0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) dup3(r2, r3, 0x0) dup3(r2, r5, 0x0) 02:08:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000380)="93a70b0100001006ff7f000586", 0xd, 0x0, 0x0, 0x0) 02:08:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x13, 0x0, &(0x7f0000000080)) 02:08:10 executing program 2: add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="fc", 0x1, 0xfffffffffffffffd) [ 404.836537][ T27] audit: type=1800 audit(1689732490.183:26): pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1948 res=0 errno=0 [ 404.874377][ T5431] fuse: Bad value for 'fd' 02:08:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000380)="93a70b0100001006ff7f000586", 0xd, 0x0, 0x0, 0x0) [ 404.906226][ T27] audit: type=1804 audit(1689732490.243:27): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2435023429/syzkaller.403wPo/111/file0" dev="sda1" ino=1950 res=1 errno=0 02:08:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) 02:08:10 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)={@mcast2}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@desc={0x1, 0x0, @desc1}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xfffffffffffffffe, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) dup3(r2, r3, 0x0) dup3(r2, r5, 0x0) 02:08:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1e, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) [ 405.169339][ T5449] fuse: Bad value for 'fd' [ 405.196012][ T27] audit: type=1804 audit(1689732490.543:28): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2435023429/syzkaller.403wPo/112/file0" dev="sda1" ino=1963 res=1 errno=0 02:08:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000c40), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:08:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 02:08:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x35, 0x0, &(0x7f0000000080)) 02:08:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x11, 0x0, &(0x7f0000000080)) 02:08:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000200)={@local, @dev}, 0xc) 02:08:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x4, 0x0, 0x0) 02:08:11 executing program 2: socketpair(0xa, 0x2, 0x0, &(0x7f0000000100)) 02:08:11 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x0, r0+10000000}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) 02:08:11 executing program 4: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fc", 0x1, 0xfffffffffffffffd) 02:08:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 02:08:11 executing program 5: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="be", 0x1, 0xfffffffffffffffe) 02:08:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000040, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) 02:08:11 executing program 4: socket$inet6(0xa, 0x3, 0x67) 02:08:11 executing program 2: socketpair(0xa, 0x2, 0x0, &(0x7f0000000100)) 02:08:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[], 0x5c}}, 0x0) 02:08:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000040, 0x0, 0x0) 02:08:11 executing program 5: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="e41e127e04b0bfad1df79afb201e18d09111712f716aaca62280992eebc6f918e7b3d295194d9381776c84c1a0b22d88fb01d57622f7a2d1442fa1b3409d955e32299d387ba6d2365cbbe61a7c5e2f036701b1394f22357391ee72e2d75098a5eefd284de440f92241f82c5701e6928608be9847c6c4f566f62b680d665419bb2303e39c86f977b8a9369f4554f85b1bdd9461c70925e7b4d93a51939c7ac030591e438649da8892677baa137664a21a00e1b371fcff3cae435baa946faa6aac90", 0xfffffffffffffd5a, 0x0) 02:08:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x30) 02:08:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3a, 0x0, &(0x7f0000000080)) 02:08:11 executing program 2: socketpair(0xa, 0x2, 0x0, &(0x7f0000000100)) 02:08:11 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/21, 0x15}}, 0x120) 02:08:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x1b, 0x0, &(0x7f0000000080)) 02:08:12 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) 02:08:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x44, 0x0, &(0x7f0000000080)) 02:08:12 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000001180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) [ 406.705402][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 02:08:12 executing program 2: socketpair(0xa, 0x2, 0x0, &(0x7f0000000100)) 02:08:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x9045) 02:08:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) [ 406.748632][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 02:08:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) 02:08:12 executing program 0: timer_create(0x9, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000100)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{}, {r0}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, r1+10000000}}, 0x0) [ 406.791516][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 406.828062][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 02:08:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3d, 0x0, &(0x7f0000000080)) 02:08:12 executing program 2: timer_create(0x9, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r0}}, 0x0) [ 406.863659][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 406.897892][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 406.955659][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 406.984971][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.016020][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.033996][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.067977][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.089262][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.105022][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.114744][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.122587][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.130393][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.138960][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.146963][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.157792][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.172379][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.180364][ T3652] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 407.212429][ T3652] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 02:08:12 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x6}, &(0x7f0000000040)={0x2}, 0x0, &(0x7f0000000100)={r0}, 0x0) 02:08:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 02:08:12 executing program 4: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='syz', 0xfffffffffffffffc) 02:08:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local, 0x800}, 0x1c) 02:08:12 executing program 1: pselect6(0x7, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 02:08:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 02:08:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x54) 02:08:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) 02:08:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4000090, &(0x7f0000001040)={0xa, 0x4e24, 0x0, @mcast1, 0x8}, 0x1c) 02:08:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 02:08:12 executing program 0: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 02:08:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}}, 0x0) 02:08:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000040, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x1c) 02:08:12 executing program 1: request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 02:08:12 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000002c0)={'syz0', "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"}, 0x1001) 02:08:12 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000004c0)={0x0, 0x0}) 02:08:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 02:08:13 executing program 3: r0 = epoll_create(0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78b17d7537ca2852"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000000}) 02:08:13 executing program 1: timer_create(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, r0+60000000}}, &(0x7f0000000200)) 02:08:13 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @fixed, 0x0, 0x2}, 0xe) 02:08:13 executing program 5: syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x6000) 02:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 02:08:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe8) 02:08:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1d, 0x0, &(0x7f0000000080)) 02:08:13 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f00000001c0)) 02:08:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) 02:08:13 executing program 5: timer_create(0x1, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {r0}}, 0x0) 02:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x3e, 0x0, &(0x7f0000000080)) 02:08:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 02:08:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x1a, 0x0, &(0x7f0000000080)) 02:08:13 executing program 1: request_key(&(0x7f00000008c0)='big_key\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 02:08:13 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x1e) 02:08:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x22, 0x0, &(0x7f0000000080)) 02:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x33, 0x0, &(0x7f0000000080)) 02:08:13 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) 02:08:13 executing program 3: wait4(0x0, 0x0, 0x1000001, 0x0) 02:08:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 02:08:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 02:08:13 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x6000) 02:08:13 executing program 5: io_uring_setup(0x80002bfb, &(0x7f0000000000)) 02:08:13 executing program 4: request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0) 02:08:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x24, 0x0, &(0x7f0000000080)) 02:08:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x42) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) 02:08:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x40, 0x0, &(0x7f0000000080)) 02:08:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) 02:08:13 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 02:08:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4, 0x0, &(0x7f0000000080)) 02:08:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {0xa}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}]}, @NDTA_THRESH3={0x8}]}, 0x28}}, 0x0) 02:08:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x5, 0x0, &(0x7f0000000080)) 02:08:13 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000080)) 02:08:14 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x30003006}) 02:08:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0xa, 0x0, &(0x7f0000000080)) 02:08:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x38, 0x0, &(0x7f0000000080)) 02:08:14 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) 02:08:14 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) 02:08:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {0xa}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}]}, @NDTA_THRESH3={0x8}]}, 0x28}}, 0x0) 02:08:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={0x0, 0x13a4}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 02:08:14 executing program 1: pselect6(0x9c050000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 02:08:14 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 02:08:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}, {{@in6=@empty}, 0x0, @in6=@local}}, 0xe8) 02:08:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_batadv\x00'}) 02:08:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x28, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x8}]}, @NDTA_THRESH3={0x8}]}, 0x28}}, 0x0) 02:08:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x4d, 0x0, &(0x7f0000000080)) 02:08:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x1}}, 0xe8) 02:08:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 02:08:14 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) 02:08:14 executing program 0: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='$\x99\xe9\x88\xefNv\x068\x14O\x16\x95P\xb8*\xd7j\xc3\x16\\t\x8f\xfd\r_\x933\xd9\xe0\xa5\v\x8c\xb5\xde/S\x00\x00\x84k\xec\xe5\xc4\xc9', 0x0) 02:08:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0xb, 0x0, &(0x7f0000000080)) 02:08:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002800)={&(0x7f0000000500)=ANY=[], 0x13a4}}, 0x0) 02:08:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x6, 0x11, 0x0, &(0x7f0000000080)) 02:08:14 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000008ac0)='/sys/devices/system', 0x0, 0x0) 02:08:14 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x2da000, 0x0) 02:08:14 executing program 2: syz_clone(0x1d060400, 0x0, 0x0, 0x0, 0x0, 0x0) 02:08:14 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000009c0)='gid_map\x00') read$FUSE(r0, 0x0, 0x0) 02:08:14 executing program 4: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$yama_ptrace_scope(r0, 0x0, 0x0) 02:08:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5450, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r4 = accept$inet6(r1, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(r5, 0x5450, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, &(0x7f0000000ec0)=0xffffffffffffff0a) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000000280)) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, 0x0, &(0x7f0000000100)) recvmsg$unix(r3, 0x0, 0x40) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000340)) dup(0xffffffffffffffff) 02:08:15 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) 02:08:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_bridge\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf}}) [ 409.679091][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 02:08:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)=@ethtool_channels={0x3d}}) 02:08:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xcc, 0x4) 02:08:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000001600)='w', 0x1, 0x0, 0x0, 0x0) 02:08:15 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/user\x00') 02:08:15 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@dev, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "27c89e", 0x14, 0x6, 0x0, @mcast2, @loopback, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:08:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[], 0x100000530) socket(0x0, 0x0, 0x0) 02:08:15 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) 02:08:15 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:08:15 executing program 5: r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}}, 0x0) 02:08:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x78) 02:08:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000001c0)="89315e5cfea914a6a20cbe24fa217f55de8d6b0ca6a5c18837c2849a77395ff3dec91a8c3a225952b7313a1c95aee5bde47993edd254b4759a7fa96b8271f5063a4365487c3e040e74264dc23f092f455f52451414a36759223f84e85417f8e8d71007", 0x63}, {&(0x7f0000001340)="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", 0x452}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 02:08:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'ipvlan0\x00'}) 02:08:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000040, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0xe0) 02:08:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8953, &(0x7f0000000540)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}}) 02:08:15 executing program 2: bpf$BPF_TASK_FD_QUERY(0x19, 0x0, 0x0) 02:08:15 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) 02:08:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:08:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8940, &(0x7f0000000540)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}}) 02:08:16 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0x8) setsockopt(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0) 02:08:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, r1, 0x1, 0x70bd2b, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x0) [ 410.963868][ T27] audit: type=1804 audit(1689732496.313:29): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/149/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 02:08:16 executing program 5: bpf$BPF_TASK_FD_QUERY(0x23, 0x0, 0x0) 02:08:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8915, &(0x7f0000000540)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}}) 02:08:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000001) accept4(0xffffffffffffffff, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000200)=0x80, 0x80000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.time\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan1\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc850) [ 411.034363][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 411.116867][ T27] audit: type=1804 audit(1689732496.363:30): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/149/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 02:08:16 executing program 5: syz_emit_ethernet(0x12, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@mpls_mc}}, 0x0) [ 411.206284][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @broadcast}}}, 0x108) [ 411.258836][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:16 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 02:08:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, "963b3092"}, &(0x7f0000000280)=0x28) 02:08:16 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:16 executing program 4: r0 = socket$inet6_dccp(0x2, 0x6, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 02:08:16 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0x8) setsockopt(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0) 02:08:16 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0x8) setsockopt(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0) 02:08:17 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void}, 0x0) 02:08:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, "963b3092"}, &(0x7f0000000280)=0x28) 02:08:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}, 0x273bbb8f8c4dd0f7}) 02:08:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x2) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x1fc}], 0x1}}], 0x1, 0x80) [ 411.782999][ T27] audit: type=1804 audit(1689732497.133:31): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/150/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 411.821490][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x894c, 0x0) 02:08:17 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void, {@generic={0x88f7}}}, 0x0) 02:08:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 411.874123][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 411.911622][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.949766][ T27] audit: type=1804 audit(1689732497.163:32): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/150/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 411.990421][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:17 executing program 5: bpf$BPF_TASK_FD_QUERY(0x2, 0x0, 0x0) [ 412.004860][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8941, &(0x7f0000000540)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}}) 02:08:17 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0x8) setsockopt(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0) [ 412.057962][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.137772][ T27] audit: type=1804 audit(1689732497.173:33): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4081411665/syzkaller.fD3vcW/129/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 412.278737][ T27] audit: type=1804 audit(1689732497.173:34): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4081411665/syzkaller.fD3vcW/129/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:08:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000300)=""/86, 0x26, 0x56, 0x1}, 0x20) 02:08:17 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void, {@generic={0x88f7}}}, 0x0) 02:08:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x205, 0x0, 0x0, 0x0, 0x40}) 02:08:17 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4081, 0x0) [ 412.346073][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 412.381634][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:17 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 02:08:17 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void, {@generic={0x88f7}}}, 0x0) [ 412.428472][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.439043][ T27] audit: type=1804 audit(1689732497.693:35): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/151/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 02:08:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x80086601, 0x0) [ 412.532316][ T27] audit: type=1804 audit(1689732497.693:36): pid=5779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/151/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 02:08:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:18 executing program 0: syz_io_uring_setup(0x6a69, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 02:08:18 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) fcntl$setflags(r1, 0x5, 0x0) 02:08:18 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0x8) setsockopt(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0) 02:08:18 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 02:08:18 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void, {@generic={0x88f7}}}, 0x0) 02:08:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_ts_info}) 02:08:18 executing program 4: syz_emit_ethernet(0x12, &(0x7f0000000000)={@multicast, @local, @val={@void, {0x892f}}}, 0x0) 02:08:18 executing program 1: setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000200)=0x80, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='blkio.bfq.time\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan1\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc850) 02:08:18 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400010) 02:08:18 executing program 4: mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa020, 0x103) 02:08:18 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) [ 413.110525][ T5819] QAT: Invalid ioctl 1074292226 02:08:18 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 413.237363][ T27] audit: type=1804 audit(1689732498.583:37): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/152/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 413.264274][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 413.291939][ T27] audit: type=1804 audit(1689732498.583:38): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/152/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 413.334802][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.351237][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:18 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x3, 0x8}, 0x8) 02:08:18 executing program 5: linkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x0) 02:08:18 executing program 1: setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:18 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 02:08:18 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004780), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x3}, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 02:08:18 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x801c581f, 0x0) 02:08:18 executing program 1: setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) 02:08:18 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) 02:08:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000014c0)='timerslack_ns\x00') write$fb(r0, &(0x7f0000000100)="39e1", 0x2) 02:08:19 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 02:08:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 413.752266][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 413.805343][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.847946][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:19 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) 02:08:19 executing program 0: r0 = syz_io_uring_setup(0x3388, &(0x7f0000000500)={0x0, 0x809b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000700)={0x1, 0x1, 0x0, &(0x7f0000000680)=[{0x0}], 0x0}, 0x20) 02:08:19 executing program 4: r0 = io_uring_setup(0x53a9, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0), 0x0) 02:08:19 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void}, 0x0) 02:08:19 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 02:08:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:19 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void}, 0x0) 02:08:19 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48) 02:08:19 executing program 0: io_uring_setup(0x20027eb3, &(0x7f0000003700)={0x0, 0x0, 0x10}) 02:08:19 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004780), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 02:08:19 executing program 3: syz_emit_ethernet(0xe, &(0x7f00000003c0)={@random="9028bbdbdb52", @empty, @void}, 0x0) 02:08:19 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x470801, 0x0) [ 414.288661][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 414.357179][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.390845][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:19 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) socket$inet_sctp(0x2, 0x1, 0x84) 02:08:19 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x42, 0x0) 02:08:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:08:19 executing program 3: fspick(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0) 02:08:19 executing program 0: r0 = syz_io_uring_setup(0x3388, &(0x7f0000000500), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000700)={0x1, 0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x0}, 0x20) 02:08:19 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:20 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) 02:08:20 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 02:08:20 executing program 5: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a007abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d00107541de01fe4e626dbf88b57c76945c710100000000000000b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x200001, 0x0) r1 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 02:08:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r0, 0x10000000) 02:08:20 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x1, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 02:08:20 executing program 4: r0 = io_uring_setup(0x28e8, &(0x7f0000000840)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xa, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}, 0x20) [ 414.853407][ T5904] loop5: detected capacity change from 0 to 64 [ 414.953035][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 415.016609][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.046668][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:20 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) 02:08:20 executing program 0: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000) 02:08:20 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{r1}, {r0}], 0x2, 0x0) 02:08:20 executing program 5: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a007abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d00107541de01fe4e626dbf88b57c76945c710100000000000000b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x200001, 0x0) r1 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 02:08:20 executing program 4: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a007abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d00107541de01fe4e626dbf88b57c76945c710100000000000000b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x200001, 0x0) r1 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 02:08:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:20 executing program 0: mknodat$null(0xffffffffffffffff, 0x0, 0xa020, 0x103) 02:08:20 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{r1}, {r0}], 0x2, 0x0) [ 415.251472][ T5922] loop5: detected capacity change from 0 to 64 02:08:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:20 executing program 4: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a007abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d00107541de01fe4e626dbf88b57c76945c710100000000000000b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x200001, 0x0) r1 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 02:08:20 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 02:08:20 executing program 0: r0 = io_uring_setup(0x28e8, &(0x7f0000000840)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) [ 415.485306][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 415.547505][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.589656][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:21 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 02:08:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{r1}, {r0}], 0x2, 0x0) 02:08:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:21 executing program 4: syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="dfea115a26973a007abc5f5e3845bbdc041775155e17070eea2ad4bc9f3c0447194395924f91ba236a188d00107541de01fe4e626dbf88b57c76945c710100000000000000b3cf8de2a9bde26310eff592d4f9"], 0x1, 0x171, &(0x7f00000001c0)="$eJzs289KMlEYx/Hn+P/1LYisFtEiCKJNjhpY7ewCugjRSaSxJNsoQXQpXUaX0iUEtWjXKmMGZ8KjIQnOaZzvZ+Pz+PPgmcUZHwUFQGzVZFeUKMm4zU5u7b6gTG8JQEiGo8fPIYD4SX78doF72wAQfW9nIl0ReX2/a0gyMzEfuHnNzxPZyfxBZDs1ylVO/unzxaPIvr9e5aeuzwf5/6n5wZ7//iuymvKTdSmM8mawfmvGtHM+IwcAIB6UFPV+7ImEXLQduxT0aa8vB33G6ytafxT0Wa8vNq6dpqQXdREA5pIYO//PL0/aIU1q5z+lnX8A0dXrDy7rjmPf/Fy4X/pnvYbCWKH+xjYolqwwfWcCsGjWbadr9fqDw3an3rJb9lW1Uq2elk6Oy5Y3+Fvj479L/4kfQER9f+ib3gkAAAAAAAAAAAAAAJjXhmya3gIAAACAkITxdyLT1wgAAAAAAAAAAAAAAAAAwLL5CgAA//+aZx0+") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x200001, 