [ 212.317368][ T27] audit: type=1800 audit(2000000026.739:79): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1985 res=0 errno=0 [ 212.317716][ T27] audit: type=1804 audit(2000000026.749:80): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir311015411/syzkaller.x3bk5t/393/bus" dev="sda1" ino=1986 res=1 errno=0 [ 212.317891][ T27] audit: type=1800 audit(2000000026.749:81): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1986 res=0 errno=0 [ 212.403737][ T5190] ================================================================== [ 212.403749][ T5190] BUG: KASAN: slab-use-after-free in kernfs_get.part.0+0x5e/0x80 [ 212.403778][ T5190] Write of size 4 at addr ffff8880242aa8b8 by task kworker/0:8/5190 [ 212.403792][ T5190] [ 212.403796][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 212.403815][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 212.403826][ T5190] Workqueue: events request_firmware_work_func [ 212.403855][ T5190] Call Trace: [ 212.403862][ T5190] [ 212.403868][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 212.403889][ T5190] print_report+0xc4/0x620 [ 212.403907][ T5190] ? __virt_addr_valid+0x5e/0x580 [ 212.403930][ T5190] ? __phys_addr+0xc6/0x140 [ 212.403952][ T5190] kasan_report+0xda/0x110 [ 212.403969][ T5190] ? kernfs_get.part.0+0x5e/0x80 [ 212.403991][ T5190] ? kernfs_get.part.0+0x5e/0x80 [ 212.404015][ T5190] kasan_check_range+0xef/0x190 [ 212.404036][ T5190] kernfs_get.part.0+0x5e/0x80 [ 212.404056][ T5190] kernfs_get+0x1f/0x30 [ 212.404076][ T5190] kobject_add_internal+0x500/0x970 [ 212.404101][ T5190] kobject_add+0x16f/0x240 [ 212.404123][ T5190] ? kset_create_and_add+0x190/0x190 [ 212.404151][ T5190] get_device_parent+0x393/0x4e0 [ 212.404186][ T5190] device_add+0x1ae/0x1aa0 [ 212.404212][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 212.404240][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 212.404267][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 212.404298][ T5190] _request_firmware+0xe3a/0x1260 [ 212.404327][ T5190] ? lock_release+0x4bf/0x690 [ 212.404353][ T5190] ? assign_fw+0x5f0/0x5f0 [ 212.404379][ T5190] ? lock_acquire+0x464/0x520 [ 212.404396][ T5190] request_firmware_work_func+0xeb/0x240 [ 212.404423][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 212.404454][ T5190] process_one_work+0x886/0x15d0 [ 212.404480][ T5190] ? lock_sync+0x190/0x190 [ 212.404494][ T5190] ? workqueue_congested+0x300/0x300 [ 212.404526][ T5190] ? assign_work+0x1a0/0x250 [ 212.404549][ T5190] worker_thread+0x8b9/0x1290 [ 212.404575][ T5190] ? __kthread_parkme+0x14b/0x220 [ 212.404595][ T5190] ? process_one_work+0x15d0/0x15d0 [ 212.404617][ T5190] kthread+0x2c6/0x3a0 [ 212.404637][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 212.404658][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 212.404679][ T5190] ret_from_fork+0x45/0x80 [ 212.404700][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 212.404722][ T5190] ret_from_fork_asm+0x11/0x20 [ 212.404750][ T5190] [ 212.404756][ T5190] [ 212.404758][ T5190] Allocated by task 5190: [ 212.404766][ T5190] kasan_save_stack+0x33/0x50 [ 212.404781][ T5190] kasan_save_track+0x14/0x30 [ 212.404795][ T5190] __kasan_slab_alloc+0x81/0x90 [ 212.404810][ T5190] kmem_cache_alloc+0x136/0x320 [ 212.404831][ T5190] __kernfs_new_node+0xd3/0x890 [ 212.404849][ T5190] kernfs_create_dir_ns+0x9a/0x210 [ 212.404870][ T5190] sysfs_create_dir_ns+0x13b/0x2b0 [ 212.404893][ T5190] kobject_add_internal+0x2c8/0x970 [ 212.404912][ T5190] kobject_add+0x16f/0x240 [ 212.404932][ T5190] get_device_parent+0x393/0x4e0 [ 212.404953][ T5190] device_add+0x1ae/0x1aa0 [ 