0x0) r1 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 02:08:21 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5460, 0x0) 02:08:21 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004200), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 02:08:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{r1}, {r0}], 0x2, 0x0) 02:08:21 executing program 4: open$dir(&(0x7f0000000140)='./file0\x00', 0x22c0, 0x0) 02:08:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 415.932150][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 415.965711][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.001845][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:21 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 02:08:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) poll(&(0x7f0000000140)=[{}, {r0}], 0x2, 0x0) 02:08:21 executing program 4: r0 = io_uring_setup(0x53ac, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], &(0x7f00000008c0), 0x1}, 0x20) 02:08:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:21 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, 0x0) 02:08:21 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:21 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x0, 0x0) 02:08:21 executing program 0: epoll_create(0x4c56) 02:08:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) poll(&(0x7f0000000140)=[{}, {r0}], 0x2, 0x0) 02:08:21 executing program 5: r0 = io_uring_setup(0x53a9, &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000006940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 02:08:21 executing program 4: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 02:08:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000180)='./file1/file0\x00', 0x2040, 0x0) 02:08:21 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) poll(&(0x7f0000000140)=[{}, {r0}], 0x2, 0x0) 02:08:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 416.550042][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 416.550059][ T27] audit: type=1804 audit(1689732501.893:49): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/158/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 416.580064][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:22 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) fcntl$setflags(r1, 0x402, 0x0) [ 416.652106][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.703648][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.721954][ T27] audit: type=1804 audit(1689732501.903:50): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/158/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 416.813551][ T5985] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:08:22 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000080)='net/l2cap\x00') 02:08:22 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000002080)) 02:08:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:22 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) 02:08:22 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1']) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000180)='./file1/file0\x00', 0x2040, 0x0) 02:08:22 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) 02:08:22 executing program 4: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001840), 0x200280, 0x0) 02:08:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:22 executing program 5: r0 = io_uring_setup(0x28e8, &(0x7f0000000840)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}, 0x100000) [ 417.116437][ T5996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 02:08:22 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) 02:08:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 417.388936][ T27] audit: type=1804 audit(1689732502.733:51): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/159/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 417.435401][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 417.466860][ T27] audit: type=1804 audit(1689732502.773:52): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/159/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 417.496319][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.515567][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:22 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) 02:08:22 executing program 4: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xde0, 0x0, 0x0) 02:08:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:22 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$nci(r0, 0x0, 0x0) 02:08:22 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000140)=[{r0}, {}], 0x2, 0x0) 02:08:22 executing program 0: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x0) 02:08:23 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x343, 0x0) 02:08:23 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(0x0, 0x0, 0x0) 02:08:23 executing program 0: readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000001e00)=""/144, 0x90) 02:08:23 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001340), 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/238, 0xee}, {&(0x7f0000000180)=""/96, 0x6e}, {&(0x7f0000000000)=""/33, 0xfffffffffffffe79}, {&(0x7f0000000200)=""/208, 0xd0}], 0x4) 02:08:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:23 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x80181, 0x0) [ 417.824657][ T27] audit: type=1804 audit(1689732503.173:53): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/160/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 417.877127][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 417.908762][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.948992][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.958683][ T27] audit: type=1804 audit(1689732503.213:54): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/160/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 02:08:23 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) 02:08:23 executing program 0: r0 = io_uring_setup(0x28e8, &(0x7f0000000840)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffff76) 02:08:23 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0xc0045878, 0x0) 02:08:23 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(0x0, 0x0, 0x0) 02:08:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) 02:08:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:23 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(0x0, 0x0, 0x0) 02:08:23 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) 02:08:23 executing program 0: io_uring_setup(0x395c, &(0x7f0000000200)={0x0, 0x0, 0x2}) 02:08:23 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) read$qrtrtun(r1, 0x0, 0x0) 02:08:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:23 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004780), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100), 0x0) [ 418.397298][ T27] audit: type=1804 audit(1689732503.743:55): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/161/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 418.417148][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:23 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) 02:08:23 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5452, 0x0) 02:08:23 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 02:08:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 418.436536][ T27] audit: type=1804 audit(1689732503.743:56): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/161/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 02:08:23 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 02:08:23 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b80), 0x80001, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="e6", 0x1}, {0x0}], 0x2) [ 418.494203][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:23 executing program 0: mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)) 02:08:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5425, 0x0) [ 418.539787][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 02:08:23 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) 02:08:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a000100", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:24 executing program 0: syz_emit_ethernet(0x26, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xa}]}}}}}}, 0x0) [ 418.840119][ T27] audit: type=1804 audit(1689732504.193:57): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/162/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 418.874108][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:24 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:24 executing program 4: syz_emit_ethernet(0x144, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="3bef937fb16c", @local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @multicast1}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) 02:08:24 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) 02:08:24 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x8906, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5409, 0x0) 02:08:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a000100", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 418.889278][ T27] audit: type=1804 audit(1689732504.213:58): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/162/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 418.927926][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b3b, &(0x7f0000000080)) 02:08:24 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) [ 419.000018][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:24 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='/dev/n'], &(0x7f0000000040)='./file0\x00', 0x0, 0x21048, 0x0) 02:08:24 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[], 0x0) 02:08:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a000100", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:24 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) 02:08:24 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5433, 0x0) 02:08:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="f9ffff7f00000000000001"], 0x188}}, 0x0) [ 419.174750][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a0001001900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5602, 0x0) [ 419.228923][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.275926][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:24 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) 02:08:24 executing program 0: syz_emit_ethernet(0x64, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000008060001080006040001"], 0x0) 02:08:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b3b, 0x0) 02:08:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5429, 0x0) 02:08:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x541a, &(0x7f0000000080)) 02:08:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a0001001900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:24 executing program 3: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) 02:08:24 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) [ 419.534848][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:24 executing program 4: request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 02:08:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000014c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x15) 02:08:25 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000001240)={@random="f15a43db7c3c", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f803bd", 0x28, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}}}}}, 0x0) [ 419.610620][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.633016][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:25 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000280)=""/173, 0x26, 0xad, 0x1}, 0x20) 02:08:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5424, &(0x7f0000000040)) 02:08:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a0001001900", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5404, 0x0) 02:08:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x2}}}}}}, 0x0) 02:08:25 executing program 3: fsopen(&(0x7f0000000140)='cifs\x00', 0x0) 02:08:25 executing program 4: prctl$PR_MCE_KILL(0x2a, 0x0, 0xc5572b2d33c47569) 02:08:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a000100190000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 419.908504][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:25 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:25 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0x43403d05, 0x0) 02:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x560b, 0x0) 02:08:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x2}}}}}}, 0x0) 02:08:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a000100190000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:25 executing program 4: syz_emit_ethernet(0x1a6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6017fd384d"], 0x0) 02:08:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b44, &(0x7f0000000080)) [ 420.032195][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.056896][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a000100190000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x15) 02:08:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x2}}}}}}, 0x0) 02:08:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5609, 0x0) 02:08:25 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x2}], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97"}}}}}}, 0x0) 02:08:25 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:25 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) 02:08:25 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x2}}}}}}, 0x0) 02:08:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x15) 02:08:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5437, 0x0) 02:08:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5601, 0x0) 02:08:26 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_setup(0xc5c8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f00000028c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 02:08:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x15) 02:08:26 executing program 0: add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='0000111122223333', 0x0) 02:08:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:26 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote}, "2acacd8af482355d"}}}}, 0x0) 02:08:26 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x560a, 0x0) 02:08:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x15) 02:08:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:26 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_setup(0xc5c8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f00000028c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 02:08:26 executing program 0: syz_emit_ethernet(0x1b9, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'b\x00', 0x183, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @empty]}, @srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@private1, @local, @loopback, @local, @private0, @private1, @remote]}, @dstopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@remote]}], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "7ac0b03f89e79d0c751f12a95dfbb631efa8b59e9b4f68b37a1acd17fca736e390f75456250a9ae488f58aa10a14d847ae85770d546f962e29b80282bd0c3e26aa9fcac7034f621722368ce3e8a69aa343506fabe7aa1c083595a08ed696c237dcc8ee7f36bb362ab3b08848c76bbb4a19f5f961c7e6c3790c9d5a1da7b16e8cff951c861249cff1521b12b9fcfca721b37f4ace606107441b7ae970cdafaaf9359c1cf3be94f927714cc8"}}}}}}, 0x0) 02:08:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000014c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7f) 02:08:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b32, &(0x7f0000000080)) 02:08:26 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:27 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:27 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:27 executing program 3: r0 = socket(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) 02:08:27 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_setup(0xc5c8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f00000028c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 02:08:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) 02:08:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5602, &(0x7f0000000080)=0x17) 02:08:27 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000240)={@empty, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "04c97f", 0x4c, 0x2f, 0x0, @mcast2, @mcast1, {[@dstopts]}}}}}, 0x0) 02:08:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) 02:08:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5609, &(0x7f0000000080)) 02:08:27 executing program 0: bpf$BPF_BTF_LOAD(0x1c, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 421.936895][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 421.936911][ T27] audit: type=1804 audit(1689732507.283:71): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/169/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 422.062073][ T27] audit: type=1804 audit(1689732507.323:72): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/169/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 02:08:27 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:27 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x20000}, 0x20) 02:08:27 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) io_setup(0xc5c8, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f00000028c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 02:08:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x83) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x17) 02:08:27 executing program 0: syz_emit_ethernet(0x75, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000080"], 0x0) 02:08:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380), 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:27 executing program 0: prctl$PR_MCE_KILL(0x3c, 0x0, 0x0) 02:08:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x83) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x17) 02:08:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b30, 0x0) 02:08:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380), 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:27 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x65}]}}, &(0x7f0000000280)=""/173, 0x2a, 0xad, 0x1}, 0x20) 02:08:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5419, &(0x7f0000000080)) [ 422.506493][ T27] audit: type=1804 audit(1689732507.853:73): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/170/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 422.563909][ T27] audit: type=1804 audit(1689732507.853:74): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/170/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 02:08:28 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380), 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b4e, 0x0) 02:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x83) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x17) 02:08:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x5}]}, @int]}}, &(0x7f0000000280)=""/173, 0x3e, 0xad, 0x1}, 0x20) 02:08:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}]}, @int]}}, &(0x7f0000000280)=""/173, 0x3e, 0xad, 0x1}, 0x20) 02:08:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="f9ff"], 0x188}}, 0x0) 02:08:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5411, 0x0) 02:08:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x83) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x17) 02:08:28 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x28, 0x29, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97"}}}}}}, 0x0) 02:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b72, &(0x7f0000000080)) [ 423.038303][ T6320] netlink: 372 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.144392][ T27] audit: type=1804 audit(1689732508.493:75): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/171/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 423.242563][ T27] audit: type=1804 audit(1689732508.503:76): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/171/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 02:08:28 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0307000000000000000015000000140001800800030000000000080001"], 0x28}}, 0x0) 02:08:28 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@noop, @ssrr={0x89, 0x3, 0xa}, @noop]}}, "a09d54a8"}}}}, 0x0) 02:08:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b40, 0x0) 02:08:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000280)=""/173, 0x2e, 0xad, 0x1}, 0x20) 02:08:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 02:08:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5606, 0x0) 02:08:28 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc0403d08, 0x0) 02:08:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x80045440, &(0x7f0000000040)) 02:08:28 executing program 3: add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "dff30bed80f28f45ab317b031c5f2484e880f77822495f2cf10c7b441cbe5be463f2a3b9a26d975f04fa9298edbb10357f0295269c22ce1e86066b6c089aa137"}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) [ 423.742009][ T27] audit: type=1804 audit(1689732509.093:77): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/172/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 423.782750][ T27] audit: type=1804 audit(1689732509.123:78): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/172/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 02:08:29 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:29 executing program 4: syz_emit_ethernet(0x1e6, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'b\x00', 0x170, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @empty]}, @srh={0x0, 0x12, 0x4, 0x9, 0x0, 0x0, 0x0, [@private1, @local, @loopback, @local, @private0, @private1, @remote, @mcast1, @mcast1]}, @dstopts={0x0, 0xf, '\x00', [@generic={0x0, 0x54, "9bcce0b407f44880241b2117161b9d37346c44f12233a47e9ea4b745a6ce4564fc7b365ff90e56eddaeee8ee1047ac138852fea5e5d89a7cb3c824403b93830e60a5b1ae7bd183b1b6bacf598a123bb414321624"}, @enc_lim, @hao={0xc9, 0x10, @private1}, @pad1, @jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}, @srh], @echo_request}}}}}, 0x0) 02:08:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xd) 02:08:29 executing program 5: prctl$PR_MCE_KILL(0x24, 0x1, 0x0) 02:08:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:29 executing program 3: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 02:08:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x2, 'blake2b-160-generic\x00'}, 0x58) [ 424.045524][ T27] audit: type=1326 audit(1689732509.393:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72b767cb29 code=0x0 02:08:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/173, 0x1a, 0xad, 0x1}, 0x20) 02:08:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5405, 0x0) 02:08:29 executing program 4: syslog(0x3, &(0x7f0000000340)=""/133, 0x85) 02:08:29 executing program 5: prctl$PR_MCE_KILL(0x10, 0x0, 0x0) [ 424.202095][ T27] audit: type=1804 audit(1689732509.553:80): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/173/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 02:08:29 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, 0x0, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:29 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x2, 0x0, 'blake2b-160-generic\x00'}, 0x58) 02:08:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5457, 0x0) 02:08:29 executing program 4: syslog(0x3, &(0x7f0000000340)=""/133, 0x85) 02:08:30 executing program 3: add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "dff30bed80f28f45ab317b031c5f2484e880f77822495f2cf10c7b441cbe5be463f2a3b9a26d975f04fa9298edbb10357f0295269c22ce1e86066b6c089aa137"}, 0xfffffffffffffcf6, 0xfffffffffffffffd) 02:08:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b4b, &(0x7f0000000080)) 02:08:30 executing program 0: syz_emit_ethernet(0x15, &(0x7f0000000180)={@multicast, @link_local, @val={@void}, {@llc={0x4, {@llc={0x0, 0x0, "a4"}}}}}, 0x0) 02:08:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:30 executing program 4: syslog(0x3, &(0x7f0000000340)=""/133, 0x85) 02:08:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540b, &(0x7f0000000040)) 02:08:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:30 executing program 0: prctl$PR_MCE_KILL(0x2f, 0x0, 0xc5572b2d33c47569) 02:08:30 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "7f1c8f", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts]}}}}}}}, 0x0) 02:08:30 executing program 5: add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x36, 0x0, 0x33, 0x64, 0x0, 0x33, 0x0, 0x63, 0x30, 0x64, 0x0, 0x0, 0x0, 0x0, 0x32]}, &(0x7f0000000380)={0x0, "e38c101b59e542a331596ed237edebed5d4c50f4c9cb450d011a728a25c7bfde16053540fcece3502111c4ee4c3603f3d18fcce3b22c08e516e3b141766c8c08", 0x2a}, 0x48, 0xfffffffffffffffc) 02:08:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:30 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:30 executing program 3: syz_emit_ethernet(0x11e, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'b\x00', 0xe8, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @empty]}, @srh={0x0, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@private1, @local, @loopback, @local, @private0, @private1, @remote, @mcast1]}, @dstopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@remote]}], @echo_request}}}}}, 0x0) 02:08:30 executing program 0: socket(0x2, 0x3, 0x5) 02:08:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0xb}]}}, &(0x7f0000000280)=""/173, 0x2a, 0xad, 0x1}, 0x20) 02:08:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:30 executing program 4: syslog(0x3, &(0x7f0000000340)=""/133, 0x85) 02:08:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:30 executing program 3: syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f00006bc000/0x3000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), &(0x7f0000000000)) syz_io_uring_setup(0x4c44, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008b3000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 02:08:30 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000100)) 02:08:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @int]}}, &(0x7f0000000280)=""/173, 0x18, 0xad, 0x1}, 0x20) 02:08:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17, 0x0, 0x0, 0x80000000}, 0x48) 02:08:31 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 02:08:31 executing program 0: bpf$BPF_BTF_LOAD(0x14, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=""/173, 0x0, 0xad}, 0x20) 02:08:31 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @private}}}}}, 0x0) 02:08:31 executing program 5: prctl$PR_MCE_KILL(0x29, 0x0, 0xc5572b2d33c47569) 02:08:31 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f00000021c0)={0x18}, 0x18) 02:08:31 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x4, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, 0x0, 0x0) 02:08:31 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x8906, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:31 executing program 4: r0 = syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), &(0x7f0000006080)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_setup(0x61ac, &(0x7f0000000200), &(0x7f00007ef000/0x2000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 02:08:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4bfb, &(0x7f0000000080)=0x17) 02:08:31 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x4, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:31 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, 0x0, 0x0) 02:08:31 executing program 0: prctl$PR_MCE_KILL(0x1c, 0x0, 0x0) 02:08:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4bfb, &(0x7f0000000080)=0x17) 02:08:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000280)=""/173, 0x32, 0xad, 0x1}, 0x20) 02:08:31 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x4, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:31 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x4, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, 0x0, 0x0) 02:08:31 executing program 0: prctl$PR_MCE_KILL(0x1c, 0x0, 0x0) 02:08:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4bfb, &(0x7f0000000080)=0x17) 02:08:31 executing program 4: request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2, 0x12}, 0x0, 0x0) 02:08:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:08:32 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:32 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x161042) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) 02:08:32 executing program 0: prctl$PR_MCE_KILL(0x1c, 0x0, 0x0) 02:08:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4bfb, &(0x7f0000000080)=0x17) 02:08:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:08:32 executing program 3: socketpair(0xa, 0x3, 0x3, &(0x7f0000000000)) 02:08:32 executing program 0: prctl$PR_MCE_KILL(0x1c, 0x0, 0x0) 02:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01"], 0x188}}, 0x0) 02:08:32 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)="1a00010019000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 02:08:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000280)=""/173, 0x26, 0xad, 0x1}, 0x20) 02:08:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x3e, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @int]}}, &(0x7f0000000280)=""/173, 0x3e, 0xad, 0x1}, 0x20) [ 427.005080][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 427.005097][ T27] audit: type=1804 audit(1689732512.353:90): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/178/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 427.011063][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:32 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:32 executing program 0: syz_io_uring_setup(0x29ab, &(0x7f0000000140), &(0x7f0000215000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000002080), &(0x7f00000001c0)) 02:08:32 executing program 3: r0 = socket(0x2, 0x3, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 02:08:32 executing program 1: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 02:08:32 executing program 4: bpf$BPF_BTF_LOAD(0xa, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 02:08:32 executing program 5: r0 = socket$inet6_dccp(0x2, 0x6, 0x0) getsockname(r0, 0x0, &(0x7f0000000300)) [ 427.072081][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:32 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x13, 0x2fd17f7c55130b85}, 0x4c}}, 0x0) [ 427.134877][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:32 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x3}]}}}}}}, 0x0) 02:08:32 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "8a9f73", 0x18, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x31}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 02:08:32 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x8100, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x2) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) write$FUSE_LK(r0, &(0x7f0000002380)={0x28}, 0x28) 02:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b48, 0x0) [ 427.385464][ T27] audit: type=1804 audit(1689732512.733:91): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/179/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 427.391309][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:32 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:32 executing program 4: syz_io_uring_setup(0x200000, &(0x7f0000000000)={0x0, 0x0, 0x30}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000006040), &(0x7f0000006080)) 02:08:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5432, 0x0) 02:08:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 02:08:32 executing program 0: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 02:08:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4bfa, &(0x7f0000000080)) [ 427.493031][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.502694][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:32 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0x80503d0a, 0x0) 02:08:32 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="00201a000008", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @dev, @loopback, @multicast, @multicast2}}}}, 0x0) 02:08:32 executing program 1: add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000100)={'syz', 0x3, 0x3a}, 0x0, 0x0, 0xfffffffffffffffe) 02:08:33 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "dff30bed80f28f45ab317b031c5f2484e880f77822495f2cf10c7b441cbe5be463f2a3b9a26d975f04fa9298edbb10357f0295269c22ce1e86066b6c089aa137"}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='syz', r0) 02:08:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b3c, 0x0) 02:08:33 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x4, 'b\x00', 0x8, 0x3a, 0x0, @private0, @mcast2, {[], @echo_request}}}}}, 0x0) [ 427.774092][ T27] audit: type=1804 audit(1689732513.123:92): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/180/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 02:08:33 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 02:08:33 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @private=0xa010100}}}}}, 0x0) 02:08:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}}, 0x0) 02:08:33 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @random="6a5553d458f2", @void, {@arp={0x8847, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @mcast1, @broadcast, @private0}}}}, 0x0) 02:08:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x540f, 0x0) 02:08:33 executing program 5: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r1 = semget(0x3, 0x0, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) [ 427.823210][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x2) write$FUSE_LK(r0, 0x0, 0x41) 02:08:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b71, 0x0) 02:08:33 executing program 4: syz_emit_ethernet(0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000080006040000ffffff"], 0x0) 02:08:33 executing program 3: r0 = socket(0x2, 0x3, 0x7) accept4$alg(r0, 0x0, 0x0, 0x0) 02:08:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x1e}, @int]}}, &(0x7f0000000280)=""/173, 0x36, 0xad, 0x1}, 0x20) [ 427.954704][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.983686][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7}, {0x9, 0x5}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x65}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000280)=""/173, 0x4c, 0xad, 0x1}, 0x20) [ 428.187036][ T27] audit: type=1804 audit(1689732513.533:93): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/181/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 428.213805][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 428.269726][ T27] audit: type=1804 audit(1689732513.533:94): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/181/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 428.309654][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:33 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 02:08:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b40, &(0x7f0000000080)) 02:08:33 executing program 0: prctl$PR_SET_KEEPCAPS(0x8, 0x0) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "dff30bed80f28f45ab317b031c5f2484e880f77822495f2cf10c7b441cbe5be463f2a3b9a26d975f04fa9298edbb10357f0295269c22ce1e86066b6c089aa137"}, 0x48, 0xfffffffffffffffd) 02:08:33 executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @private=0xa010100, {[@noop, @noop]}}}}}}, 0x0) 02:08:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5457, &(0x7f0000000080)) 02:08:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x80045430, 0x0) [ 428.317554][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x560e, &(0x7f0000000080)=0x17) 02:08:33 executing program 5: prctl$PR_MCE_KILL(0x7, 0x0, 0x0) 02:08:33 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') 02:08:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5416, 0x0) 02:08:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b40, &(0x7f0000000080)) 02:08:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b4c, &(0x7f0000000080)) [ 428.584876][ T27] audit: type=1804 audit(1689732513.933:95): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/182/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 428.640204][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:34 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a006) 02:08:34 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) 02:08:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4bfb, &(0x7f0000000080)) 02:08:34 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6038677c0000000300000014000000000000ff020000907800000000000000000000000022eeb2fb78e7"], 0x0) 02:08:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b40, &(0x7f0000000080)) 02:08:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7f) [ 428.700651][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.701546][ T27] audit: type=1804 audit(1689732513.973:96): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/182/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 428.714295][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:34 executing program 1: prctl$PR_MCE_KILL(0x2b, 0x0, 0x0) 02:08:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 02:08:34 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000340)={@random="19f354850585", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x10, 0x3a, 0x0, @mcast2, @mcast2, {[], @ni}}}}}, 0x0) 02:08:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b40, &(0x7f0000000080)) 02:08:34 executing program 1: syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), 0x0) syz_io_uring_setup(0x52be, &(0x7f0000000040), &(0x7f00004b3000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 02:08:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2a812, r0, 0x8000000) [ 428.935927][ T6639] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 428.935927][ T6639] The task syz-executor.5 (6639) triggered the difference, watch for misbehavior. [ 429.063031][ T27] audit: type=1804 audit(1689732514.413:97): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/183/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 429.074704][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 429.098636][ T27] audit: type=1804 audit(1689732514.413:98): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/183/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 429.149850][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:34 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) [ 429.163599][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.319233][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 429.331667][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.340005][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:35 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) 02:08:35 executing program 0: r0 = socket(0x2, 0x3, 0x7) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 02:08:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis256-aesni,sha1-ce)\x00'}, 0x58) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 02:08:35 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "13eb597c094ab67fe3404a9ed3d8d6b90145d7f79755129b207a90f3041e95c561ad4c8ce59dd198201320a4463eafdb1107cfc90441f2c992785508361a9a12"}, 0x48, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, r0) 02:08:35 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'b\x00', 0x20, 0x3c, 0x0, @private0, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}], @echo_request}}}}}, 0x0) 02:08:35 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) 02:08:35 executing program 0: fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) 02:08:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1a) 02:08:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000040)=0x21) [ 429.832706][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x1000000}]}}, &(0x7f0000000280)=""/173, 0x26, 0xad, 0x1}, 0x20) [ 429.881841][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.906721][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:35 executing program 4: syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_io_uring_setup(0x61ac, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f00007ef000/0x2000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 02:08:35 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a006) [ 430.196336][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 430.227229][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.239115][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:35 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) 02:08:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8}]}}, &(0x7f0000000280)=""/173, 0x2a, 0xad, 0x1}, 0x20) 02:08:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x38}}, 0x0) 02:08:35 executing program 4: syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_io_uring_setup(0x61ac, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f00007ef000/0x2000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 02:08:35 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:35 executing program 3: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x0, 0x0) 02:08:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x188}}, 0x0) 02:08:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17, 0x10000, 0x0, 0x80000000}, 0x48) [ 430.645154][ T6690] ntfs: (device nbd3): ntfs_fill_super(): Unable to determine device size. 02:08:36 executing program 3: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x0, 0x0) 02:08:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000080)=0x17) 02:08:36 executing program 4: syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_io_uring_setup(0x61ac, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f00007ef000/0x2000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 02:08:36 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x12}) [ 430.804670][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 430.841054][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.870502][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:36 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) 02:08:36 executing program 3: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x0, 0x0) 02:08:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000080)=0x17) 02:08:36 executing program 0: syz_emit_ethernet(0x79, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x43, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb4749a2e3b9910a993e607c"}}}}}}, 0x0) 02:08:36 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:36 executing program 4: syz_io_uring_setup(0x399e, &(0x7f0000000140), &(0x7f0000ff8000/0x4000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f0000002080), 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_io_uring_setup(0x61ac, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f00007ef000/0x2000)=nil, &(0x7f0000652000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000280)) 02:08:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000080)=0x17) 02:08:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:37 executing program 3: syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x0, 0x0) 02:08:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x17}, 0x48) 02:08:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) [ 431.689648][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 431.728955][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000080)=0x17) [ 431.781240][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:37 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:37 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 02:08:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @int]}}, &(0x7f0000000280)=""/173, 0x1000000, 0xad, 0x1}, 0x20) 02:08:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5408, &(0x7f0000000080)) 02:08:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x0, 0x0, 0x0, 0x1002, 0x1}, 0x48) 02:08:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b44, 0x0) 02:08:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, "22eeb2fb78e7f6520fde8e32bd5f5c5be7faf5a6bfa42c97c275aa102f2e19eb"}}}}}}, 0x0) 02:08:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto, @int]}}, &(0x7f0000000280)=""/173, 0x36, 0xad, 0x1}, 0x20) 02:08:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x80045438, &(0x7f0000000040)) [ 432.579079][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 432.579096][ T27] audit: type=1804 audit(1689732517.923:103): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/189/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 432.616059][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 432.650793][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.686439][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:38 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/173, 0x1a, 0xad, 0x1}, 0x20) 02:08:38 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff6a5553d458f208060001080006040002bbbbbbbbbbbbac14"], 0x0) [ 432.744742][ T27] audit: type=1804 audit(1689732517.933:104): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/189/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:08:38 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:38 executing program 0: syz_io_uring_setup(0x6afc, &(0x7f0000005fc0), &(0x7f000076e000/0x4000)=nil, &(0x7f000076f000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x20a8, &(0x7f0000000280), &(0x7f000076f000/0x1000)=nil, &(0x7f000076f000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 02:08:38 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) 02:08:38 executing program 1: r0 = syz_io_uring_setup(0x6afc, &(0x7f0000005fc0), &(0x7f000076e000/0x4000)=nil, &(0x7f000076f000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000006080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x11, r0, 0x8000000) 02:08:38 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000500)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'b\x00', 0x10, 0x2c, 0x0, @private0, @mcast2, {[@routing], @echo_request}}}}}, 0x0) 02:08:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5434, 0x0) 02:08:38 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @random="6a55539458d2", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@noop, @ssrr={0x89, 0x3, 0xa}, @noop]}}}}}}, 0x0) 02:08:38 executing program 5: syz_io_uring_setup(0x52fa, &(0x7f0000000000), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x5, &(0x7f0000005fc0), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000006040), &(0x7f0000006080)) 02:08:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x560a, &(0x7f0000000080)) 02:08:38 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '8g|', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "7f1c8f", 0x0, 0x1d, 0x0, @private1, @remote, [], "df5de61439b3bdd8"}}}}}}}, 0x0) 02:08:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x560f, 0x0) [ 433.177107][ T27] audit: type=1804 audit(1689732518.523:105): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/190/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 433.187346][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x10}, {0x5, 0x4}]}]}}, &(0x7f0000000280)=""/173, 0x3e, 0xad, 0x1}, 0x20) [ 433.302836][ T27] audit: type=1804 audit(1689732518.523:106): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/190/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 433.399902][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.425300][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:39 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b4d, 0x0) 02:08:39 executing program 5: r0 = syz_io_uring_setup(0x8, &(0x7f0000005fc0), &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000006040), &(0x7f0000006080)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4013, r0, 0x10000000) 02:08:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x4b52, &(0x7f0000000080)) 02:08:39 executing program 0: prctl$PR_MCE_KILL(0x24, 0x0, 0x0) 02:08:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:08:39 executing program 0: r0 = socket(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 02:08:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5603, &(0x7f0000000080)) 02:08:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x402c542d, &(0x7f0000000080)) 02:08:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5411, &(0x7f0000000080)) 02:08:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x6, 0x101}, 0x14}}, 0x0) 02:08:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 434.560149][ T27] audit: type=1804 audit(1689732519.913:107): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/191/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 434.587593][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 434.599431][ T27] audit: type=1804 audit(1689732519.913:108): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/191/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 434.629097][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.637296][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:40 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:40 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x2b, 0x0, 0x0) 02:08:40 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x8, 0x0, 0x4) 02:08:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x4, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) 02:08:40 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x22, 0x0, 0x0) 02:08:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 02:08:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00C'], 0x28}, 0x0) 02:08:40 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 02:08:40 executing program 0: r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x541b, 0x0) 02:08:41 executing program 4: r0 = socket(0xa, 0x3, 0x6) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000100)={'batadv_slave_0\x00'}) [ 436.088337][ T27] audit: type=1804 audit(1689732521.433:109): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/192/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 436.124738][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 436.126519][ T27] audit: type=1804 audit(1689732521.463:110): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/192/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 436.165553][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.179221][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:42 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:42 executing program 3: r0 = socket(0xa, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 02:08:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 02:08:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}}, 0x0) 02:08:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:42 executing program 3: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @broadcast, @local}}}}) 02:08:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:42 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x48, 0x0, 0x0) 02:08:42 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x42, 0x0, 0x0) 02:08:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0xfffffffffffffe07) 02:08:42 executing program 4: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local}}}}) 02:08:43 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:43 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x1e, 0x0, 0x0) 02:08:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}}, 0x0) 02:08:43 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x3, 0x0, 0x0) 02:08:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x1c, 0x0}, 0x0) 02:08:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) 02:08:43 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 02:08:43 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x5, 0x0, 0x2) 02:08:43 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:08:43 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x25, 0x0, 0x0) 02:08:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000013c0)={0x14, 0xa, 0x6, 0xb46d5125f5c5172b}, 0x14}}, 0x0) 02:08:43 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 02:08:43 executing program 3: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f9, &(0x7f0000000080)={'tunl0\x00', 0x0}) 02:08:43 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x11, 0x0, 0x4) 02:08:43 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 438.355425][ T27] audit: type=1804 audit(1689732523.703:111): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/196/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 438.396149][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 438.417262][ T27] audit: type=1804 audit(1689732523.733:112): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/196/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 438.444667][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.463375][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:44 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 02:08:44 executing program 3: r0 = socket(0x23, 0x5, 0x0) r1 = dup2(r0, r0) close(r1) 02:08:44 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 02:08:44 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x37, 0x0, 0x0) 02:08:44 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:44 executing program 0: r0 = socket(0x18, 0x0, 0x2) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, 0x0) 02:08:44 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x4a, 0x0, 0x4) 02:08:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x810) 02:08:44 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:44 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:08:44 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0xd, 0x0, 0x0) 02:08:44 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x29, 0x0, 0x0) 02:08:44 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x6, 0x0, 0x0) 02:08:44 executing program 1: r0 = syz_open_dev$loop(0x0, 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:44 executing program 4: r0 = socket(0x23, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 02:08:44 executing program 3: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 02:08:45 executing program 0: r0 = socket(0x23, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 02:08:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 439.916181][ T27] audit: type=1804 audit(1689732525.263:113): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/197/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 439.945428][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 439.965209][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.971896][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.990842][ T27] audit: type=1804 audit(1689732525.263:114): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/197/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 440.019862][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.027802][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x2c, 0x0, 0x0) 02:08:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x28}, 0x0) 02:08:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:46 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:08:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:08:46 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x16, 0x0, 0x4) 02:08:46 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x60}}, 0x0) 02:08:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000009e802000000080001"], 0x1c}}, 0x0) 02:08:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 02:08:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:46 executing program 3: r0 = socket(0x25, 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 02:08:46 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{}], 0x1, 0x10000) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:46 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 02:08:46 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x5, 0x0, 0x11) [ 441.474818][ T27] audit: type=1804 audit(1689732526.823:115): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/198/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 441.495436][ T6971] infiniband syz2: set active [ 441.507406][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 441.516843][ T6971] infiniband syz2: added veth0_vlan [ 441.526260][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.543444][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.555735][ T27] audit: type=1804 audit(1689732526.853:116): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/198/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 441.601812][ T6971] RDS/IB: syz2: added [ 441.609252][ T6971] smc: adding ib device syz2 with port count 1 [ 441.618673][ T6971] smc: ib device syz2 port 1 has pnetid [ 442.040378][ T3600] Bluetooth: hci2: command 0x0406 tx timeout [ 442.040404][ T3603] Bluetooth: hci1: command 0x0406 tx timeout [ 442.046433][ T3600] Bluetooth: hci5: command 0x0406 tx timeout [ 442.053409][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 442.060137][ T3594] Bluetooth: hci0: command 0x0406 tx timeout [ 442.071273][ T48] Bluetooth: hci3: command 0x0406 tx timeout 02:08:47 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:08:47 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 02:08:47 executing program 0: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local}}}}) 02:08:47 executing program 3: r0 = socket(0xa, 0x3, 0x6) ioctl$SIOCX25GSUBSCRIP(r0, 0x8916, &(0x7f0000000100)={'batadv_slave_0\x00'}) 02:08:48 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x60}}, 0x0) 02:08:48 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{}], 0x1, 0x10000) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:48 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 02:08:48 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0xf, 0x0, 0x0) 02:08:48 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2002) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 02:08:48 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 442.894121][ T7007] 9pnet_fd: Insufficient options for proto=fd 02:08:48 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x2b, 0x0, 0x0) 02:08:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x22, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x4, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) [ 442.932585][ T27] audit: type=1804 audit(1689732528.283:117): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/199/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 442.991427][ T7010] rdma_rxe: already configured on veth0_vlan [ 443.018967][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 443.061318][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.084002][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.095971][ T27] audit: type=1804 audit(1689732528.323:118): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/199/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 02:08:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@exit, @call], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:08:48 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x36, 0x0, 0x0) 02:08:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f00000003c0)=[@dstopts_2292={{0x18}}, @dstopts={{0x18}}], 0x30}, 0x0) 02:08:48 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:08:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '&*\'\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) [ 443.467454][ T27] audit: type=1804 audit(1689732528.813:119): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/200/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 443.495564][ T27] audit: type=1804 audit(1689732528.813:120): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/200/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 443.518239][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 