212.404975][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 212.404999][ T5190] _request_firmware+0xe3a/0x1260 [ 212.405023][ T5190] request_firmware_work_func+0xeb/0x240 [ 212.405048][ T5190] process_one_work+0x886/0x15d0 [ 212.405068][ T5190] worker_thread+0x8b9/0x1290 [ 212.405088][ T5190] kthread+0x2c6/0x3a0 [ 212.405104][ T5190] ret_from_fork+0x45/0x80 [ 212.405122][ T5190] ret_from_fork_asm+0x11/0x20 [ 212.405143][ T5190] [ 212.405145][ T5190] Freed by task 5844: [ 212.405151][ T5190] kasan_save_stack+0x33/0x50 [ 212.405165][ T5190] kasan_save_track+0x14/0x30 [ 212.405185][ T5190] kasan_save_free_info+0x3f/0x60 [ 212.405202][ T5190] __kasan_slab_free+0x121/0x1b0 [ 212.405216][ T5190] kmem_cache_free+0x129/0x350 [ 212.405235][ T5190] kernfs_put.part.0+0x22a/0x490 [ 212.405252][ T5190] kernfs_put+0x47/0x50 [ 212.405269][ T5190] __kernfs_remove+0x3ff/0x650 [ 212.405287][ T5190] kernfs_remove+0x79/0xa0 [ 212.405305][ T5190] sysfs_remove_dir+0xc5/0x100 [ 212.405326][ T5190] __kobject_del+0xd3/0x1e0 [ 212.405344][ T5190] kobject_del+0x3f/0x60 [ 212.405361][ T5190] device_del+0x66d/0xa50 [ 212.405379][ T5190] usb_disconnect+0x588/0x910 [ 212.405403][ T5190] hub_event+0x1db7/0x4e10 [ 212.405424][ T5190] process_one_work+0x886/0x15d0 [ 212.405443][ T5190] worker_thread+0x8b9/0x1290 [ 212.405462][ T5190] kthread+0x2c6/0x3a0 [ 212.405478][ T5190] ret_from_fork+0x45/0x80 [ 212.405495][ T5190] ret_from_fork_asm+0x11/0x20 [ 212.405514][ T5190] [ 212.405516][ T5190] The buggy address belongs to the object at ffff8880242aa8b8 [ 212.405516][ T5190] which belongs to the cache kernfs_node_cache of size 168 [ 212.405529][ T5190] The buggy address is located 0 bytes inside of [ 212.405529][ T5190] freed 168-byte region [ffff8880242aa8b8, ffff8880242aa960) [ 212.405544][ T5190] [ 212.405546][ T5190] The buggy address belongs to the physical page: [ 212.405551][ T5190] page:ffffea000090aa80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x242aa [ 212.405568][ T5190] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 212.405581][ T5190] page_type: 0xffffffff() [ 212.405594][ T5190] raw: 00fff00000000800 ffff8880146a3dc0 dead000000000122 0000000000000000 [ 212.405608][ T5190] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 212.405616][ T5190] page dumped because: kasan: bad access detected [ 212.405622][ T5190] page_owner tracks the page as allocated [ 212.405626][ T5190] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5844, tgid 5844 (kworker/0:11), ts 205141831832, free_ts 205075701906 [ 212.405652][ T5190] post_alloc_hook+0x2d0/0x350 [ 212.405675][ T5190] get_page_from_freelist+0xa28/0x3780 [ 212.405698][ T5190] __alloc_pages+0x22f/0x2440 [ 212.405710][ T5190] new_slab+0xcc/0x3a0 [ 212.405727][ T5190] ___slab_alloc+0x4af/0x19a0 [ 212.405745][ T5190] __slab_alloc.constprop.0+0x56/0xa0 [ 212.405765][ T5190] kmem_cache_alloc+0x2e9/0x320 [ 212.405784][ T5190] __kernfs_new_node+0xd3/0x890 [ 212.405802][ T5190] kernfs_new_node+0x94/0x110 [ 212.405820][ T5190] __kernfs_create_file+0x53/0x340 [ 212.405841][ T5190] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 212.405863][ T5190] internal_create_group+0x31c/0xb50 [ 212.405886][ T5190] internal_create_groups+0x9d/0x150 [ 212.405909][ T5190] device_add+0x7b4/0x1aa0 [ 212.405930][ T5190] usb_create_ep_devs+0x160/0x2a0 [ 212.405943][ T5190] usb_new_device+0x1036/0x19f0 [ 212.405964][ T5190] page last free pid 10940 tgid 10940 stack trace: [ 212.405973][ T5190] free_unref_page_prepare+0x51f/0xb10 [ 212.405994][ T5190] free_unref_page_list+0xe6/0xb40 [ 212.406017][ T5190] release_pages+0x32a/0x14f0 [ 212.406033][ T5190] tlb_batch_pages_flush+0x9a/0x190 [ 212.406054][ T5190] tlb_finish_mmu+0x14b/0x6f0 [ 212.406074][ T5190] exit_mmap+0x3da/0xb50 [ 212.406094][ T5190] __mmput+0x12a/0x4d0 [ 212.406114][ T5190] mmput+0x62/0x70 [ 212.406131][ T5190] do_exit+0x9a5/0x2ad0 [ 212.406149][ T5190] do_group_exit+0xd4/0x2a0 [ 212.406177][ T5190] __x64_sys_exit_group+0x3e/0x50 [ 212.406193][ T5190] do_syscall_64+0xd3/0x250 [ 212.406216][ T5190] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 212.406237][ T5190] [ 212.406240][ T5190] Memory state around the buggy address: [ 212.406249][ T5190] ffff8880242aa780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 212.406262][ T5190] ffff8880242aa800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 212.406278][ T5190] >ffff8880242aa880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 212.406288][ T5190] ^ [ 212.406300][ T5190] ffff8880242aa900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 212.406313][ T5190] ffff8880242aa980: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 212.406324][ T5190] ================================================================== [ 212.407697][ T5190] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 212.407711][ T5190] CPU: 0 PID: 5190 Comm: kworker/0:8 Tainted: G B 6.7.0-syzkaller-06082-g22d29f1112c8 #0 [ 212.407731][ T5190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 212.407739][ T5190] Workqueue: events request_firmware_work_func [ 212.407765][ T5190] Call Trace: [ 212.407770][ T5190] [ 212.407776][ T5190] dump_stack_lvl+0xd9/0x1b0 [ 212.407795][ T5190] panic+0x6dc/0x790 [ 212.407814][ T5190] ? rcu_is_watching+0x12/0xb0 [ 212.407834][ T5190] ? panic_smp_self_stop+0xa0/0xa0 [ 212.407857][ T5190] ? preempt_schedule_common+0x45/0xc0 [ 212.407884][ T5190] ? preempt_schedule_thunk+0x1a/0x30 [ 212.407914][ T5190] end_report+0x12f/0x150 [ 212.407930][ T5190] kasan_report+0xea/0x110 [ 212.407946][ T5190] ? kernfs_get.part.0+0x5e/0x80 [ 212.407967][ T5190] ? kernfs_get.part.0+0x5e/0x80 [ 212.407990][ T5190] kasan_check_range+0xef/0x190 [ 212.408013][ T5190] kernfs_get.part.0+0x5e/0x80 [ 212.408035][ T5190] kernfs_get+0x1f/0x30 [ 212.408058][ T5190] kobject_add_internal+0x500/0x970 [ 212.408081][ T5190] kobject_add+0x16f/0x240 [ 212.408102][ T5190] ? kset_create_and_add+0x190/0x190 [ 212.408130][ T5190] get_device_parent+0x393/0x4e0 [ 212.408158][ T5190] device_add+0x1ae/0x1aa0 [ 212.408194][ T5190] ? __fw_devlink_link_to_consumers.isra.0+0x270/0x270 [ 212.408226][ T5190] ? __init_waitqueue_head+0xca/0x150 [ 212.408253][ T5190] firmware_fallback_sysfs+0x2e8/0xbd0 [ 212.408282][ T5190] _request_firmware+0xe3a/0x1260 [ 212.408314][ T5190] ? lock_release+0x4bf/0x690 [ 212.408340][ T5190] ? assign_fw+0x5f0/0x5f0 [ 212.408366][ T5190] ? lock_acquire+0x464/0x520 [ 212.408382][ T5190] request_firmware_work_func+0xeb/0x240 [ 212.408409][ T5190] ? request_partial_firmware_into_buf+0xa0/0xa0 [ 212.408438][ T5190] process_one_work+0x886/0x15d0 [ 212.408463][ T5190] ? lock_sync+0x190/0x190 [ 212.408479][ T5190] ? workqueue_congested+0x300/0x300 [ 212.408510][ T5190] ? assign_work+0x1a0/0x250 [ 212.408534][ T5190] worker_thread+0x8b9/0x1290 [ 212.408562][ T5190] ? __kthread_parkme+0x14b/0x220 [ 212.408590][ T5190] ? process_one_work+0x15d0/0x15d0 [ 212.408614][ T5190] kthread+0x2c6/0x3a0 [ 212.408633][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 212.408654][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 212.408676][ T5190] ret_from_fork+0x45/0x80 [ 212.408696][ T5190] ? kthread_complete_and_exit+0x40/0x40 [ 212.408723][ T5190] ret_from_fork_asm+0x11/0x20 [ 212.408752][ T5190] [ 212.408977][ T5190] Kernel Offset: disabled