443.545222][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.559276][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:49 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{}], 0x1, 0x10000) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:49 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x140d, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 02:08:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts_2292={{0x18}}, @hopopts_2292={{0x18}}], 0x30}, 0x20008890) 02:08:49 executing program 3: r0 = socket(0xa, 0x80001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 02:08:49 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x16, 0x0, 0x0) 02:08:49 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:08:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ff7f0000000000000900000006"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:08:49 executing program 1: r0 = socket(0x25, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 02:08:49 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x5, 0x0, 0x0) 02:08:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 443.925810][ T27] audit: type=1804 audit(1689732529.273:121): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/201/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:08:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c, 0x0}, 0x0) 02:08:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000580)={0xfffffffffffffffd, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 443.973185][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 443.987418][ T27] audit: type=1804 audit(1689732529.313:122): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/201/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 444.078595][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.106598][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:50 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x80047453, 0x0) 02:08:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @dev}}}]}]}, 0x44}}, 0x0) 02:08:50 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x43, 0x0, 0x4) 02:08:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) 02:08:50 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:08:50 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x10, 0x0, 0x0) 02:08:50 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0xc, 0x33, 'erspan0\x00'}}]}, 0x38}}, 0x0) 02:08:50 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x2e, 0x0, 0x0) 02:08:50 executing program 1: r0 = socket(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) [ 444.820280][ T27] audit: type=1804 audit(1689732530.173:123): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/202/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 444.835884][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.859699][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:50 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) [ 444.891918][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.913565][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:50 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x18, 0x0, 0x0) [ 444.928224][ T27] audit: type=1804 audit(1689732530.173:124): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/202/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 02:08:50 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x4c, 0x0, 0x4) 02:08:50 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x42, 0x0, 0x4) 02:08:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:50 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:08:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x18, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:08:50 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x11, 0x0, 0x0) 02:08:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2, 0x8001}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts_2292={{0x18}}], 0x18}, 0x0) 02:08:51 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x10, 0x0, 0x0) 02:08:51 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x28, 0x0, 0x0) 02:08:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="1c", 0x1}], 0x1, &(0x7f0000000400)=[@hopopts_2292={{0x18}}, @hopopts_2292={{0x18}}], 0x30}, 0x20008890) 02:08:51 executing program 0: r0 = socket(0x23, 0x5, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:08:51 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, 0x1405, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0xc, 0x33, 'erspan0\x00'}}]}, 0x38}}, 0x0) 02:08:51 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x49, 0x0, 0x0) [ 445.821632][ T27] audit: type=1804 audit(1689732531.173:125): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/203/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 445.831039][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 445.929745][ T27] audit: type=1804 audit(1689732531.173:126): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/203/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 445.958568][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.981689][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.996130][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x1800}, 0x1c) 02:08:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}) 02:08:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:51 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:08:51 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x8, 0x0, 0x0) 02:08:51 executing program 3: r0 = socket(0x25, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 02:08:51 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x7, 0x0, 0x0) 02:08:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2}], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:08:51 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x23, 0x0, 0x0) 02:08:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x4, 0x0, &(0x7f0000000040)) [ 446.645680][ T27] audit: type=1804 audit(1689732531.993:127): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/204/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 446.659749][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x15, 0x15, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x4, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) 02:08:52 executing program 0: r0 = socket(0x1, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x4, 0x0, 0x0) [ 446.756127][ T27] audit: type=1804 audit(1689732531.993:128): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/204/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 446.783270][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:08:52 executing program 1: r0 = socket(0xa, 0x5, 0x0) sendto$x25(r0, &(0x7f0000000200)="02", 0x1, 0x0, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) [ 446.812468][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.826895][ T7134] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 02:08:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:52 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x3a, 0x0, 0x4) 02:08:52 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x17, 0x0, 0x4) 02:08:52 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:08:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:08:52 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x46, 0x0, 0x0) 02:08:52 executing program 4: r0 = socket(0x18, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 447.553521][ T7142] 9pnet_fd: Insufficient options for proto=fd 02:08:52 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x13, 0x0, 0x0) 02:08:52 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x8, 0x0, 0x0) 02:08:53 executing program 0: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x29, 0x39, 0x0, 0x4) 02:08:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@routing={0x0, 0x4, 0x2, 0x0, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}]}, 0x28) 02:08:53 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2}, 0x10}}, 0x0) [ 447.818163][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 447.831312][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.839720][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/v4l2_mem2mem', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_io_uring_setup(0x77d0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r3, 0x80040b3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001e80)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000001780), &(0x7f0000001800)=0x60) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r4 = open$dir(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xef85) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)) 02:08:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000100}]}) 02:08:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x1, 0x201}, 0x14}}, 0x0) 02:08:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1, &(0x7f0000000040)=@raw=[@kfunc], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:08:53 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:08:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hopopts_2292={{0x18}}], 0x18}, 0x4000004) 02:08:53 executing program 3: r0 = socket(0xa, 0x3, 0x6) r1 = dup2(r0, r0) bind$isdn_base(r1, &(0x7f0000000000), 0x6) 02:08:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010058}]}) 02:08:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010015}]}) 02:08:54 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x46040, 0x0) [ 448.731590][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 448.731607][ T27] audit: type=1804 audit(1689732534.083:131): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/206/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:08:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "5b52ae29"}, 0x0, 0x0, 0x0, 0x0}) [ 448.784021][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 448.833654][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.861501][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.873441][ T27] audit: type=1804 audit(1689732534.123:132): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/206/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 449.209864][ T3782] usb 2-1: new high-speed USB device number 15 using dummy_hcd 02:08:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x292}]}) 02:08:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x17b}]}) [ 449.449590][ T3782] usb 2-1: Using ep0 maxpacket: 32 02:08:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28e}]}) 02:08:54 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r0, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:08:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) 02:08:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/v4l2_mem2mem', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_io_uring_setup(0x77d0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r3, 0x80040b3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000)=[0x0, 0x101], 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)) [ 449.569821][ T3782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.586559][ T3782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.609203][ T3782] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 449.635451][ T3782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.665217][ T3782] usb 2-1: config 0 descriptor?? [ 449.667508][ T27] audit: type=1804 audit(1689732535.013:133): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/207/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 449.713872][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:08:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28e}]}) [ 449.733331][ T3782] hub 2-1:0.0: USB hub found [ 449.751713][ T27] audit: type=1804 audit(1689732535.053:134): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/207/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 449.793929][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.817073][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:55 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 449.929711][ T3782] hub 2-1:0.0: 1 port detected 02:08:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28e}]}) 02:08:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x288}]}) [ 450.218903][ T27] audit: type=1804 audit(1689732535.563:135): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/208/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 450.281665][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 450.324732][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.345576][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.351283][ T27] audit: type=1804 audit(1689732535.603:136): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/208/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 450.789769][ T3782] hub 2-1:0.0: activate --> -90 [ 451.218932][ T3898] usb 2-1: USB disconnect, device number 15 [ 451.472645][ T3782] usb 2-1-port1: config error 02:08:57 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "5b52ae29"}, 0x0, 0x0, 0x0, 0x0}) 02:08:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000107}]}) 02:08:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28e}]}) 02:08:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28d}]}) 02:08:57 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:08:57 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:08:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000000499a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x0, &(0x7f0000000000)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0xffffffffffffffff, 0x0) getpgid(r0) r5 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x404, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYBLOB="e9bbe23894ed970a1600468a3127b353d4", @ANYRESHEX=r4, @ANYRES16=r2], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 02:08:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 451.858212][ T27] audit: type=1804 audit(1689732537.203:137): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/209/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 451.885829][ T27] audit: type=1804 audit(1689732537.233:138): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/209/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 451.915112][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 451.964765][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.277372][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:08:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02}]}) 02:08:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:08:58 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) [ 452.899774][ T3782] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 453.162159][ T3782] usb 2-1: Using ep0 maxpacket: 32 [ 453.280055][ T3782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.291483][ T3782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.301478][ T3782] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 453.310798][ T3782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.335658][ T3782] usb 2-1: config 0 descriptor?? [ 453.380661][ T3782] hub 2-1:0.0: USB hub found [ 453.599823][ T3782] hub 2-1:0.0: 1 port detected [ 454.469768][ T3782] hub 2-1:0.0: activate --> -90 [ 454.901289][ T3690] usb 2-1: USB disconnect, device number 16 [ 455.169624][ T3782] usb 2-1-port1: config error 02:09:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:00 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "5b52ae29"}, 0x0, 0x0, 0x0, 0x0}) 02:09:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x287}]}) 02:09:00 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) 02:09:00 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:00 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) 02:09:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 455.573019][ T27] audit: type=1804 audit(1689732540.923:139): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/210/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 455.635554][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 455.669881][ T27] audit: type=1804 audit(1689732540.953:140): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/210/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 455.711321][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.753244][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 455.799728][ T3690] usb 2-1: new high-speed USB device number 17 using dummy_hcd 02:09:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:01 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 456.069674][ T3690] usb 2-1: Using ep0 maxpacket: 32 02:09:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(0x0, 0x0, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 456.189861][ T3690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.209624][ T3690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.219444][ T3690] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 456.316173][ T3690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.329746][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 456.341800][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.361428][ T3690] usb 2-1: config 0 descriptor?? [ 456.379361][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.427533][ T3690] hub 2-1:0.0: USB hub found [ 456.629861][ T3690] hub 2-1:0.0: 1 port detected [ 457.511096][ T3690] hub 2-1:0.0: activate --> -90 [ 457.938258][ T3782] usb 2-1: USB disconnect, device number 17 [ 458.169756][ T3690] usb 2-1-port1: config error 02:09:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090003206d041cc38f1c0000000109022400010000a00009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000c0000000c0001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "5b52ae29"}, 0x0, 0x0, 0x0, 0x0}) 02:09:03 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) 02:09:03 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:03 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:03 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) 02:09:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(0x0, 0x0, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 458.617057][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 458.661225][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.692953][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:04 executing program 2: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 458.792213][ T3782] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 458.976688][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 459.012494][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.050724][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.069756][ T3782] usb 2-1: Using ep0 maxpacket: 32 02:09:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 459.216910][ T3782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.238466][ T3782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 02:09:04 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(0x0, 0x0, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) [ 459.303299][ T3782] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=1c.8f [ 459.327598][ T3782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.412231][ T3782] usb 2-1: config 0 descriptor?? [ 459.438574][ T27] audit: type=1804 audit(1689732544.783:141): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/214/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 459.477757][ T3782] hub 2-1:0.0: USB hub found 02:09:04 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) [ 459.509874][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 459.518360][ T27] audit: type=1804 audit(1689732544.823:142): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/214/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 02:09:04 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) sendfile(r0, r1, 0x0, 0xc0af) [ 459.553888][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.579102][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.679773][ T3782] hub 2-1:0.0: 1 port detected [ 460.579798][ T3782] hub 2-1:0.0: activate --> -90 [ 461.007534][ T3644] usb 2-1: USB disconnect, device number 18 [ 461.263169][ T3782] usb 2-1-port1: config error 02:09:06 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200), 0x0, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x298}]}) 02:09:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 02:09:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10) 02:09:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0xc0b, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 02:09:07 executing program 4: socket$inet(0x2, 0x5, 0x9d) 02:09:07 executing program 1: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='Y', 0x1, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$describe(0x6, r0, 0x0, 0x0) [ 461.698054][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 461.729071][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:09:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 461.771065][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x30, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) [ 462.106733][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 462.141455][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.187142][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:07 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 02:09:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200), 0x0, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:07 executing program 3: bpf$PROG_LOAD(0x1c, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:09:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:07 executing program 4: bpf$BPF_PROG_ATTACH(0x15, &(0x7f0000000180), 0x14) 02:09:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002d00)) 02:09:07 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x191940, 0x0) 02:09:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f0000000180)='syzkaller\x00', 0x7, 0xa2, &(0x7f00000001c0)=""/162, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:07 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x7, &(0x7f0000001540)=@framed={{}, [@ldst, @call, @map_fd]}, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 462.654032][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000800)=""/135, 0x1a, 0x87, 0x1}, 0x20) 02:09:08 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000017c0)={0xffffffffffffffff, 0x10, 0x0, 0x0, 0x0}, 0x20) [ 462.701763][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.726893][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:08 executing program 0: syz_clone(0x430a3080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 02:09:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200), 0x0, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:08 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x0, 0x18}, 0xc) 02:09:08 executing program 1: syz_clone(0x7000c000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 02:09:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xaa}, 0x80) 02:09:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 463.706582][ T27] audit: type=1804 audit(1689732549.053:143): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/218/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 463.718559][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:09 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x20}, 0x10) 02:09:09 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) [ 463.812030][ T27] audit: type=1804 audit(1689732549.063:144): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/218/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 463.839878][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.868009][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 02:09:09 executing program 0: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002680)) 02:09:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 02:09:09 executing program 0: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f00)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 02:09:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) 02:09:10 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0/file0\x00'}, 0x10) 02:09:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40)) 02:09:10 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001400)="10", 0x1}], 0x2}, 0x0) 02:09:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 464.745884][ T27] audit: type=1804 audit(1689732550.093:145): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/219/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 02:09:10 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)="ce", 0x1}, {&(0x7f0000000200)="11", 0x1}, {0x0}, {&(0x7f0000001400)="10", 0x1}], 0x4, &(0x7f00000015c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0xf, 0x0, [@rand_addr, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x4}]}}}], 0x28}, 0x0) 02:09:10 executing program 1: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) [ 464.787866][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) [ 464.872137][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.878597][ T27] audit: type=1804 audit(1689732550.133:146): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/219/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 464.899793][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:10 executing program 4: socketpair(0x76000000, 0x0, 0x0, &(0x7f0000000e40)) 02:09:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r0, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:10 executing program 0: socketpair(0xf, 0x0, 0x0, &(0x7f0000000e40)) 02:09:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) 02:09:10 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x480100, 0x0) 02:09:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 02:09:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x4020940d, 0x0) 02:09:11 executing program 3: socketpair(0x0, 0xf, 0x0, &(0x7f0000000e40)) 02:09:11 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000c40), 0x4) 02:09:11 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0xfdb1) 02:09:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'dummy0\x00'}) [ 465.753303][ T27] audit: type=1804 audit(1689732551.103:147): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/220/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 465.781035][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 465.818019][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.863068][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.881121][ T27] audit: type=1804 audit(1689732551.103:148): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/220/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{}], 0x1, 0x10000) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 02:09:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000100)=ANY=[], &(0x7f0000000100)=""/239, 0x80, 0xef, 0x1}, 0x20) 02:09:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) 02:09:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r0) 02:09:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'hsr0\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454d4, 0x0) 02:09:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'macvlan1\x00', 0x2}) 02:09:12 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2}]}, {0x0, [0x0, 0x5f, 0x2e]}}, &(0x7f0000000180)=""/240, 0x29, 0xf0, 0x1}, 0x20) 02:09:12 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x1ff) [ 466.744019][ T27] audit: type=1804 audit(1689732552.093:149): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/221/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 466.754893][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 02:09:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x81, 0xff, 0x8, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 466.864599][ T27] audit: type=1804 audit(1689732552.093:150): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/221/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 466.895012][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.919721][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'team0\x00', 0x2103}) 02:09:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/198, 0x2a, 0xc6, 0x1}, 0x20) 02:09:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x0, 0x0, 0x0, 0x4}, 0x48) 02:09:12 executing program 1: socketpair(0x11, 0x3, 0x3f, &(0x7f0000000000)) 02:09:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="680000000000000001"], 0x98}, 0x0) 02:09:13 executing program 4: socketpair(0x11, 0x0, 0x0, &(0x7f0000000280)) 02:09:13 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x11, 0x3, 0x3f, &(0x7f0000000000)) 02:09:13 executing program 0: bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x6, 0x5, 0x6, 0x701, r0, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x48) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000004c0)=0x7) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r2}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)={0x0, 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000000000071004001000000018500000000000000000000000000000183000000500000000000000000000001860000004000000000000000300fb009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r3, 0x4) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_clone(0x8100, &(0x7f0000000d00), 0x0, 0x0, &(0x7f0000001d40), 0x0) syz_clone(0x4c008600, &(0x7f0000000140)="426fda39dbce97f41878a36e9788695b49ce63b175f7111190d0f0540c79507bf7d36af372f063a410d786db8fafaef893cefce7ba89c8732e4bbc35e9bf1f2d2f251a407fb5f43bbb5040eb270f32c706516e2ded066ab4e42bea129a575ffccd31a9a8dfc2d9367004ddf9b4369a11a5bf3f96765654eff385de3061f40df9823ad66d8f24243b9bd148c2d2276d8745fbbbb21973fc40ebbe0789a8068ada37f7d815e1e6bcb6f43f7802ce6ebdde2e7e714a130a062b34d35dc75d8f54e1b970612a3f10f6f3cc178f48d5668d17eeef47634c195c990f774b2b9e8fbe744a3d5301528e4d18f2d0bab790e123", 0xef, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="3ebb4f4fafa4fc6e6c008a327dd796d4343fe10c93dc3cad1bc2b75cc2fdaa4052f744f274f41b4bcd8297a62016eed65924bd5cf6d5d334d0e5273fbe1fb0297f8268d5cb80f4144899182ea85ce5ff3162316a5851a76a0d7139938d34378dc51e323777346633ecb185774f9c6464b94ce8c5e2d0329379ea917df2138ea6b542a7112f229cc01f6942743677be380afc12f91d32bb83c87dccab9cccf27969136a9b2d5ede3d3dd85706e1d13d282eace81dade834a61c174c1c8f82b453f348e209d54f1db5b4aecce4e6912fafa82d7a58d4fac5ef85039568") [ 467.741116][ T27] audit: type=1804 audit(1689732553.093:151): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/222/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 02:09:13 executing program 4: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x0, &(0x7f00000000c0)="1ba49ac37f01a05f5f3df7abaca27e3444fab6d05ca395c0fcf14c156a2c92936e7e843817176a33d02951430be0fe066facb9b76f6d0f7b3526eebb7ab0470eb46db38dec6971ec912e899770e1e8237a99c1f988dd89380360ad5af5b772feedee52ee1bb3e154f133e02031d7be6c344f35f7cd4f90616541ab8a91ffb535851dca9f7af83432ce50a1a2b27d1e46ce544f2d59a14865fca3a547e451e27e3613831efddfdf2d2f2a8f4385793505c31cc5bb7a709b6894191a14d7148098d04c3642e68daa3a6f2cc75dda3168cb10bede9b3295901e4cfd133f6000876025fb8f6a62258717f312a49af2dc6a0d994028", 0xf3, 0x0, &(0x7f0000000200), &(0x7f0000000240)="64f4c4de1b624009fe42326b") write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000002c0)='syz1\x00'}, 0x30) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r1}, 0x8) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000400), 0x2, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r1}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) openat$cgroup_int(r2, &(0x7f0000000500)='memory.low\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000540)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) gettid() [ 467.788539][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 467.811940][ T27] audit: type=1804 audit(1689732553.123:152): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/222/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 02:09:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendto$inet6(r2, &(0x7f0000000200)="cc", 0x1, 0x0, &(0x7f00000002c0)={0x1c, 0x1c, 0x2}, 0x1c) 02:09:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000002480)={&(0x7f0000001180)=@in={0x10, 0x2}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001200)="61b95e9b6dfd91b1375b8f889d31d9df51bf068ed81f435b85b1681cf1cec648f3a41fce495cf250febbdf55f2a2cbae577443a8cffdb7a3a9fa7f9a327b7b1a1cbf24bda137b069de47eae66b3a0417b5c01f07d555288d1ba1b520365dd6f29c63e3b90e6296cf2e87717de3554081907bac5ad73167a0", 0x78}, {&(0x7f0000001280)="315572cbe8f40b37e42a0daa4294134eca1dc48d108dff4c6c2c6c7171b57eb1e6f87b2c531e3da4cca819331167f17755f3f691cfc97dcc67327ef124b02edc6f4a037aa1515e70a2ad2892b9d05c8161e59e9d85bbd82d704a2088b0317b368bb44892781cb5355bf67c2a9af402cd295ae673ce75a25240e6281161221804a912c21d31dbee15c09d17507a23658e5bf454b9815d7a1a12b79db179d0d65484cffbd469943fdea958d0da21ba616faf920e42cb01d88281c5fefb24b9db7eb5830ffba9", 0xc5}, {&(0x7f0000001380)="6cb03cfa530ca61117de5c20db1545b6f4c861d6fb3970d4765aacba46d589443faff17ef004efc1bbc89ae3f902e59f3f43f07baf08d8774145358079bd5fdb24bbfb58aef4ec9703dcd1eb3aecfa4625b1265df145e5e14eddae5bf5556dad8e5013ac94a36fb31845397cfc18600fc8ee1bb5733fa7619b2d907ef48e7f2347fe4aa5e7c9ec128296b9c6cfd8df0e7748259ec1f4f7bdbb412e6f1fb2a932bb3ff2cd6eb7b30f1bcbdd563fccd6259784bb3c10b40ecca237f3583bfebbe74a0ddcad61cd369e760958aac57b1d23e385818fcf5d72084f0c94449b068cb85bcbb9b42f08a5618de94b74b0ed19f3c03ee7e52021df316017f79c4427c2570d92e6e73d61f8ae33b869080914b23e355c88a0fdab24dbadd4c3d4819573e123f25a120d56c8f871a8338c0c05dc181d5ef34c04a26c0bb3898ee2d69d22b4e99b3640796be72d6ae411e4d7ee0107ab22729f02a87486ca7f58ec07f911b7e85d61903b382fcb4d89e1c611b5757582e378a0c735598fea751c2c1960fb1a1e2b85ebe4fab12544f06d120e6f3ad9fa7965ead9848e1e68f562a1bbdb10c43884f36733d543c2db7fcf3efc1ffe155f27b16382ec69990797f731757d71a3cdb0b7cda3022c64bf98c9c321b9ca221ac8fe005e8faaa5e97a83fafc23ecc0d10c183a602bded4eeeeaa19ff7333fd027c546ae6aa3f3115d67cc390662374ea3c6881d923ee098b478bc611e77a033d35a4480a5565a1c0f5d59ae4f72972dc4dac03c4623a80cf018d4532fcb08698c1a3d3e3e4ab4dc86d7d9d204be38670ee39150765121b9dc1cb5ae4af20a37ae8965afa55e99cb179e0bae56ff86db8e81cc6aca9ba8b6427a034024db0068049345ccaac0ca625f944279b9bfab424746269a4b7f614588459152ffeff3a5e0ea635f3bc72f36b7970e7cf6d4a5f94f5d113dfc51c92fa39e09c8eb52136765fe2e4ac19b6929f8adbc49469cd8c6572d44507f29f82df4114f349d68c3991e9662a0d4b63c7915017bd51a0dc1221656de6c94aa12c3ca34152d3dc326308f6aad92f58e999151c5dcacba9a6ee3df44ac22299ba5bfcf32dbb90678bbaf9a5797936e7ef90417f9fc7c4cccfc41019e3051540f4dcaa19a09b16021b0df85edd7c61366b898d6446284bbfb40b525275d2dc8946383613e12d8b3a3fa4c458d35a36e6967333955d1081a6062e3660cfd4bcf2031c551a82e9cf98ae2ec941881a71d184686028fc21c9762ed3f8da5c41b392a57e4f5986502d78b3171318c1660c10c3a99de7672fb351b3e9d6944f20a0dbeadcd87c5e48d6d075f6810795d4bc534ce7125326e896a06d0993d8ef1e1cdce4031b8150ed7909de5070dd139c7a608189f7fb6d2d5345f0ab6416d54a25be71a7b8fe62252c8c79d68b8750466a58680a229e45fd2de4a06ae8fc5ddeaf731ac419e55b59e9cabe0516ee58cdae8b32c1f3f425a239010a596bb0731d7b634baf290a43c0808fefe98d0f1a4194bfe5dd572d149cbf02c2ed1910993da73f0a5a78377d469c7fbdb787a6bc5b7d1bba5b0fb2d67294aeae29e12cdaac7d25f022bbbe5b6ef7fca94364daa9d9292294c4122bb466e0f90b8b7b76454d7cab52546aed6d2e1e79fcc6949cae3f265edf6debccf7a69c11fe24054c2dc9cc1e2c616b69414bded3f42dd16dee49758a789b56b83743b8ce3e2dde9ecd417e77dfb10eb288283546a7ed52c735baca29830afd60a8ec8874bd03c4d246b8537174da0e51109c2b53804eb90b4bc80797b2dc2128e6329377ec0ecc5d9b2f0c87ea6344033ad3b24e1a17cacbe00af76505ba4ef4a9efc3b6562478ea3360bf4e0e110307e76f79c63b9c43d1db8068de2add0040c794615ca1104efbf5e48b36eb21819980e778f166cbe3c4eac99691d82077d50149ef436dfaabd269dff53877b64f3c6d66d91f69a8cf5aa511946db631a25b85203bc6c1ba5d47dfbe1a1dff3fddb2c6cb68fc0603e959f2a683e835dfb8b016b8edd2854f190a6e8ac86c971680cdfa83e1dcb5c37dd9a664b063925ff6c879c3f2e5012b8ea141ab3b79a7cdb5d8a106dc67fc076f67b83f1203df3fd90ad4519f631aa0c8ae09e94c6fa7d26483b1d5643c8bd11b863953c8161b12c17580c3eddf3d57e3082beca3f1748b597f71bc03096d6d1561325783586efcb76aebd1742057aeefbae9fde7db69213b9fe123f9a106c6028b86aec041d7050d71343bb46a71a0b2181c003fd986e3dc6266f421da322c989e42603cf4400ec0c696aecc195b4ec741a2993cb055f106d22feb13ae4984e8049f176b28fa6aaa74dfa768e379d45842772174e01ce03be51b06af2ab04fc97788747d00fb566df14e85cd2be9201482979ae58e42ad1736f7b337aa890df5d666eca683c8a7c856408e31900596ef57852489a0864d1d513770bf9b286605377b6bcdd03db9f86a3f8200e7f2787eb4b435ea64574a2d4639f2cb9c2aaf3c77ee30472cdc939e5c2a4ee76360911d494f0671f477867b02c15f96e20c0fc4d151a0771c8dca4390c2298b41364b0ce3a3b0cf620a7dae3f9320181c0eaa752574b3276ae66681e38b6a97b7a5cb994943da20351be6561d0e608f35b82aabfee12498f1b6a70bc295fa6b0de8ff8933ce4ee726588411fb9a49fde630261aa84c99ff416ba4e6b0c2f2a26ad2c16e1c645e66793afd7192e3586da47fbca633c2e0ff9fbd1c20037a7c62503bfe4abe5b14aa69227df0edd9c77634f7cde4fe4c2d2bbeafb982197fe6f7a5a535df5fb55b241d3a17e336bd19ae9b38d5f19569199140d129a8a3727337815685ade5f59689cc0f1a6cbf35a77f06eadcd1715a381e204410fb44fe26c451eb43b9ab01b79cdf425d6199df0b2a9c26de6ac4aeff6904536d4ff5c5b345980d9bb0067d8c1a1ee942a3e5979f908849a6b3c422b5b4aea2e3888391328433bcd7597f0ec122cf3d4aea33b9f0a62388c151d29c0cf03b47dc5bd7e0fc3fcc8c9b32d7eb84150c7d10267d7f9903d97bfe60bb8a51a756230feffdcc0e69559420e003a633756862a643c8d3bc94a931d44df5ca259f3d7f476ea5ce98c2de4432d4c33401ba8582997f87f89c57957dd39c8c1e9708eb77e243869ba6e0d283bf0f869888de81b0b58cb204939440298d3a7e7620841e88e58cc2dd26fd276f901768b6ddf9ae200d0ec4aa219ee7d01ffd3559739685237c0cba4403d36926fe5f690c40c760ce5c46f2f836d14e5ee1192097a83b65860ab3a127119c30331636f0e9379fef5271bf8766854e6dfe13d32c714a5d57d8e2ade26898868201c85a67fa0d1a0cf9d02ac1755dceaee2f84e48af56edff62dba61581a05407b5a50ba1d80d0167c2c3df1c3777de4cdb506d847762a0a2d7c0a0e9a60bda3a2587e2036c59b4b1d3d24f821ee52a78ff0a4554b6ce9e5ccfe38acf326b733975ca1d90cfea5abb24d6647c065dcd7b08f031b5e7ccf3702d8e5c158163a9409406066bdb06be617089ddddcf998d11f89d675c2097c9492697654fa4a7fd670198a99fdddc99be1cf977701b4aca7ce415c4da48b67cb7cb411189410c71d9e61ade584904dcb802136ae682bb37ca360bfdab9637ff761a5075c6d9efdb77843e40ce7cbcc6757c6a4171bad6acd40524ac9f097a787118fb1531fa9d06a5f3abf8c9c2fa176c7244a2e38ae79e715fd239b5a0182e5f1cf41429e83aaebaf29ca34f004c36305cc4758621ac3d7ae51f6ab9a0421255d511b8a5d07c10ece88c57ea1192818ae57aa63888379324e0d84c04b9200857955b55e0b5a218e64f598a5316d99ddba7ba1744bfd98ffbfbc69db99dc025a29780ad4579452959173bc71c3afcd97080530bdbae843d243ef5c291bc835ce2715f86aaec39ee2231d9a00e9096002bef695f390b38502e3c4f8e74c47c1a18058b9f4608dd280fafb9d9f9dc023cfe504bc8092599a2efad83a7fcf052ef549a4599068c628eba894692963375b9af2ca7027a596e2f0504bebcb7ef00db4e5a092d1e97b8fd1c651c8c637c0329987f27c0bf539885d7c4f0e1513c597f3ae87fffe6e65d50c570be3c45f66779fcbb63e60c5fba880d9b0cbc3bf83bb1bc3b10659c97bddc70911c0f54f1403264c795981e2a1fea0fffbbb9c8356ee95a6d925c0fd00fba94ec3b404612d42c0227bf1cca3d8451fadf9da139a903d8ffb74ecf98e513e044a1066876c79f27e865779de5bd579205aa85bf3f7fdb9fb031213cb2e689be62ac20f92eeb71352fb4c0e2a48f16b1ed2c762e56dc2ef2cf0f7a3992a57e72c5f959e05d5e1e373fee6a08a6a3d65931ffe06ec0c6cf73698dac604a6dcfd937f5b4ee8302afb35fde7822699f19738657f1a2b22dfcbedf4692f7a72157d5319eae5d9a9488bef748d27948696135e2322af7d41af9baf4d990b102ccc5726bf1a2492b551911814e526581a21e2887d06d69d27df5de944d3129c0fb3b310c4bdbdb39f7beb02e277c8120724391e1953ebb19ce69b24b60dcc792bc31c4debbf7847bc24cda5b9f0f75e6f66f80196726f0e05f413449f63ce90404eb3e449782eda186df3334c32cd4f044228ec6640cbf09b8daf4fdf91e1c6d62cd447a920270d0d10166852bd85ac5e97aad9f3bf825b24ff4c8ca8a0aa09747a7fd0047b7ca442f790a998926bef96b347a6d8c97137d1d84c1cfbf9caf81ebcd30706dc7fda9bd9f40f3bd98880ecfaaf4182cb846ab075e9124be64220ea38d3ba560f80032482e27ae49a5cc02e0718611802c222216aea0c482e71882259171e49b0b23d3d756f80b3fa29ad69b6eb420ee999f397d456eacc6e759f2e430d9b2cd62049c4736a40b3c50ab832e2a4135cb0892ca39d30c0a37549b19d8705ff6fe21a1381df8013173209c1a2b410888cf9c48c1d54287c3db9ef65c444735f1d7a36be648d83defacdd4849be8df8d95053bde5dd379c6f4429c96bad219320e27460b04aeb3ebb92923c478c4ddc43364bcaa53ebb5bd31887e72bd4a40e9ada7b3f38877bf6ef8aa7d5de1b98a2dd9de9f174480879c1e759bfa30d4c791b74f40ddb1c456c26465c826dd87ed2dbf52c067d855c507215fa4a6e978e0ca03825e6321c3c8e46e4a009b125547b681c8e4fdd613afe3728823871815236806b608981414eee8f2f8a8dbb587fc370c50acbe9a34ac085b89fec07a674a5aad4dd1da2e931a44c24e951f80c58b731a3701532980616eb9d33f7ccdb035cdfe429a22652f8cb55dcb19c047b0d529120f5f6bb32d8", 0xeb4}], 0x3, &(0x7f00000024c0)=[@authinfo={0x10}], 0x10}, 0x60080) [ 467.847250][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.882956][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:13 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000040)={@loopback}, 0x14) 02:09:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) write$tun(r0, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:13 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f00000036c0), &(0x7f0000003780)=0x98) 02:09:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 02:09:13 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f00000002c0), 0x90) 02:09:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1d6) [ 468.332528][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 468.394208][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.432320][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:14 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)=@in={0x10, 0x2}, 0x10) 02:09:14 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 02:09:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@prinfo={0x14}], 0x14}, 0x0) 02:09:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc3) 02:09:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000001500), &(0x7f00000015c0)=0x90) 02:09:14 executing program 3: socket(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000180)={0x8003}, 0x8) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x200}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 02:09:14 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x105}, 0x98) 02:09:14 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000084000000010000000000001000eb00e00000020000000000e7ad3eb977bd60633506fb067cd2ca114afde7842c1dbc724c4feee3c856985a756db810689cddb767672eff6f5fc1a4d4b5c1a62419a13d76f5da7ca6d8b738aed3277f4a36db39df9957e74a271c352d47ccae49a7ed2700"/130], 0x24}, 0x20103) [ 469.006926][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 469.006952][ T27] audit: type=1804 audit(1689732554.353:155): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/224/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 469.073653][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@init={0x14}, @init={0x14}], 0x28}, 0x0) [ 469.117323][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.118490][ T27] audit: type=1804 audit(1689732554.403:156): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/224/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 469.141405][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) 02:09:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), 0x14) 02:09:14 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000140), 0x90) 02:09:14 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x98) 02:09:14 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000040), 0x8) 02:09:14 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@sndinfo={0x1c}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}, @sndinfo={0x1c}, @prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}], 0xbc}, 0x0) 02:09:15 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000001600), &(0x7f0000000040)=0x4) 02:09:15 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000040)={r3}, 0x8) 02:09:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000ac0)={0x10, 0x2}, 0x10) [ 469.786814][ T27] audit: type=1804 audit(1689732555.133:157): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/225/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 469.836733][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 469.881240][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.899639][ T27] audit: type=1804 audit(1689732555.183:158): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/225/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 02:09:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000800)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) [ 469.925576][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:15 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) 02:09:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x1d6) 02:09:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000f80)={&(0x7f0000001180)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv4={0x10}, @authinfo={0x10}], 0x3c}, 0x0) 02:09:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000500)=0x7fffffff, 0x4) 02:09:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0xfffffffffffffd81, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="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", 0x5ac}], 0x1}, 0x0) 02:09:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000007c0), &(0x7f0000000880)=0x98) 02:09:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@sndinfo={0x1c}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}, @sndinfo={0x1c}, @authinfo={0x10}, @prinfo={0x14}], 0xb0}, 0x0) 02:09:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x9}, 0x14) 02:09:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000007c0), &(0x7f0000000880)=0x98) [ 470.597663][ T27] audit: type=1804 audit(1689732555.943:159): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/226/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 470.636416][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) 02:09:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@authinfo={0x10}], 0x10}, 0x0) [ 470.701324][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.710889][ T27] audit: type=1804 audit(1689732555.983:160): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/226/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 470.756202][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000980)={&(0x7f0000000680)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@prinfo={0x14}, @dstaddrv4={0x10, 0x84, 0x9}, @init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @broadcast}, @authinfo={0x10}, @sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0xa0}, 0x0) 02:09:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, 0x0, 0x1d6) 02:09:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000140), 0x88) 02:09:16 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000000)={0x0, 0x8}, 0x8) 02:09:16 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockname$inet6(r1, 0x0, &(0x7f00000000c0)) 02:09:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x4}, 0x98) 02:09:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r6 = dup2(r5, r5) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x26, &(0x7f0000000080)={r4}, 0x8) 02:09:16 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000180), &(0x7f0000000080)=0x8) [ 471.682169][ T27] audit: type=1804 audit(1689732557.033:161): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/227/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 02:09:17 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000340), &(0x7f0000000440)=0x98) [ 471.724673][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:17 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x8) [ 471.788994][ T27] audit: type=1804 audit(1689732557.063:162): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/227/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 471.815813][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.861067][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000001500), &(0x7f00000015c0)=0x90) 02:09:17 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000000), 0x8) 02:09:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, 0x0, 0x1d6) 02:09:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r1, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:09:17 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000001440)={0x0, @in, 0x2000000, 0x0, 0xd, 0x0, 0x3}, 0x98) 02:09:17 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000000), 0x98) 02:09:17 executing program 3: socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 02:09:17 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x803, 0x0) [ 472.625218][ T27] audit: type=1804 audit(1689732557.973:163): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/228/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 472.670584][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:18 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x98) [ 472.720228][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.739005][ T27] audit: type=1804 audit(1689732558.013:164): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/228/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 02:09:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) 02:09:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000240)) 02:09:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}], 0x30}, 0x0) [ 472.787480][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:18 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000001c0)="d3", 0x1, 0x0, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) 02:09:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x10000) write$tun(r0, 0x0, 0x1d6) 02:09:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000080)='T', 0x1}], 0x1}, 0x0) 02:09:18 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="cb", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000008400000004610000fa000000000000000000e800", @ANYRES32=0x0, @ANYBLOB="1c00000084"], 0xa8}, 0x0) 02:09:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f00000002c0)={0x0, 0x0, 0x8}, 0x8) 02:09:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000340)=[{0x0}], 0x1) recvfrom(r0, &(0x7f0000000000)=""/106, 0x6a, 0x0, 0x0, 0x0) 02:09:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x9}, 0x10) 02:09:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 02:09:18 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x66) 02:09:19 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000000), 0x4) 02:09:19 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) [ 473.666026][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 473.705163][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.727570][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:19 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, &(0x7f0000000000), &(0x7f0000001000)=0xffb) 02:09:19 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x3}, 0x8) 02:09:19 executing program 4: mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) 02:09:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) recvfrom(r0, &(0x7f0000000080)=""/94, 0x5e, 0x42, 0x0, 0x0) 02:09:19 executing program 5: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 02:09:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) shutdown(r0, 0x1) 02:09:19 executing program 0: mount$fuse(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x0, 0x0) 02:09:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000040)={0x0, 0x2, "e6da"}, &(0x7f0000000140)=0xa) 02:09:19 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={r3, 0x0, 0x0, 0x94d, 0x1}, 0x14) 02:09:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) bind$inet(r2, &(0x7f0000000140)={0x10, 0x2}, 0x5d) 02:09:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0xb0) [ 474.670045][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 474.670062][ T27] audit: type=1804 audit(1689732560.023:167): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/230/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 474.738400][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 474.782891][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.808615][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.826160][ T27] audit: type=1804 audit(1689732560.083:168): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/230/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 02:09:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20180, 0x0, 0xfffffffffffffec6) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240)={0x0, 0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) 02:09:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x96}, 0x98) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 02:09:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@dstaddrv4={0x10}], 0x10}, 0x0) 02:09:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) socket$inet6_sctp(0x1c, 0x0, 0x84) 02:09:20 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x2c}], 0x2c}, 0x0) 02:09:20 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000080), 0x4) 02:09:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000400)={0xffffffffffffff20, 0x1c, 0x3}, 0x1c) 02:09:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000000c0), 0x10) [ 475.211689][ T27] audit: type=1804 audit(1689732560.563:169): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/231/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000280), &(0x7f00000002c0)=0x8) [ 475.259069][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1) 02:09:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000200), 0x10) [ 475.314515][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.341847][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.374298][ T27] audit: type=1804 audit(1689732560.603:170): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/231/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:20 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180), 0x6) 02:09:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:09:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000000c0)={0x0, 0xe8c}, 0x8) 02:09:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000100)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x14) 02:09:20 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8001, 0x7fffffff, 0x6}, 0x10) 02:09:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:09:21 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) listen(r1, 0x0) 02:09:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000000)=0xffffffff, 0x4) 02:09:21 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 02:09:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 475.816945][ T27] audit: type=1804 audit(1689732561.163:171): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/232/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 475.849562][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 475.910903][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.925697][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendto$inet(r1, &(0x7f00000000c0)="04", 0x1, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) [ 475.952745][ T27] audit: type=1804 audit(1689732561.193:172): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/232/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 02:09:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:21 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@init={0x14}], 0x14}, 0x0) 02:09:21 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 02:09:21 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000200), &(0x7f00000002c0)=0x98) 02:09:21 executing program 5: setreuid(0xffffffffffffffff, 0xee01) socket$igmp(0x2, 0x3, 0x2) 02:09:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x300}) 02:09:21 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)={0xffffff81, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200), &(0x7f0000000240), 0x0}) 02:09:21 executing program 4: add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 02:09:21 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 476.453887][ T27] audit: type=1804 audit(1689732561.803:173): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/233/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 02:09:21 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x3, 0x4) [ 476.518628][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000140)=""/198, &(0x7f0000000040)=0xc6) 02:09:21 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x18, 0x0, 0x0) [ 476.565037][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.624669][ T27] audit: type=1804 audit(1689732561.843:174): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/233/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 476.659582][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:22 executing program 0: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 02:09:22 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x26}, 0x20) 02:09:22 executing program 3: r0 = mq_open(&(0x7f0000000840)='+**-:@{&\x00', 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 02:09:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f00000010c0)) 02:09:22 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x356, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}) 02:09:22 executing program 4: futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 02:09:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000), 0xc) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x0, 0x400000}, 0xc) 02:09:22 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0xabf411b7fb25aaeb, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[0x0], 0x1, {r0}}, 0x58) 02:09:22 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 02:09:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000010c0)=0x78) 02:09:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000180)='l', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/226, 0xe2}], 0x5f}, 0x0) [ 477.002422][ T27] audit: type=1804 audit(1689732562.353:175): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/234/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 477.002573][ T27] audit: type=1804 audit(1689732562.353:176): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/234/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 477.050927][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 477.086668][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.089173][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.089194][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r6, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r3, r2, 0x0, 0x10000a006) 02:09:22 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) fcntl$lock(r0, 0x7, 0x0) 02:09:22 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 02:09:22 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname$inet6(r0, 0x0, &(0x7f0000000080)) 02:09:22 executing program 3: open$dir(&(0x7f0000000380)='./file0\x00', 0x20a20, 0x0) 02:09:22 executing program 5: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) 02:09:22 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000140)) 02:09:22 executing program 3: r0 = socket(0x18, 0x3, 0x0) connect(r0, &(0x7f0000000040)=@in={0x2, 0x3}, 0xc) 02:09:22 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4) 02:09:22 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) r2 = dup2(r1, r0) write(r2, &(0x7f0000001280)="9cef8f9d227a8b142d94600b5615055679a5454cc733b0c180af60d41914054c9668e0608f0fc713090093981bb3e9b7519ec2c3b859466452451d2e5d625dbe64b05b4a52c9d1", 0x47) 02:09:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/226, 0xe2}], 0x1}, 0x0) 02:09:22 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000006180), 0x10) [ 477.457322][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 477.488444][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.520396][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:22 executing program 4: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 02:09:22 executing program 3: pipe(&(0x7f0000000800)={0xffffffffffffffff}) fchown(r0, 0xffffffffffffffff, 0x0) 02:09:22 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000b80)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 02:09:22 executing program 0: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 02:09:22 executing program 5: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0xa) 02:09:23 executing program 1: symlinkat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') open(&(0x7f0000003d80)='./file0\x00', 0x0, 0x0) 02:09:23 executing program 3: pipe(&(0x7f0000000800)={0xffffffffffffffff}) fchown(r0, 0xffffffffffffffff, 0x0) 02:09:23 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0xe, 0x0) 02:09:23 executing program 0: syz_emit_ethernet(0x277, &(0x7f0000000300)={@broadcast, @random, @val, {@ipv4}}, 0x0) 02:09:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0, 0x44}, {r0, 0x409d6f35fe8011fb}], 0x2, 0x0) 02:09:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 477.932892][ T4615] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 477.945812][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.955306][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.994858][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.005723][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.015789][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.025778][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.036784][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.048471][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.058534][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.068470][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.078446][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.088373][ T7972] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x80}, {r1, 0x81}], 0x2, 0x0) 02:09:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 02:09:23 executing program 5: mlock(&(0x7f0000a8d000/0x2000)=nil, 0x2000) readv(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}], 0x1) munlock(&(0x7f0000a8e000/0x3000)=nil, 0x3000) 02:09:23 executing program 0: fchmodat(0xffffffffffffffff, 0x0, 0xeeb63edf898b27f9) 02:09:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 02:09:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) 02:09:23 executing program 1: pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/109, 0x6d}], 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) 02:09:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f00000002c0)=[{r1, 0x4}], 0x1, 0x0) dup2(r0, r2) 02:09:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x10}, 0x10) r1 = dup(r0) listen(r1, 0x0) 02:09:23 executing program 0: r0 = epoll_create1(0x0) openat$cgroup_pressure(r0, &(0x7f0000005400)='cpu.pressure\x00', 0x2, 0x0) 02:09:23 executing program 1: open$dir(&(0x7f0000000100)='./file0\x00', 0x1a8240, 0x0) [ 478.488411][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 478.519797][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.529595][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:23 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000002800), 0x72cc0, 0x0) 02:09:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0) 02:09:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000040)) 02:09:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000100)) 02:09:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 02:09:24 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 02:09:24 executing program 4: open$dir(&(0x7f0000000100)='./file0\x00', 0x1213c0, 0x80) 02:09:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) 02:09:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000440), 0x0) 02:09:24 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x46480, 0x0) 02:09:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x54) 02:09:24 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x301940, 0x0) 02:09:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000140)) 02:09:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 02:09:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) [ 478.901746][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 478.931486][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.955380][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:24 executing program 3: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 02:09:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') getsockname$inet(r0, 0x0, 0x0) 02:09:24 executing program 1: open$dir(&(0x7f0000000800)='./file0\x00', 0x80c2, 0x180) 02:09:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 02:09:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:24 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x120, 0x0, 0x0) 02:09:24 executing program 0: mq_open(&(0x7f0000000100)='\xc8%!\x00', 0x80, 0x1c8, 0x0) 02:09:24 executing program 4: mq_open(&(0x7f0000000000)='\xc8%!\x00', 0x800, 0x1c8, 0x0) 02:09:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 02:09:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 479.326085][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 02:09:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) [ 479.368495][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.376973][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:25 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) 02:09:25 executing program 4: mq_open(&(0x7f0000000000)='\xc8%!\x00', 0x800, 0x80, 0x0) 02:09:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) 02:09:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@remote, @multicast1}, 0xc) 02:09:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:09:25 executing program 4: open$dir(&(0x7f0000000100)='./file0\x00', 0x1213c0, 0x0) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 02:09:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 02:09:25 executing program 1: semget$private(0x0, 0x4, 0x86) 02:09:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 02:09:25 executing program 4: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 02:09:25 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x138}, 0x100) 02:09:25 executing program 0: semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)=""/110) 02:09:25 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) [ 480.214845][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 480.214863][ T27] audit: type=1804 audit(1689732565.563:187): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/240/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 480.248348][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 480.320003][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.339222][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:25 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000040)=""/4096) [ 480.363283][ T27] audit: type=1804 audit(1689732565.563:188): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/240/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 02:09:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, 0x0) 02:09:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 480.642467][ T27] audit: type=1804 audit(1689732565.993:189): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/241/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 480.669407][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.677998][ T27] audit: type=1804 audit(1689732565.993:190): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/241/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 480.683028][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 480.703916][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.732631][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.748543][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:26 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f00000001c0)=""/123) 02:09:26 executing program 0: r0 = msgget(0x3, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/9) 02:09:26 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x40) 02:09:26 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 02:09:26 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xb5ff, 0x4) 02:09:26 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 02:09:26 executing program 4: msgget(0x2, 0x10) 02:09:26 executing program 1: semget$private(0x0, 0x5, 0x202) 02:09:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="81", 0x53) 02:09:26 executing program 4: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000040)=[{}], 0x1) 02:09:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52e"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000640), 0x0, 0x0) 02:09:26 executing program 0: semget(0x0, 0x0, 0x2a0) 02:09:26 executing program 1: semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/177) 02:09:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) 02:09:26 executing program 4: syz_clone(0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 02:09:26 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) 02:09:26 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 02:09:26 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 02:09:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 02:09:26 executing program 4: semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000280)=""/83) 02:09:26 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={0x0}) [ 481.726009][ T27] audit: type=1804 audit(1689732567.073:191): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/242/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 481.752397][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.758633][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 481.770218][ T27] audit: type=1804 audit(1689732567.073:192): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/242/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 481.796437][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.810662][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.823985][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52e"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:27 executing program 3: r0 = epoll_create(0x9) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 02:09:27 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 02:09:27 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000040)=[{0x3}], 0x1) 02:09:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="81", 0x1) 02:09:27 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 02:09:27 executing program 1: syz_clone(0x0, 0x0, 0x18, 0x0, 0x0, 0x0) 02:09:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000040)) 02:09:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) 02:09:27 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000040)=""/4096) 02:09:27 executing program 4: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000180)=""/226) 02:09:27 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getpeername$inet6(r0, 0x0, 0x0) [ 482.400044][ T27] audit: type=1804 audit(1689732567.753:193): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/243/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 482.432119][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 482.470411][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.488507][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.520181][ T27] audit: type=1804 audit(1689732567.783:194): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/243/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 02:09:28 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) 02:09:28 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000001000)=""/23) 02:09:28 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 02:09:28 executing program 1: socketpair(0x1, 0x0, 0x3, 0x0) 02:09:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)="81", 0x1) 02:09:28 executing program 0: r0 = msgget(0x2, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/107) 02:09:28 executing program 5: semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f00000001c0)=""/4096) 02:09:28 executing program 3: open$dir(&(0x7f0000000100)='./file0\x00', 0x1213c0, 0x49) 02:09:28 executing program 0: r0 = syz_usbip_server_init(0x1) write(r0, &(0x7f0000000140)="54e5e3e0339500290ef31e4c61946d9dd77c4ee1c9e428517df700169816f8893da7b289d88a", 0x26) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 02:09:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$eJzs3M1vFOUfAPDvzLa88+vCD194UVfRSHxpaUHl4AWjCRcTEz3gsZZCkAIGaiKESDUGj4a/QD2a+Bd4wotRThqveDcmxHARPZg1szvTbtvp2mW3LLifTzL0eXaemXm++8yz+8w8swQwsGrZP0nEloi4EREjzeziArXmn9u3Lk39eevSVBL1+pu/J41yf9y6NFUULbbbPJ+pRvpJErtLjnv+wsVTkzMz0+fy/Njs6ffGzl+4+PzJ05Mnpk9Mn5k4dOjggfGXXpx4oSdxDmV13fXh2T07j7x99fWpo1ff+eHrrIpb8vWtcTRVuz5mLWqL38sWT3W993vL9W0L6WSotMi1rXevOqxSJe8bw43+PxKVWGi8kXjt475WDlhr6fplL1WKxFwd+A/LRvPAICq+6LPr32K5i2OPvrt5OObvY9zOl+aaoUiza/hq89pora5daxFxdO6vz7MlSu9DAAD01rXDEfFc2fgvjQeLQrWF8tWI2BYR2yPi/xGxIyIeiGiUfSgiHu7w+LUl+eXjn582dhxUB7Lx38v53Nbi8V9aFKlW8tzWRvzDyfGTM9P7I+J/EbEvhtdn+fE2x/j21Z8/W2ld6/gvW7LjF2PBvB6/DS25QXdscnaym5hb3fwoYtdQWfzJ/ExANj7eGRG77mD/WeOdfOarPSut//f42yifZ+pI/cuIp5vtPxdL4i8k7ecnxzbEzPT+seKsWLRZRMzF9R+vvLHS8buKvwey9t9Uev7Px19NWudrz3d+jCu/fFp+TbMu/3sH5/+65K1Fu/hgcnb23HjEumRu+esTC9sW+aJ8Fv++veX9f3vE31/k2+2OiOwkfiQiHo2Ix/K2ezwinoiIvW3i//6VJ99dad290P7HOmr/zhOVU999k+/rRufxZ+1/sJHal7+yms+/1Vaw2/cPAAAA7gdp4xn4JB2dT6fpxvwZ/h2xKZ2p12efPX72/TPHms/KV2M4Le50jbTcDx3P7w0X+Ykl+QON+8b1er2+sZEfnTo743lw6K/NJf1/dLS57tdKv2sHrLlVzaMVkzAr/aINuC/1YB4duE/p/zC49H8YXPo/DK6y/n854nYfqgLcZb7/YXDp/zC49H8YXPo/DKRuftffLrH9SDebD/e2PocjotcBNhNp9/uprFUTlCfSDv5zhLaJ6EHsfUukZas2REQ/6rM+IlZb+PKyGsaGZk/udcX6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQG/8EAAD//+3S304=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0, &(0x7f00000053c0)={0x77359400}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000540)=""/226, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) sendfile(r3, r3, &(0x7f0000000000), 0x400) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 02:09:28 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 02:09:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52e"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 483.260576][ T8204] __nla_validate_parse: 928 callbacks suppressed [ 483.260596][ T8204] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 02:09:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 483.391142][ T27] audit: type=1804 audit(1689732568.743:195): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356908900/syzkaller.U7KuQ3/326/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 483.411442][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 483.444829][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 483.484772][ T27] audit: type=1804 audit(1689732568.743:196): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir356908900/syzkaller.U7KuQ3/326/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 483.575507][ T8213] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.609731][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.617636][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.636248][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:09:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 483.677142][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.680866][ T8208] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.709620][ T8218] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 484.189887][ T8208] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.5'. 02:09:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:29 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) [ 484.332924][ T8208] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.5'. [ 484.431715][ T8224] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0, &(0x7f00000053c0)={0x77359400}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000540)=""/226, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) sendfile(r3, r3, &(0x7f0000000000), 0x400) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 02:09:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0, &(0x7f00000053c0)={0x77359400}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000540)=""/226, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) sendfile(r3, r3, &(0x7f0000000000), 0x400) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 02:09:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:29 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:30 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='THAWED\x00', 0xfffffffffffffe7b) 02:09:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 484.664572][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 484.819906][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.827944][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 486.295292][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 486.295309][ T27] audit: type=1804 audit(1689732571.643:201): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356908900/syzkaller.U7KuQ3/327/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 02:09:31 executing program 1: syz_clone(0x42005100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 486.338976][ T3623] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0, &(0x7f00000053c0)={0x77359400}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000540)=""/226, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) sendfile(r3, r3, &(0x7f0000000000), 0x400) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 02:09:31 executing program 0: r0 = semget(0x0, 0x4, 0x4bae94a8827d7eba) semctl$IPC_RMID(r0, 0x0, 0x0) 02:09:31 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:31 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r0, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:32 executing program 0: semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000001140)=""/4111) [ 486.577200][ T27] audit: type=1804 audit(1689732571.683:202): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir356908900/syzkaller.U7KuQ3/327/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 486.612917][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:09:32 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r0, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 486.659572][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:32 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:32 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) [ 486.789844][ T27] audit: type=1804 audit(1689732572.143:203): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/246/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 486.818216][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:32 executing program 3: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r0, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4000000000ce) creat(&(0x7f0000000240)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket(0x0, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) [ 486.859353][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.885002][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 486.971561][ T27] audit: type=1804 audit(1689732572.143:204): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/246/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 487.112744][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 487.174339][ T27] audit: type=1804 audit(1689732572.523:205): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir356908900/syzkaller.U7KuQ3/328/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 487.778812][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 487.827305][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.880150][ T8278] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.943397][ T27] audit: type=1804 audit(1689732573.123:206): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir356908900/syzkaller.U7KuQ3/328/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 487.980423][ T8278] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.983079][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:33 executing program 1: syz_clone(0x1e870280, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:33 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 02:09:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xa00200, &(0x7f0000000140)=ANY=[], 0x84, 0x479, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0, &(0x7f00000053c0)={0x77359400}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000540)=""/226, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) sendfile(r3, r3, &(0x7f0000000000), 0x400) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 02:09:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:33 executing program 5: r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$midi(r1, &(0x7f0000001640)="bf9d270e497aef97c5ffcc17e3c3e816f2f9b34c46", 0x15) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)="741e6f847d964581a65f941d18f06141d3e1cfdeeb0a965fdcd7672cd3315aaf1d1104a6855c9ec5271e37d614010203b66efe274dda0efba54e091a97aad914a81869b6219dea260ee014ce2a75527ffde0dd204fcc766fcc45426d22f45e8c785946ba4dee5d1e66843f76cdfa9333189a8e4f6488f4b7a688b69db9c77a4e720515dae2796169612600ed690bd6aced35888c965ce4acb37d25e2471187", 0x9f}], 0x1, 0x8001, 0x0, 0x1a) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}]}]}, 0x58}}, 0x0) pwritev(r7, &(0x7f00000015c0)=[{&(0x7f0000000340)="fcc25780a483c9673e06147ca3f1250024b1bdf950ad6e12881a69e914b6982f8660f0b98b840d9c20428e32202977", 0x2f}, {&(0x7f0000000380)="2393dfe037732e68118d8632557729a8632544c50a7e23b6da11a4afe60e9b2f3ebffe434d5f4d50084d49ba51ccc040ab93", 0x32}, {&(0x7f0000000480)="72954cb563e1048c6c926b6296a063ee0822aaf8232bf479b9862a9e770b9cb35583f5e6dbe41db8b6aa18ef322b58f2aba17463b33c53b11b15f4ebc0da10dd6598cfbbd9625fcffa", 0x49}, {&(0x7f0000000500)="b969bfb630c53cfbea4660e14ff1e320ca643ade22b6d58c9ee4454b15f30ec371e3f950118ebfc74ac8a618be2e92b68708121cfe51cb85164a3ef6debff5938b79258b84406336c9c397ea0cb5eb69bd1fb317be4b6210a1a9e75422fe82", 0x5f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000003c0)="9f264063d1b2d3768768a5e99317a4e4fb4a8788a8177a49595e4a03440505524f2398b93bfdf3e71a7068922bf9707ad8a9c54110116b4c4d20", 0x3a}, {&(0x7f0000001580)="2dcd078893bd19847446ea7e8eb1b3a5a71e5507d217154aae358a4ecd13227ee81574bc53bb6cff39c254d89d9d2a56d6dd45664efa048f0b6c6039", 0x3c}], 0x7, 0x6, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="c4c2499ca100000000660f38814f5766b840000f00d8c4e1b0145d09c4e17a70d700640f01c9b805000000b9100000000f01d966ba410066ed360f01cbb9470800000f32", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r0, 0x0, 0x0) symlinkat(0x0, r9, 0x0) 02:09:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:33 executing program 1: poll(&(0x7f0000000040), 0x5d, 0x0) [ 489.307902][ T27] audit: type=1804 audit(1689732574.653:207): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/247/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 02:09:34 executing program 4: r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)}, 0x20) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)={'lo', 0x32, 0x31}, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x400, 0x8}, 0xc) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xc129}, [@alu={0x4, 0x0, 0x2, 0x9, 0xb, 0x18}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x69, &(0x7f00000003c0)=""/105, 0x41000, 0x1a, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x9, 0xdae, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r0, r2, r3, 0x1]}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b40)={r3, &(0x7f0000000980)="ec2e5ad0735a6c494df036f7b722b668ee5330688170ee52671bfd758fc2c782e48e716358a95e9384a312b742bba9920ca95fae24b87352c3dba1aa5d705f85d6a728adf2a5b77a61c05812e688f7a20f1751ff1de070547e3520364128262d7fecad8c6ca33e04c795446b5bd1259c54cd1dc56fed2f1a73845dc66c3de1a1a97a2bc8e555cb8ff30e5665edce599a515ce7c192e2d949b2de02e9707eba2250e7afe2e079722bd158a77b23b82251960a97f69ea36c50ff606371b4c56c1874b6f8def4f19c1947dc1f4ac4", &(0x7f0000000a80)=""/140, 0x4}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000cc0)='memory.events\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0x6, 0x5, 0x0, 0x110, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x0, 0x0, 0xffffff5a, 0xffff0000, 0x4b2, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x4, 0x5, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x6, &(0x7f0000000c00)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x400}, @jmp={0x5, 0x0, 0x8, 0x7, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, @call], &(0x7f0000000c40)='GPL\x00', 0x80, 0x18, &(0x7f0000000c80)=""/24, 0x40f00, 0xc, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000d00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xf, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7]}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, 0xfffffffffffffffe) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000001340)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001540)={0xffffffffffffffff, 0x0, &(0x7f0000001480)=""/159}, 0x20) 02:09:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 489.531185][ T27] audit: type=1804 audit(1689732574.693:208): pid=8302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/247/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 02:09:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @func_proto]}}, 0x0, 0x32}, 0x20) 02:09:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xf0, &(0x7f0000000b80)=""/240, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @volatile]}, {0x0, [0x0, 0x6f]}}, &(0x7f0000000700)=""/4096, 0x34, 0x1000, 0x1}, 0x20) 02:09:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:35 executing program 5: r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$midi(r1, &(0x7f0000001640)="bf9d270e497aef97c5ffcc17e3c3e816f2f9b34c46", 0x15) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)="741e6f847d964581a65f941d18f06141d3e1cfdeeb0a965fdcd7672cd3315aaf1d1104a6855c9ec5271e37d614010203b66efe274dda0efba54e091a97aad914a81869b6219dea260ee014ce2a75527ffde0dd204fcc766fcc45426d22f45e8c785946ba4dee5d1e66843f76cdfa9333189a8e4f6488f4b7a688b69db9c77a4e720515dae2796169612600ed690bd6aced35888c965ce4acb37d25e2471187", 0x9f}], 0x1, 0x8001, 0x0, 0x1a) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}]}]}, 0x58}}, 0x0) pwritev(r7, &(0x7f00000015c0)=[{&(0x7f0000000340)="fcc25780a483c9673e06147ca3f1250024b1bdf950ad6e12881a69e914b6982f8660f0b98b840d9c20428e32202977", 0x2f}, {&(0x7f0000000380)="2393dfe037732e68118d8632557729a8632544c50a7e23b6da11a4afe60e9b2f3ebffe434d5f4d50084d49ba51ccc040ab93", 0x32}, {&(0x7f0000000480)="72954cb563e1048c6c926b6296a063ee0822aaf8232bf479b9862a9e770b9cb35583f5e6dbe41db8b6aa18ef322b58f2aba17463b33c53b11b15f4ebc0da10dd6598cfbbd9625fcffa", 0x49}, {&(0x7f0000000500)="b969bfb630c53cfbea4660e14ff1e320ca643ade22b6d58c9ee4454b15f30ec371e3f950118ebfc74ac8a618be2e92b68708121cfe51cb85164a3ef6debff5938b79258b84406336c9c397ea0cb5eb69bd1fb317be4b6210a1a9e75422fe82", 0x5f}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000003c0)="9f264063d1b2d3768768a5e99317a4e4fb4a8788a8177a49595e4a03440505524f2398b93bfdf3e71a7068922bf9707ad8a9c54110116b4c4d20", 0x3a}, {&(0x7f0000001580)="2dcd078893bd19847446ea7e8eb1b3a5a71e5507d217154aae358a4ecd13227ee81574bc53bb6cff39c254d89d9d2a56d6dd45664efa048f0b6c6039", 0x3c}], 0x7, 0x6, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="c4c2499ca100000000660f38814f5766b840000f00d8c4e1b0145d09c4e17a70d700640f01c9b805000000b9100000000f01d966ba410066ed360f01cbb9470800000f32", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r0, 0x0, 0x0) symlinkat(0x0, r9, 0x0) 02:09:35 executing program 4: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000540)={'netdevsim0\x00', 0x200}) 02:09:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x85}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xec, &(0x7f00000000c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xec, &(0x7f00000000c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:35 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 02:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1c000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 490.111838][ T27] audit: type=1804 audit(1689732575.463:209): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/248/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 490.139656][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2800) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 02:09:35 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="8596a02406f1", @val, {@ipv4}}, 0x0) [ 490.233160][ T27] audit: type=1804 audit(1689732575.463:210): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/248/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 490.254104][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.431379][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:36 executing program 4: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 02:09:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x841, 0x0) write$FUSE_GETXATTR(r0, 0x0, 0x0) 02:09:36 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="8596a02406f1", @val, {@ipv4}}, 0x0) 02:09:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1c000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:09:36 executing program 4: socket(0x10, 0x0, 0x800) 02:09:36 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x501002, 0x0) 02:09:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000015c0)=""/133, &(0x7f0000001680)=0x85) 02:09:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) 02:09:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) [ 491.305390][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 491.305409][ T27] audit: type=1804 audit(1689732576.653:212): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/249/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 491.352168][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lstat(&(0x7f0000000200)='./file0/file0\x00', 0x0) [ 491.421592][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:09:36 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) getpgrp(r1) 02:09:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) [ 491.499534][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 02:09:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000103) 02:09:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x31) 02:09:37 executing program 4: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000040), 0x8) 02:09:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) 02:09:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1c000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:09:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x841, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 02:09:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:09:37 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x40000000, &(0x7f0000000140)) 02:09:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 02:09:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88a44, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800), 0x0, 0x0, 0x0) 02:09:37 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0xa0000000, 0x0) 02:09:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42442, 0x20) [ 492.378286][ T27] audit: type=1804 audit(1689732577.723:213): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/250/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 492.405179][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 492.470528][ T27] audit: type=1804 audit(1689732577.733:214): pid=8412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/250/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 492.510969][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.519045][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:38 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x3ab142, 0x0) 02:09:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:09:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 02:09:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1c000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:09:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88a44, 0x0) setxattr$incfs_size(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x1) 02:09:38 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:09:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 02:09:38 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_int(r0, 0xfffffffffffffffd, 0x0) 02:09:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88a44, 0x0) stat(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 02:09:38 executing program 4: mq_open(&(0x7f00000003c0)='\xc8%!\x00\xb8# \x12>ul7\xd0[\xb7\x02\xc2\xa6\xcb\xce\xe4\x9d\xe4g!!&\xf6\x9d\xc6j&\xb8\x80j\x80N\xd7\x02\x1d\xac\x94\x98\xeb\xd6\x10\xde\x95|\xe5v\xde\xce\xad\x9e\xc0\x1d\x84\tv\xc9\x86f\xfe5t\xd4\x8a\x81\xbc\xd2\xe9\xdd\xe1V]Iu\x84\xf9\x0f\xfc\to\xb79\xd9\x11/\xdey\xde\x041\xd2i\x17$\xe1ym\xfa\x98\xbe\xdbCB\xda\x90\xb35\xac\x1c\x04\x18\x8e\xf2\xdb\xabKz\x10\x8d\xb5-.\xa79\xc7\xb7\xcd\xc5\x18\x02\xdeG\xee\xb2\x87\x9f\fv\xf7\"!q\xfd\xa9\x1bo\x9dw.3\xa9\xd6jf\xeb\x83)\xc7r\x8f\x9a\x960\x88G\x11\xd8\x15bR\x9e\xbd\x13\xfe\r\xb5T\xaeu]\xd8\x90v\xcd?\xd4\xa6\xb4\xc6\t\xaf-\x10`;v\xa2j\xc3\xc6]\xf1\x19T\xf4\x90\tQ\x03\x91\x17\xb1\xc7\x01\x93Q{\x9e1C\x1cyq>dw\xba\x9e\x93\xf8\x1aa\x9e$/\xeb\x8e\x12\xc9\x98\xdemT\xcb\x0fs\xe4\xbbyu\xd4\x8a\xe8\xdc\xa9\xba\xdf%\x1dO\xa8\xa8\x85\xf0#\xd0\x18;+1\xbf\xd1c\x19|k\xc3\xac\aK\x8aH\r\x16\xf6\r\x192Fts\xe2\xbc<.\xa4\x87s\xdad\xe4\x8f\xf96\xc2^dB\x8aa\x12~!\xd1t\xa8i\xd0\x8dQ\x03\xd1\\bF?\a?\x12V\x80\x9e\v\xa5G\xf7\xf9\xe2\x1dOp\x90\xdfvf\xa9\xec\xd3\xd9\xff\xfd\xe7Q\xb1\x8b\xe8$n\xc0\xc3y\x8e\xd39\x8fQ\xb3\x04s?vg\x8c\xa0\x02\x1d\xfe\xfbv\x1b\xc1\x06U\xfa\x83\x18\x96\x00P\x83\xb9L\xe7\xee\xe7\x11^\xb2\x04V\xdb!M\xd7\v]rm\x1bM\x0f\x99\v\b,>\\,\x89\xe5n\x1bt>\xa8\xe1@P\x97J\x8d{Ks\x19\x84\x95\x17^^\x8f\xa9Fx/a7u}\x87\xe3\xec^\b,a\xd8#WNZ7c\x01\xd5h^\xe6\xc1]\xff25\x05\r\x1f\a?t.\xbe{Zb1\x96\xd8\xe0 G\xe9\xb3W\x82}\xd6\xf7Kg\xc1\xb2\xcd~M\x15\xa7\x82\xc1)\xe3e:\x8b,\x98P\xe0\xe3!\x98[\xf7\xbe}j\xd3k\xaf\x92\x89\xb3-\xb7\xcfn\xff\xf5\xc2\a\x91\xa8\xb7\xc1\x186\xec\x12W\xec}W&~\xce\xa4\xa7\x15\x9d\xd4\xaa@', 0x2, 0x0, &(0x7f0000000000)) 02:09:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa4}}, 0x0) [ 493.359107][ T27] audit: type=1804 audit(1689732578.703:215): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/251/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 493.368037][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 493.392621][ T27] audit: type=1804 audit(1689732578.713:216): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/251/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 493.423671][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.431956][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:39 executing program 1: syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "1085200263"}, @mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "5d96"}, @mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "dc7f63c61773"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0xec, {0x7, 0x25, 0x1, 0x3, 0x4, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x80, 0x0, 0x2}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 02:09:39 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 02:09:39 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/ipc\x00') 02:09:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa4}}, 0x0) 02:09:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 02:09:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:39 executing program 4: socketpair(0x29, 0x0, 0x0, &(0x7f0000001800)) 02:09:39 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000022c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002300)="efcbd7612d47a3352f9cefd315ae35d5881662ebfd01cd450bea06f47404861b644484de80e65761a9e866103682634072", 0x31}, {&(0x7f0000002340)="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", 0xe90}], 0x2}, 0x0) 02:09:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xa4}}, 0x0) 02:09:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00'}) 02:09:39 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = syz_clone(0x8040000, &(0x7f0000000a40)="c9baef5b8795e3c165c5f25c8ffe3bbfe1972777c185e7f695b8e9a73589a45d3d7e0fbc095bab8f99b9cec678a58c237a8b8cce763b09edd365a5eaf900bfc1da25398d24e6d8f3b6868acdbbbfe62efa84ec7052034ce5190f09d1ddba76bf4ac2ece0075496018c599acd99ce0b3446dac197674294d7f1908d232cb446a7c85ce8d7faf14d9101dd016ad4089d56894aec92f3ede94b7fc52fb097325eec372c6e37ad9770c6a7dcc4a2b991bf9718a1dc662edc37fc5b4f", 0xba, &(0x7f0000000b00), &(0x7f0000000b40), 0x0) getpgid(r0) syz_clone(0x8040000, &(0x7f0000000a40)="c9baef5b8795e3c165c5f25c8ffe3bbfe1972777c185e7f695b8e9a73589a45d3d7e0fbc095bab8f99b9cec678a58c237a8b8cce763b09edd365a5eaf900bfc1da25398d24e6d8f3b6868acdbbbfe62efa84ec7052034ce5190f09d1ddba76bf4ac2ece0075496018c59", 0x6a, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="044e3db731d1520ea28ae113e6a6df3c84446ea38b251b5973c1d027c9e0346cd7ffc0fec9700ee3") syz_clone(0x40040000, &(0x7f0000000480)="1288d933ab7bc3da64dc543df4695bff7799dd3a6415291644f6014520b296f8bbc2407175e8bd1b321796c19c1f349d2cededb12c35d47acff857d8d75bf63d8144532cf346ac09a08b6c543c1e169e6843215257121d1432e983e966bc1e206b42c965e55246722898cc712e7d06a8383531f938132bbb985c183d694f826cc5bd096c3b2380dca9c091dcfbac1489fbcbfa42d3ed531fd7ab2a392155ab1c473019d89708a0eabae2443472f8ee6c8ac2d4e4dbaffa6bbc", 0xb9, &(0x7f0000000380), &(0x7f0000000580), &(0x7f00000005c0)="2776ee3d3853e554b996dd950a302d1810ec035f4f9806a7d97d5b69ad4b82a976827ff31e3b2495e8d5b3036a5ce677b9f58e3b86e91f7bf255211e56de5ed617340c32d14816db976ca78be73173cc654795cad4f6aeb4e3574f685bff023f7bb0563d9c93fa4a53fe3fb0501beca20f47baa050dfa4e706914e44637c4925029cf627a116528ce50482a2ffd9a8fbb0d68065f691af464fd3e1e5acc9d1da57c0f4f014b03b") sched_getparam(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) 02:09:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x2}, 0x38) [ 494.050008][ T27] audit: type=1804 audit(1689732579.403:217): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/252/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 494.079777][ T3644] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 494.111597][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 494.144678][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.169745][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.187515][ T27] audit: type=1804 audit(1689732579.453:218): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/252/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 494.454289][ T3644] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 494.474297][ T3644] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 494.501843][ T3644] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 494.522391][ T3644] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.536166][ T3644] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 494.558160][ T3644] usb 2-1: config 1 interface 1 has no altsetting 0 [ 494.720009][ T3644] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.733290][ T3644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.750312][ T3644] usb 2-1: Product: syz [ 494.760070][ T3644] usb 2-1: Manufacturer: syz [ 494.766193][ T3644] usb 2-1: SerialNumber: syz [ 495.119850][ T3644] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 495.127653][ T3644] usb 2-1: 2:1 : invalid channels 0 [ 495.187822][ T3644] usb 2-1: USB disconnect, device number 19 [ 495.227045][ T3705] udevd[3705]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device 02:09:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x190) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 02:09:40 executing program 5: syz_clone(0x2c503, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1], 0xa4}}, 0x0) 02:09:40 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, @val, {@ipv6}}, 0x0) 02:09:40 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000c00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:09:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:41 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const, @union]}}, 0x0, 0x32}, 0x20) 02:09:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1], 0xa4}}, 0x0) [ 495.705156][ T27] audit: type=1804 audit(1689732581.053:219): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/253/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 02:09:41 executing program 0: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0xc0189436, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2}}) [ 495.745107][ T27] audit: type=1804 audit(1689732581.093:220): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/253/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 02:09:41 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 02:09:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1], 0xa4}}, 0x0) [ 495.821746][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:41 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x190) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 495.875057][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.925290][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB], 0xa4}}, 0x0) 02:09:41 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = syz_clone(0x8040000, &(0x7f0000000a40)="c9baef5b8795e3c165c5f25c8ffe3bbfe1972777c185e7f695b8e9a73589a45d3d7e0fbc095bab8f99b9cec678a58c237a8b8cce763b09edd365a5eaf900bfc1da25398d24e6d8f3b6868acdbbbfe62efa84ec7052034ce5190f09d1ddba76bf4ac2ece0075496018c599acd99ce0b3446dac197674294d7f1908d232cb446a7c85ce8d7faf14d9101dd016a", 0x8c, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="044e3db731d1520ea28ae113e6a6df3c84446ea38b251b5973c1d027c9e0346cd7ffc0fec9700ee306145b4280debe1581e1995dc14e2aa21c539d4c9da960a6c3cd186afd051f388ea4be58fc202a9c0c577367705d67307ad5b45714f9ce0e2ebcd7e674067088738ecbb510956d54e1e9c0a4559dd92ec2c48c528e7dd2a7aa93f622f6c44f72cd150cd7e89715e3f63edec00441d573ca876e8266bffd") getpgid(r0) r1 = syz_clone(0x8040000, &(0x7f0000000a40)="c9baef5b8795e3c165c5f25c8ffe3bbfe1972777c185e7f695b8e9a73589a45d3d7e0fbc095bab8f99b9cec678a58c237a8b8cce763b09edd365a5eaf900bfc1da25398d24e6d8f3b6868acdbbbfe62efa84ec7052034ce5190f09d1ddba76bf4ac2ece0075496018c599acd99ce0b3446dac197674294d7f1908d232cb446a7c85ce8d7faf14d9101dd016a", 0x8c, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="044e3db731d1520ea28ae113e6a6df3c84446ea38b251b5973c1d027c9e0346cd7ffc0fec9700ee306145b4280debe1581e1995dc14e2aa21c539d4c9da960a6c3cd186afd051f388ea4be58fc202a9c") getpgid(r1) gettid() syz_clone(0x40040000, &(0x7f0000000480)="1288d933ab7bc3da64dc543df4695bff7799dd3a6415291644f6014520b296f8bbc2407175e8bd1b321796c19c1f349d2cededb12c35d47acff857d8d75bf63d8144532cf346ac09a08b6c543c1e169e6843215257121d1432e983e966bc1e206b42c965e55246722898cc712e7d06a8383531f938132bbb985c183d694f826cc5bd096c3b2380dca9c091dcfbac1489fbcbfa42d3ed531fd7ab2a392155ab1c473019d89708a0eabae2443472f8ee6c8ac2d4e4dbaffa6bbca8e801eafa0166462fd691c5b39a2746b890f9a9", 0xcd, &(0x7f0000000380), &(0x7f0000000580), &(0x7f00000005c0)="2776ee3d3853e554b996dd950a302d1810ec035f4f9806a7d97d5b69ad4b82a976827ff31e3b2495e8d5b3036a5ce677b9f58e3b86e91f7bf255211e56de5ed617340c32d14816db976ca78be73173cc654795cad4f6aeb4e3574f685bff023f7bb0563d9c93fa4a53fe3fb0501beca20f47baa050dfa4e706914e44637c4925029cf627a116528ce50482a2ffd9a8fbb0d68065f691af464fd3e1e5acc9d1da57c0f4f014b03b2840af0935dcb76f132ef4cb67feb7a839") sched_getparam(0x0, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) 02:09:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB], 0xa4}}, 0x0) 02:09:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x190) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 02:09:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB], 0xa4}}, 0x0) [ 496.282687][ T27] audit: type=1804 audit(1689732581.633:221): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/254/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 496.327989][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:41 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x190) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) [ 496.375444][ T27] audit: type=1804 audit(1689732581.663:222): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/254/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 496.402936][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:09:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77"], 0xa4}}, 0x0) 02:09:41 executing program 4: r0 = socket$inet6(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001500), 0x10, 0x1, 0x0) [ 496.429669][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.448379][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.462933][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.523410][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.556880][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:41 executing program 4: syz_clone(0xa5289500, 0x0, 0x0, 0x0, 0x0, 0x0) 02:09:42 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 496.581409][ T8530] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 496.586728][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.603517][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77"], 0xa4}}, 0x0) [ 496.651885][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:42 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) [ 496.814251][ T8519] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.825780][ T8543] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:42 executing program 0: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "880e3f1d5451c3cac62af3d5585d7807c701155d9398a054456115db3e5a93d093a830871a9cb2f6b5b42e01eee3114147a3996428643b6d9db600"}, 0x48, r0) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)={0x1, 0x0, @c}, 0x29, r0) 02:09:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006bab9e3fc3d86e17aa31", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 02:09:42 executing program 1: socketpair(0xa, 0x3, 0x3, &(0x7f0000000580)) 02:09:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77"], 0xa4}}, 0x0) 02:09:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:42 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:42 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random, @val, {@ipv6}}, 0x0) 02:09:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000"], 0xa4}}, 0x0) 02:09:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000400000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x1, &(0x7f00000000c0)=@raw=[@call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) [ 497.477802][ T27] audit: type=1804 audit(1689732582.823:223): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/255/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 02:09:42 executing program 1: socketpair(0x2, 0x0, 0x0, &(0x7f0000000080)) [ 497.526311][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 497.578068][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.614860][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) 02:09:43 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0x55) 02:09:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000"], 0xa4}}, 0x0) [ 497.621075][ T27] audit: type=1804 audit(1689732582.873:224): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/255/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 02:09:43 executing program 4: mkdir(&(0x7f0000000c40)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 02:09:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000"], 0xa4}}, 0x0) 02:09:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000400000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:43 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000240)='O', 0x1}, {&(0x7f0000001240)='j', 0x1}, {0x0}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 02:09:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={0x0, &(0x7f0000001c00)=""/4096, 0x0, 0x1000}, 0x20) 02:09:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500"], 0xa4}}, 0x0) 02:09:43 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00'}, 0x10) 02:09:43 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) 02:09:43 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 02:09:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500"], 0xa4}}, 0x0) 02:09:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000001240)='j', 0x1}, {0x0}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 02:09:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x3, &(0x7f0000001ec0)=@framed={{0x18, 0xa}}, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000001f80)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 498.272438][ T27] audit: type=1804 audit(1689732583.623:225): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/256/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 498.306845][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500"], 0xa4}}, 0x0) [ 498.343336][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.379192][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.442132][ T27] audit: type=1804 audit(1689732583.653:226): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/256/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 02:09:44 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000610000000000000029c3000024b918000000000018270000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='GPL\x00', 0x7, 0x69, &(0x7f00000003c0)=""/105, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1e, 0x0, 0x4, 0x0, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000013c0), 0x8) openat$cgroup_ro(r2, &(0x7f0000001500)='pids.events\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) syz_clone(0x0, &(0x7f0000002200), 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)) 02:09:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x3, &(0x7f0000001ec0)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000001f80)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x2, &(0x7f00000004c0)=@raw=[@jmp, @generic], &(0x7f0000000500)='syzkaller\x00', 0x2, 0xcb, &(0x7f0000000540)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc01000000000000000000000000000105000100010000"], 0xa4}}, 0x0) 02:09:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:44 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) 02:09:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1, &(0x7f0000000840)=@raw=[@alu={0x0, 0x1, 0x1}], &(0x7f0000000880)='GPL\x00', 0x5, 0xef, &(0x7f00000008c0)=""/239, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc01000000000000000000000000000105000100010000"], 0xa4}}, 0x0) 02:09:44 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1e, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x3, &(0x7f0000001ec0)=@framed={{}, [], {0x95, 0x0, 0x0, 0x20000000}}, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000001f80)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc01000000000000000000000000000105000100010000"], 0xa4}}, 0x0) 02:09:44 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)={&(0x7f0000001040)='./file0\x00'}, 0x10) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close(r0) [ 498.971815][ T27] audit: type=1804 audit(1689732584.323:227): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/257/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 02:09:44 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 499.029621][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:44 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x3, &(0x7f0000001ec0)=@framed={{0x18, 0xe}}, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000001f80)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 499.104519][ T27] audit: type=1804 audit(1689732584.323:228): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/257/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 499.159782][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.168949][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x3, &(0x7f0000001ec0)=@framed={{0x18, 0x4}}, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000001f80)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x4, 0x3, &(0x7f0000001ec0)=@framed, &(0x7f0000001f40)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000001f80)=""/230, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:09:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc010000000000000000000000000001050001000100000014"], 0xa4}}, 0x0) 02:09:44 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 02:09:44 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_DEV_DESTROY(r0, 0x5502) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1) [ 499.378541][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.387176][ T8645] bridge0: port 1(bridge_slave_0) entered forwarding state 02:09:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc010000000000000000000000000001050001000100000014"], 0xa4}}, 0x0) 02:09:44 executing program 1: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 02:09:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x7ff, 0x97bb, 0x6, 0x1, 0x101, 0xfffff001, 0x7f, 0xfffeffff, 0x265b, 0x3, 0x0, 0x6, 0x6f9d, 0xc64, 0x7, 0x4, 0x3, 0x6, 0x0, 0x591, 0x37, 0x5, 0x0, 0x1, 0x7, 0x5, 0x200, 0x1c00, 0x6, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x1800000, 0x5, 0xafd, 0x9, 0x3, 0x4, 0x7, 0x7fffffff, 0x7fff, 0x6, 0x911, 0xf6, 0xfff, 0x8000, 0x5, 0xffffffff, 0xbb8, 0x7fff, 0x4, 0x3, 0x1, 0x10, 0x8, 0x7fff, 0x8c71, 0x7c39, 0x3, 0x9, 0x3, 0xff, 0xf3, 0x6, 0x7, 0x2, 0x7, 0x8000, 0x7, 0x2, 0x401, 0x3ff, 0x6, 0x3ff, 0x5, 0x7, 0x40, 0x0, 0x100, 0x1000, 0x274, 0xaac, 0x8000, 0x8000, 0x763, 0x546, 0x2, 0x5, 0x1f, 0x6, 0x57ef9896, 0x5, 0xc, 0x7fffffff, 0x8000, 0x400], [0x3, 0x4, 0x0, 0x4, 0x1, 0x3, 0x8, 0x0, 0x7f, 0x7, 0x9, 0x2, 0x2b, 0x0, 0x4, 0x5, 0xfffffffc, 0x2, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8, 0x7, 0x5, 0x8001, 0x5, 0x7, 0x80000001, 0x3, 0x1ff, 0x8, 0x2, 0x3, 0x2, 0x6, 0x0, 0x1, 0x4, 0x99ed, 0x0, 0x2, 0xdfa0000, 0x5, 0x5, 0x643b, 0xffffffff, 0x7f, 0x3, 0xc02, 0x0, 0xb89, 0x9, 0xff, 0x8f9, 0xbf, 0x9, 0x2, 0x0, 0x9, 0x0, 0x9, 0x5], [0x9, 0x100, 0x2, 0x4, 0x5c, 0x1000, 0xfffffffa, 0x8, 0x4, 0xfffffff9, 0x9c, 0x49d3, 0xc1af, 0x1ff, 0x4, 0x3, 0x5, 0x3, 0x8, 0x7e, 0x10000, 0x80, 0x1, 0x8, 0x1000, 0x9, 0xffffffff, 0x800, 0x9800, 0x9, 0x4, 0x800, 0x1, 0x0, 0x5, 0x2, 0x7, 0xd86, 0x0, 0x4, 0x3, 0x3f, 0x7fff, 0x4, 0x5, 0xfffffffa, 0x1, 0x2, 0xffffffff, 0x8874, 0x4, 0x1ff, 0x8, 0x7, 0x7, 0x2, 0x1cc, 0x1f, 0x8, 0x7ff, 0x5, 0xd216, 0x64, 0xffff]}, 0x45c) read(r0, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x4008556c, 0x0) 02:09:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc010000000000000000000000000001050001000100000014"], 0xa4}}, 0x0) [ 499.631113][ T27] audit: type=1804 audit(1689732584.983:229): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/258/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 499.641813][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 499.748586][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.784285][ T27] audit: type=1804 audit(1689732584.983:230): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/258/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 499.815335][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:45 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:09:45 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x2c}}, 0x0) 02:09:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_GET_VERSION(r0, 0x4004556b, 0x0) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz0\x00', {}, 0x53, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401], [0xffff4549, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x803f], [0x3, 0x9, 0x1, 0x66, 0x105, 0x101, 0x8, 0x81, 0x1, 0x1, 0x4, 0xfffffffc, 0x4, 0x0, 0xffff8000, 0x2, 0x9, 0x7, 0x0, 0x3, 0x37, 0x1, 0xca, 0xffff, 0x4, 0x5, 0x101, 0x3, 0x9, 0x10001, 0x4, 0x2, 0x10000, 0x9, 0x156, 0x10001, 0xaa66, 0xe28, 0xb3, 0x5, 0xff, 0x7, 0x4, 0xc531, 0x2, 0xfffc0000, 0x9, 0x8, 0x2ad24b7b, 0x2, 0x7d88, 0x1, 0xcee, 0x5, 0x200, 0x6, 0x23ae, 0x9, 0x9, 0x3, 0x9, 0xffff, 0x2a1, 0x2], [0x200, 0x8, 0x8a, 0x200, 0xc00, 0x77, 0x7fff, 0xff, 0x2, 0xfff, 0x8001, 0x5, 0x7, 0x4, 0x776d, 0x1, 0x8, 0x1, 0x5, 0xffff8001, 0x0, 0x600000, 0x4, 0x200, 0xffffff81, 0x3, 0xd5, 0x7, 0x8, 0x7, 0xd6, 0x1000, 0x7f, 0x57b0, 0x5, 0x1, 0x2c23, 0x81, 0x9, 0x3, 0xa598000, 0x1, 0x2, 0x2, 0xd1ee, 0xcb87, 0x8, 0xfffffeff, 0x3ce9, 0x9, 0x5, 0x5, 0x1ff, 0xc13d, 0x8, 0x1, 0x89, 0x7, 0x6, 0x0, 0x3, 0x800, 0xffffffff, 0x9]}, 0x45c) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)='t', 0x2}], 0x1) 02:09:45 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:45 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x1001}]) 02:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc01000000000000000000000000000105000100010000001400"], 0xa4}}, 0x0) 02:09:45 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc01000000000000000000000000000105000100010000001400"], 0xa4}}, 0x0) 02:09:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x818, &(0x7f0000000e80)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT], 0x5, 0x2b7, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) fchown(r0, 0x0, r2) 02:09:45 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x2c}}, 0x0) 02:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc01000000000000000000000000000105000100010000001400"], 0xa4}}, 0x0) [ 500.264302][ T27] audit: type=1800 audit(1689732585.613:231): pid=8685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1971 res=0 errno=0 02:09:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f00000011c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="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", @ANYRES64, @ANYRES64, @ANYRES64=0x0, @ANYRESOCT], 0x5, 0x2b7, &(0x7f0000000800)="$eJzs3MtrE18UwPHT9JWmtMnix08UpAfd6GZoo2sxSAtiwFIb8QHCtJ1oyJiUTKhExOrKrfhHuChddlfQ/gPduNONG3fdCC7sQhzJPPpMaWmbTNt8PxDuTe49M/dOJuHcIZO1B++fF/OOkTerEourdIiIrIukJCahjqCMefUe2eqNXO3/9fXivYeP7mSy2dEJ1bHM5LW0qg4OfXrxqi/ottwrq6knaz/TP1b/Xz2/9nfyWcHRgqOlclVNnSp/r5pTtqUzBadoqI7blulYWig5VsVvL/vtebs8O1tTszQzkJitWI6jZqmmRaum1bJWKzU1n5qFkhqGoQMJwX5yCxMTZuaQwdPHPBg0SaWSMTtFpG9XS24hkgEBAIBI7cz/Y/WU/vjy/8VLK9X++0uDQf6/3NMo/7/+zd/Wtvw/LiJNz/93Z0Tt5Uj5P06Jev6fCD6/nrePF4e9Cvk/AAAAAAAAAAAAAAAAAAAAAACnwbrrJl3XTYZl+OgVkbiIhM+jHieag/e/vW3euNc1KGK/m8vN5fwy6LAiIrZYMixJ+eOdD4F6PbwXUOtS8tmeD+Ln53KdXksmLwUvfkSSktoZ77pjt7OjI+rbHt8tia3xaUnKf43j0w3je+TK5S3xhiTly7SUxZYZ77zejH89onrrbnZHfJ/XDwAAAACAs8DQDQ3X74axV7sfv7G+bnh9wF9fDzdcn3fJha5o5w4AAAAAQLtwai+Lpm1blTNXCWd40KjwtwyRjDnc+ck4dAeoxA411CERsfWoew8vG+3VR8ajOiznPnz8fXwbvLEU32emTat0t/ZbCAAAAEArbCb94Ss3ox0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtqBV/Jxb1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICT4l8AAAD//3uREoU=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x241, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000047c0)='./binderfs/binder-control\x00', 0x800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x40, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}}, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000004800), 0x40000, 0x0) r7 = syz_clone(0x200000, &(0x7f0000004840)="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", 0x1000, &(0x7f0000005840), &(0x7f0000005880), &(0x7f00000058c0)="ceb21e66a840da2c7191d3caf4c1fdea689b4e110a01124fd519fd2dee8c7d259a3643fda08f85c35a912fb4cf39633d29b1ab5010463b863183319abb") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005900)={0x0, 0x0, 0x0}, &(0x7f0000005940)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006d00)=[{{&(0x7f0000000040)=@abs={0xa285087083057738, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000005c0)='<', 0x1}, {&(0x7f0000000600)="f39d60b8804528ca60aee9a43683e150f142e71cacc52a21b588976812a11f6cfa94c298fb9170a0ce840932398b365e5c29d0fc60a829204a6f77fadca7fe62", 0x40}, {&(0x7f0000000640)="7aa9a1c1fb5afc5bd0c796a78e79e24617e76cef5369288ce88bb4626476a967be4e22eda80cfa73aa055ded59f33f026c1dd548d9b1101d8476a10016f9dd0eb8a1546450b0", 0x46}], 0x4}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001b80), 0x0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="20000000000000000000ffff00000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x88, 0x4000000}}, {{&(0x7f0000003d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e00), 0x0, &(0x7f0000004080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x80}}, {{&(0x7f00000041c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004740)=[{&(0x7f0000004240)="50e53447337b38672c62994431b8683674f2d50fced8abc3df5d8f59969963917bfb5fd44e9c7accfd4da50d816bcac4dcd33a806d2ec5b80c4dc9e22667e29f3fa8090d51e40bc5e2dbb90d4c3f66e2b89c83ecfe751d9b6cd3fc1b971bb5e89831e8e09729a68ac86f7dd7d1eb336416775b", 0x73}, {&(0x7f00000042c0)="7efbf8ef09981bb886cbd965947640d73da2256eaee2cefb16b77a9d7ff69b48636b51e5097cf79b6f5c4a2cfd3cdc8ef4af12c036f769e701e60a2970822de85b0b1ce79b426ca99a08f79f6336b52a3c9fc973011ba1f4f95813af2977da39725d90aed62f588c889234baffe9965caee0da148bd95002714a927c368576263ad345653e1ac5bc90978a08908fee6182e18e21d18a154a132f71f00f1c3dbb728f26c6073684bf03afce8f", 0xac}, {&(0x7f0000004380)="1e76031c40cacd28c14a86e5f5d9b61664dbf3ce77c3872d9bab6bb73ff3a741a68fecc1a9368452b5c28d41004f9a5e7f374c3b44683b2ce7127b75b6999944a35b84475300f6ec00f549b4e55e87865496352d6be5f05aa6dcc13af5960cca1df554dc6ca58503441ee0abeb6d84dad071303c4c7264bc734d101008537a52cc7b6cfb26d306229c0479d82944d19a240a40fb7b01ce07eb2271d7223efef72e363ee6e317288fb9f7e81e15bbce8190f245b9045db82e12f226af698f4e10db18257b91a3a63115280fcb6eb26eb9", 0xd0}, {&(0x7f0000004480)="1441f23aeafb20378b45b50485dda967f9681e86b404162414e84bbca6bda93feac8840b4d206aa33f99fb8ff51bfa3f7d62ee2f038cf809669aa01fe0b997233a01b399f500fae45b71357065c6a17224a9bd", 0x53}, {&(0x7f0000004500)="ec0020df1d81af5f021bc82126ae93bb2813727648831696e763afd48899f4941e876d4bc56771f0663be2d6ad97905091704513b9ad2400209483d278675b256bb9947475043b8fd502a1a54fccede5e35d89b5f9bf69e696530bf65abea3235505ac94f452ef7068e73ff8416b22d8859dabc109dbfb41afd2af7852d3b93b5039e932c8e6ab752a2e2eef7b32e11585d04eb38bfca6be3217b467e72bb444c96dc32e5f2b977347690b850e9a41a072733cc9ab8ffdad7856144b385c21ebe12b60fcc8e3ede0e8c64f94ab8b304f0d0ec3771e01e7e25c72b3ece326ff47787d536811d5c867788aee549146bb", 0xef}, {&(0x7f0000004600)="c36583377c8f9a7137c5db049b674b8c6092f7ac969f99e6d763c3830799867609b16e0ce23241903d9aab3c", 0x2c}, {&(0x7f0000004640)="9a048293853e88250d2ab60b0d59f744ec16a13c9685e7f3837baca4d559dad677651ec9d01100f4ee0b465aa602069023f8881cb6abca7b97abd729a281af73255ed94f573ea132d297743186a6b69ecbbc452d39f54af4af3b40ee2e6b17213982094890309276dc3e9568ad7a96fc8a2e7f3f9303", 0x76}], 0x7, &(0x7f0000005a00)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000078107a00000000000100000002", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f0000005ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000005b40)="d1089b8ef480dac540c5374256dead287720d54642da8030219107683891f60cc5bfcf127d2f782a05295c9e9ebb991c93213534aa88a476c91356c42739bca8f89992ef31d193ab3a5f32b642ece3e5924a4f095b0b38c645e58f93c45910ae037a954bf1ccc7d7b19905e481330b8253a856ca", 0x74}, {&(0x7f0000005bc0)="9580eb7b6afddef18b38c22feede7815046778feeefe88c388e42849032c47a776dd997b9e66ae31074e3830ec8fc3a5bc11d3d552946ae29c38df55bfc56fbf8cd42dc82c5e4f", 0x47}, {&(0x7f0000005c40)="ad080f7142f112ddcbe40df0b80db2e2563858764eb4cb4eec8db3f9e7f5b4abf2e926350a35840373417c02a10a36cde80d62b25c333178972cf0bbe8be9bc7309b1080d91db04d15284490515cf9562ad5af294c6e8fe37b2c4e393324084be9a8e8b032e3ed0d9b5ce2c483", 0x6d}, {&(0x7f0000005cc0)="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", 0x1000}], 0x4, 0x0, 0x0, 0x91}}], 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) unlinkat(r0, &(0x7f0000000180)='./bus\x00', 0x0) [ 500.350422][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 500.405583][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.439125][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.500130][ T8693] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 02:09:45 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000180)={0x0, 0x2, [{0x1, 0x1}, {}]}) 02:09:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:45 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 500.779301][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 500.792031][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.800813][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) read(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00'}, 0x45c) 02:09:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:46 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:46 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 501.187545][ T8712] input: syz1 as /devices/virtual/input/input6 02:09:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)='cgroup2\x00', 0x40d, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r2, 0x70b, 0x0, 0x0, {{0x32}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) pipe(&(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000340)="8b35237b27b18bc33af83af4215623113a0a1bc0b3d0bc3545fbd8609259e4a0c4b2b3c65380d540e7bb917f0294a76eb90d6b8172ab14f7d811262fa895", 0x3e}, {&(0x7f0000000680)="a266248423cddb7e4f5fe231b1bc9221fe088ed0828dc06bb28aab31ad31570272bf1c5f4f3d7aacbf2159a45b8adb8ca0b03e7d63640737116847ed8203f0638572db1917573aea71b9abb7dd627b56733aa53c9312fe8b5cf490ef00d15e39f351630b8eb5831562c51feb0344ebd26aae04d5483e8f4fb77f37fa9f4ffbe2605928d20ae454129a68626b3f3d45b0e376b4ad6f3d013c65242f538697a134c7d1de8fd7c0518ce7fe233b69402b502833a743a65b4bcfe9a37dd171153254755829f9931986807f93a0c124194366aa0a7b141d24282e491a", 0xda}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="07455d0a1b19c20e7aef7925ac8a85bb6ac5ca9e152f9494075d2e1ab2fd21f57d8cf776352366cde1f6376d9531c3174657e08de5d4a5813e0d9beab6ee4089ea02978b7b69c0c1a794fb4c3db8d62ac81c90d8e87c3fe1a6dd00abe4bebbf929e2ea2e4f806116fdc02784fa38669c3b4ab218d5c65b2e8e81c694adaaa4ac38", 0x81}, {&(0x7f0000001840)="6ace073e1b83fee52bd0ca938082f055d2914f43aa25cedd1136b45cb53bea23176a94b6cedbf078bb4e6211771c727e18cb90503cfbed76390fb4f126badf93f3b5a42e0a8331081f814890dd1d053272f92de224d20be061fbb6f15d1433a3444f0925600f8c2dbf9cfc152951a7cd5e5f7cad78a1a137df3a01e611281a33167682bd1e7093d6da59e631364ea239c14c22e64206b0875f53656a47f8b5e68f699a33fdd93eb286f41186bdd1f263b0743f3c0a04a99b207d4b3d519fb2572789e58528773290419b5576b79e1979431c1203ee46a30a6ab07aa255371139001e70e033a57919e5249a6cd433e868cc4118", 0xf3}, {&(0x7f0000001940)="fff9347b452a8abcee5d548194c87b22484103d1bc605159fd13a5542ca7de811088fc13de2bc5e616ee20a5b8c597b3611ef0ce9b63673f3807a70327651d2db91c86a90043e0c2707c7066948c8c555be2fb203fde99753160bc6198b5938d9dd343fbe974a7c21e4e8cf6b19a671a475dff899915e127f9d5deb4ea919fe5ce284420a65f9f0ab3e4a830457e46c4f129e66a1ceb5a1348d479701da658593c5e5412431c0ea1f239674110039d6dea2b4749abcdf2c0facd2b617c42a3", 0xbf}, {&(0x7f0000001a00)="c28bbed085bae890cbe3e95dc511742a0917f544756ad255a35c9b114d8eb46613da1c5dbc15a83493052b8cf2686b4f94f06ce5671fd6276895b2783e61bf2c16071918f9cbaa1e8b330ff9db642c952af7938b826a4ad332fa03d3d6170dff30445ba663e9e5787c6615d43bdacd4e40d33da64756befe6a5f875fa2985e46dcacc7c446526d8787081a252645b1b454ec453c8e93da4542cc95230d53e9098ca0cc779e43699b2ec49fb3399273c8a40d8f6af69717f1dfdc3a5bbf36f75893b3e54f50cb4a1040736bb86d905e8a76a6321d7c1188ccaf3881827a343b2b399a5b42a639", 0xe6}, {&(0x7f0000001b00)="1e9f27298a615cdf9ca3203a13d46432942434d5a84d4b27fe3a09e126643f1c3487dc512f300483bea1e8222c8846ef479062ff664953650bfe066d909de8cc251aba81e0658ebff90c53ab5e4e6a81b5eb6e93a2efcba3f95ab3dd1d05659003c8b0527c134620288ed7e9eb2f5a92cb6f19fe84004d127634e42b34c1715c177f2b4b08a84f9a85ba", 0x8a}], 0x8, &(0x7f0000001c40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x1}}, {{&(0x7f0000001c80)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001d00)="f82fba39c89fed47e4263ee62f9a17d0f97cf02fc7d79510455595eddb49001ed19c560ff05b6c7d344a1a70db823954500d86389798a1d20e2154e8262e174d8e88d3f21467d888e627ade53377ea12e0ec8df93244c50ed8d616364c7879f4b8d79a649c22d433b5c65da457c9104ae35961605be32f8b4f1c064dd5c0131b31dbfc43f307c526c2205874252a1e40f2d611307734c6d726f1902f", 0x9c}, {&(0x7f0000001dc0)="581ab5641759eacb7213be3fbaa103161bf59d98b5ac91b989db7dce36144fc74d74d8eb31c70d456cb39763d6d2def81392d27bfa3d7b28342b72af0a6407bbaa4efd8a64cef828ccbaff6fbc29b6e27727eeb0f62ec11a5b6d862f79296ba0ddb2b480f854cf537e1cc548c84b848f1268a24d466dd899c9ac10bb68ddc326993a434f2229caaa6b285254c53136ef6407b614d275062fa85802985a44192880ab0e0bf0971ef8446a6d673194eef35e9ffb105bfa2f8cffcd98db01d179b378a5bb31d0c6c767d262c2e0a3d619f018372172c8283cd60ec5298f02b2e63307e1fb4a413c963fefc146759901bb1064e77bec3cb6", 0xf6}, {&(0x7f0000001ec0)="b621aace1b57489a517ba3c069f9b6400b621cc9ca18c49c92c1f1ee36f811f5fc751a1f564424502ec902ca4ad0c68e3229c9", 0x33}, {&(0x7f0000001f00)="58a874d81707654eea979ce39ce69573c71b401a196b41cedd279b74c61416620e283aece6578ae8b2aaad208e2fb5360a8dd5765831ac1a2faefe5c51d273841f7efbb81a10fc1d80a6fb2f0c68", 0x4e}, {&(0x7f0000001f80)="79fe97fde011dcf2984dad5dcedf12a751cefbb4ac3aa9f6f574d1a1ef4bec4835e06adfaa61de0b4a873c3b9715b9ab06d93bce28ccd8d9fd601cb1d2a8ad8aec8d5a35d9fbe87771250c7e0b9ce949acf596ebf9a75cd8ac28f7af", 0x5c}], 0x5, &(0x7f00000020c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1]}}], 0x68, 0x20000824}}, {{&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f00000021c0)="cb0e2bd880febfe914cea2311938cabfef974755cf6fd306cef997985fd03e8bf53acfb5954aa8e2ad9319f3f1a6fc75745fc8059b03176e9bdd041a6e9e9c718e88b8b283f32d30e8d2408bf70a53783c233831dec44f3cc4e127a33cc40b1ed166ac6513be0adb4207e340e611022825ba173f41a4dc079ee858e74ede08798153ad3c6a051ef33af6234a4f89804c55b405ad40523f2c5712f413fab9699f749649c6233cb951fb70e8cc7053da8bd7ea", 0xb2}, {&(0x7f0000002280)="c982c712c815079a0ecb26265b3449532835f18a7eb799e9f501a0d651955aa719c54a523efda1e2f1d3f800856b79b54d05dc27fb7048ed4ea5c72c086ed171f2005106a81f147c8aa45e806c", 0x4d}, {&(0x7f0000002300)="bc703ef978635733e5e20b839278e89d333cb04475bcf1ccb408cde9a3d228123641faaa11e86c9da62de012cbe4c9c00090", 0x32}, {&(0x7f0000002340)="8fa60fea99a9a2dbfe6fd54731427356ae78e201aedf230266cd8a72e00d1037ec5154bc66442140c4b3d7592a795ee5cb624134b01f25bc052138a5223e072195d9d842f6f3b01b11bf72c32b05ea2fa0eb860cb0fb076d93849613a7fc30cce51fffa55988cf3ea7a1e0f1d56bdc7adc84ba1ffc1fd6348c94f169125aaf1b3776533addf493159d5a852ca9c6a72330f6f83731978187642b07", 0x9b}], 0x4, &(0x7f0000002580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r4]}}], 0xb8, 0x4014}}], 0x3, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000000580)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/75, 0x4b}], 0x1, &(0x7f0000000540)=""/12, 0xc}, 0x100}], 0x1, 0x2, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 02:09:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:46 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 501.400920][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.407282][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.528220][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 501.528238][ T27] audit: type=1804 audit(1689732586.873:236): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/261/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 501.586406][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 501.616420][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.643962][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.667326][ T27] audit: type=1804 audit(1689732586.933:237): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/261/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) read(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00'}, 0x45c) 02:09:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:49 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:49 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:49 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0xc0403d11, 0x0) 02:09:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101b01) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0}) 02:09:49 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fchmod(0xffffffffffffffff, 0x0) 02:09:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 504.034630][ T8744] input: syz1 as /devices/virtual/input/input7 02:09:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x24, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) 02:09:49 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 504.155181][ T27] audit: type=1804 audit(1689732589.503:238): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/262/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 504.202025][ T8758] __nla_validate_parse: 277 callbacks suppressed [ 504.202047][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.274778][ T27] audit: type=1804 audit(1689732589.543:239): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/262/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 504.294978][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 504.380763][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.388691][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) read(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00'}, 0x45c) 02:09:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:51 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12015002000000102505a8a440000102030109022400010105c00009040003010701030009"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 02:09:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fchmod(0xffffffffffffffff, 0x0) 02:09:51 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:51 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) fchmod(0xffffffffffffffff, 0x0) [ 506.010314][ T8773] input: syz1 as /devices/virtual/input/input8 02:09:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:51 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 506.085043][ T27] audit: type=1804 audit(1689732591.433:240): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/263/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 506.127815][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 506.155570][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.184117][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:51 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 506.184560][ T27] audit: type=1804 audit(1689732591.473:241): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/263/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:53 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0xfffffd6d) read(r0, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00'}, 0x45c) 02:09:53 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x818, &(0x7f0000000e80)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="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"/988, @ANYRES64, @ANYRES64, @ANYRESOCT, @ANYRESOCT], 0x5, 0x2c5, &(0x7f00000001c0)="$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") 02:09:53 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:53 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:53 executing program 0: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x9, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) accept$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0x6e) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, 0x0, 0x0) 02:09:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 508.267641][ T8800] input: syz1 as /devices/virtual/input/input9 [ 508.331619][ T27] audit: type=1804 audit(1689732593.683:242): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/264/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 508.340581][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 508.450579][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.461025][ T27] audit: type=1804 audit(1689732593.683:243): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/264/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 508.496962][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:56 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) 02:09:56 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x0, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) 02:09:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) [ 510.969833][ T8823] device bridge0 entered promiscuous mode [ 510.986122][ T8817] device bridge0 left promiscuous mode 02:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newchain={0xec4, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_RATE={0x6, 0x5, {0x26, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_basic={{0xa}, {0xe6c, 0x2, [@TCA_BASIC_POLICE={0xc38, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x0, 0x2, 0x9e2, 0x3, 0x5, 0x1, 0xff, 0x3, 0x5, 0x3ff, 0xfff, 0x80, 0x0, 0x0, 0x7, 0x7, 0x4, 0x20, 0x3, 0x4, 0x9, 0x7, 0xfffffffc, 0xff, 0x3, 0x7, 0x8, 0x80000000, 0x6cbc6ebe, 0x6, 0x9, 0x7c3, 0x100, 0x81, 0x6, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x5, 0x2, 0x81, 0x8000, 0xfffffc01, 0x80000001, 0x2, 0x401, 0x1, 0xac, 0x97, 0x1, 0x1, 0x40, 0x5, 0xfc000000, 0x8, 0x2, 0x8001, 0x8, 0x7ff, 0x3, 0x80000001, 0x1ff, 0x6, 0x7, 0x6, 0x6, 0xfffff800, 0x9, 0x1, 0x0, 0xf0f3, 0x9, 0xfffffffa, 0x4, 0x101, 0x2, 0xff, 0x3, 0x1, 0x7f, 0xff, 0x6, 0xb2b9, 0x81, 0x0, 0x3, 0x1, 0x3, 0x10001, 0x1, 0x2, 0x4e8f85b7, 0xa1fe, 0x3, 0x4, 0x6, 0x7f, 0xe1d4, 0x0, 0x1000, 0x3, 0x1, 0x8994, 0x0, 0x8, 0x2, 0x23, 0xfffffffc, 0x9b78, 0x40, 0x101, 0x8, 0x2, 0x4, 0x56, 0x20, 0x80000000, 0x4, 0x80000001, 0x3, 0x10001, 0x7ff, 0x20, 0x400, 0xffffffff, 0x3, 0x2, 0x1, 0x1, 0x5, 0xff, 0x6, 0x1, 0x7, 0x9, 0x80000000, 0x101, 0x10000, 0x1, 0x8, 0x0, 0x2, 0x11f4d49, 0x7, 0x0, 0x0, 0x5, 0x6, 0x5, 0x81, 0x5, 0x9, 0x1, 0xbc, 0x1f, 0x8, 0x1, 0x6, 0x0, 0xadd, 0x3b94000, 0x6d, 0xacda, 0x905, 0xb004, 0x3ff, 0x3, 0xfffffffb, 0x169, 0x0, 0x87, 0x80, 0xfff, 0xace1, 0x700000, 0x8, 0x0, 0x1, 0xffff, 0xf3b, 0x0, 0x9, 0x6c, 0x7, 0x6, 0x8, 0x9, 0x3ff, 0x72f4, 0x401, 0x3, 0x10000, 0x6, 0x8, 0x81, 0x3ff, 0x1ff, 0x80000000, 0x2f5a, 0x7, 0x80000001, 0x4, 0x2, 0x59, 0x1, 0x1acc, 0x3, 0x80000000, 0x4, 0x7ff, 0x7, 0x0, 0x1b0, 0x7fffffff, 0x7ff, 0x100, 0x9, 0x5, 0x0, 0x716, 0x3, 0xb260, 0x3, 0x3, 0x800000, 0x1, 0x0, 0x6, 0x7, 0x7fff, 0x216, 0x7fff, 0x5, 0x4, 0x3, 0x100, 0x6d4, 0x8, 0x1, 0x80000000, 0x0, 0x5, 0x6, 0x400, 0x7fff, 0x4, 0x0, 0x0, 0x6, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x573}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x2, 0x3, 0x40, 0xca, 0x8, 0x5, 0xffff, 0xdc, 0x200, 0xffffd2da, 0x81, 0x94, 0x3, 0x0, 0x401, 0x4, 0x8, 0x8, 0x1000, 0x7, 0x6d9, 0x3, 0x8, 0x5, 0x0, 0x8, 0xfffffff9, 0xfffff3ea, 0xc0, 0x1ff, 0xfffff389, 0x9, 0x2, 0x1, 0xfffff800, 0x1c9, 0x8000, 0x3f728974, 0x9, 0x6, 0x0, 0x9, 0x1, 0x9b, 0x7, 0xbfc, 0x0, 0x1, 0x20, 0x5, 0x24, 0xffff, 0x400, 0x9, 0x10000, 0x4, 0x28568b27, 0x0, 0x1, 0x28, 0x400, 0x40, 0x6, 0x5, 0x6, 0x1, 0x6, 0x339, 0x7, 0x0, 0x100, 0x7fc, 0x4ec, 0x9, 0x2, 0x9, 0x4, 0xffffff81, 0x3, 0x7fffffff, 0x80000001, 0x4, 0xada, 0x7, 0x9, 0x2a5c, 0x5, 0x2, 0x10001, 0x6e, 0x1, 0x1, 0x4, 0x1, 0x1, 0x1, 0x8, 0x10001, 0xa0, 0x10001, 0x3, 0xba4, 0x5, 0x2, 0x8, 0x6, 0x9, 0x0, 0x7ff, 0x49af, 0x2, 0x3ff, 0x1000, 0x5, 0xfffffffd, 0xfff, 0x81, 0x37, 0xfffffffb, 0x3ff, 0x400, 0x3, 0x4f, 0x0, 0x1, 0x8, 0xd04, 0x2, 0x9, 0x7fff, 0x101, 0x9, 0x9, 0x0, 0x6, 0x5ad, 0x55f, 0x3ff, 0x100, 0x4, 0x3e, 0x3, 0x74, 0x6, 0x5, 0x5, 0x2, 0x8, 0x0, 0x1191, 0x4, 0x4, 0x3ff, 0xfff, 0x2, 0x0, 0xa0000000, 0x1ff, 0x8, 0xff, 0x0, 0x4e6, 0x6, 0x4, 0x5, 0x0, 0x4, 0x5, 0x7fff, 0x400, 0x7fffffff, 0x3, 0x0, 0x2, 0x2, 0x3, 0x6, 0x3, 0xeb4c, 0x30, 0x8000, 0x0, 0xaa, 0x1, 0xff, 0xfa, 0x0, 0x4, 0x400, 0x3, 0x2, 0x10001, 0x7, 0x101, 0xfffffffb, 0x10001, 0x0, 0x1, 0x2, 0x9, 0x62, 0x80000001, 0x40, 0x6, 0x8, 0x5890, 0xffff, 0x94, 0xaa11, 0x1, 0x10000, 0x3, 0x80000001, 0x576, 0x2, 0x5, 0x87, 0x36086cb3, 0x1, 0x40, 0x8000, 0x0, 0x7, 0x1ff, 0x77a, 0x0, 0x5, 0x6, 0x61f, 0x3, 0x37, 0x7, 0x5, 0x4c, 0x9, 0x3, 0x3, 0xaa, 0x0, 0x8, 0x86, 0x8, 0x8, 0x2, 0xb432, 0x0, 0x2, 0x9, 0x7fff, 0x0, 0x3f, 0xffffffff, 0x2, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x0, 0x80, 0x5, 0x5, 0x2, 0x0, 0x8, 0x2, 0x0, 0xffffffff, 0xde, 0x6, 0x5, 0x3, 0x6, 0x9, 0x9, 0x4, 0x55f, 0x9, 0x81, 0x2, 0x38a1, 0x55f8, 0x3, 0x80000001, 0x7fff, 0x0, 0xdb70, 0x2000000, 0x307, 0x0, 0x8, 0x8000, 0x0, 0x10000, 0x400, 0xfa, 0xff, 0x400, 0x0, 0x0, 0x7, 0x3ff, 0x6, 0x4, 0xedd, 0x8, 0x5, 0xf6c, 0x703, 0x0, 0x9d, 0x6, 0x9, 0x9, 0xc1, 0x80000001, 0x401, 0xffffff01, 0x8, 0x81, 0x912, 0x1, 0x8000, 0x4, 0xd970ac95, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0x838999a, 0x7fff, 0x5, 0x6, 0x0, 0x3ff, 0xfff, 0x7, 0xfffffff9, 0x8000, 0x1f, 0xfffffffe, 0x7ff, 0x400, 0xff, 0xfffffffe, 0x5, 0x10001, 0x7ff, 0x6, 0x3a2, 0x9, 0x0, 0x5, 0x15, 0xdd, 0x9, 0x1, 0x8, 0x8f7, 0x1, 0x6, 0x7fff, 0x400, 0x1, 0x200, 0x9, 0x2, 0x800, 0x400, 0x6, 0x81, 0x6, 0xd5, 0x38a, 0x101, 0x7, 0x5, 0x3e, 0x0, 0x1, 0x80000000, 0x1, 0x7, 0x0, 0x3, 0xae5d, 0xffffffff, 0x9, 0x3, 0x3ff, 0x9, 0x8, 0x4, 0xf0ab, 0xffff, 0x9, 0x2, 0xfffffa33, 0x6, 0x9, 0x9, 0x1, 0x3f, 0x99f0, 0x0, 0x7fffffff, 0xf14, 0x1000, 0x0, 0x66, 0x1, 0x8, 0x20, 0x60000, 0x4c, 0x7, 0x8001, 0x570, 0x9f5, 0x6, 0x5, 0x7, 0x0, 0x8, 0x7, 0x7, 0x5, 0x9, 0x2, 0x65, 0x3, 0x2, 0x4, 0xfffffffe, 0x10001, 0xb7bf, 0xf3, 0x3, 0x1, 0xffff8001, 0x7f, 0x1f, 0x380000, 0x87c8, 0x7fffffff, 0xa9, 0x7fff, 0x0, 0x8, 0x20, 0x9, 0x8, 0x8, 0xfffffff8, 0x3, 0x9, 0xff, 0x200, 0x9, 0x401, 0x9, 0x3, 0x80, 0x204000, 0x1, 0xd9f, 0xfffffffc, 0x7fffffff, 0x8, 0x5, 0x1, 0x2, 0x8, 0x6, 0x10001, 0x203, 0x9, 0x1, 0x5, 0x6, 0x1a0e39e0, 0x3c8, 0x0, 0x0, 0x100, 0x3, 0x50, 0x6f, 0x9, 0x911, 0x8, 0x0, 0x9606, 0x4119, 0x100, 0x5, 0x401, 0xbe0c, 0xffffffff, 0x7, 0x3, 0x9, 0xffff, 0x4, 0xffffffff, 0x400, 0x7, 0x6, 0xffff, 0xee6b]}]}, @TCA_BASIC_ACT={0x230, 0x3, [@m_tunnel_key={0x68, 0x9, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x21, 0x6, "1dc7ca301ea317798a1822daed0a7aee524b44e005ded4c42a175cc37b"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x168, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "b289fc78b3fcdfdebeb751f9268e262a728711fc6c5c1e7bd5ef29fc8e80e9db612a361c5bdc87dae9b3452806"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x50001}, 0x10044010) 02:09:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 511.106899][ T27] audit: type=1804 audit(1689732596.453:244): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/265/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 511.111995][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x9, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, 0x0, 0x0) [ 511.176658][ T27] audit: type=1804 audit(1689732596.453:245): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/265/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 02:09:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:56 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 511.281663][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.300523][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000", @ANYRES16=r1, @ANYBLOB="010008000000fddbdf25030000001b000700748c5671964455196e2f637570732d62726f77736564000014000300fc0100000000000000000000000000010500010001000000140006"], 0xa4}}, 0x0) 02:09:56 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 511.671476][ T27] audit: type=1804 audit(1689732597.023:246): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/266/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 511.674920][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 511.723035][ T27] audit: type=1804 audit(1689732597.023:247): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/266/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 02:09:57 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:57 executing program 3: socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) recvmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12142, 0x0) 02:09:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x0, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) [ 511.765879][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.774367][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x9, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, 0x0, 0x0) 02:09:57 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:57 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:57 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='notify_on_release\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0x12) 02:09:57 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:57 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 02:09:57 executing program 3: unshare(0x64040000) [ 512.597393][ T27] audit: type=1804 audit(1689732597.943:248): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/267/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 512.637809][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:09:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 512.651756][ T27] audit: type=1804 audit(1689732597.943:249): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/267/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 512.758062][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.770412][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x9, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, 0x0, 0x0) 02:09:58 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newchain={0x23, 0x64, 0x1, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_basic={{0xa}, {0xe6c, 0x2, [@TCA_BASIC_POLICE={0xc38, 0x4, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}]}, @TCA_BASIC_ACT={0x230, 0x3, [@m_tunnel_key={0x68, 0x0, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x21, 0x6, "1dc7ca301ea317798a1822daed0a7aee524b44e005ded4c42a175cc37b"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x168, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "b289fc78b3fcdfdebeb751f9268e262a728711fc6c5c1e7bd5ef29fc8e80e9db612a361c5bdc87dae9b3452806"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 02:09:58 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:58 executing program 1: socket$packet(0x11, 0x0, 0x300) pipe(0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x64040000) 02:09:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 513.237627][ T27] audit: type=1804 audit(1689732598.583:250): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/268/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 513.253694][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:09:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 513.348364][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.364015][ T27] audit: type=1804 audit(1689732598.583:251): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/268/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 513.382595][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:09:58 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:09:58 executing program 3: unshare(0x64040000) 02:09:58 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 513.738645][ T27] audit: type=1804 audit(1689732599.083:252): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/269/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 513.785810][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 513.808728][ T27] audit: type=1804 audit(1689732599.123:253): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/269/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 513.847048][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.865319][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.866330][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.910453][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.941267][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:59 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0x1, 0x9, 0x7, 0x9, 0x0, 0x101}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x20}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) accept$unix(r1, &(0x7f0000000080), &(0x7f0000000000)=0x6e) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x64040000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, 0x0, 0x0) 02:09:59 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 513.980698][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.040117][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 514.082542][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.120763][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 514.178895][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.237080][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.292221][ T8918] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:59 executing program 1: socket$packet(0x11, 0x0, 0x300) pipe(0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x64040000) 02:09:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:09:59 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:09:59 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 514.769316][ T27] audit: type=1804 audit(1689732600.113:254): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/270/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 514.789721][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:00 executing program 3: syz_clone(0xc52c0200, 0x0, 0x0, 0x0, 0x0, 0x0) 02:10:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e0000008500000005"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 514.868629][ T27] audit: type=1804 audit(1689732600.113:255): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/270/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 514.896337][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:10:00 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 514.923003][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e0000008500000005"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:00 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:00 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:00 executing program 0: shmget$private(0x0, 0x400000, 0x0, &(0x7f0000bff000/0x400000)=nil) 02:10:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e0000008500000005"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 515.548833][ T27] audit: type=1804 audit(1689732600.893:256): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/271/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 515.591675][ T4372] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 515.623881][ T27] audit: type=1804 audit(1689732600.933:257): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/271/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 515.656444][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.671127][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000001700), &(0x7f00000006c0)=0x109) 02:10:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) sendmmsg(r1, &(0x7f0000000100), 0x10, 0x0) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000001540), 0xffffffffffffff89, 0x0}, 0x0) 02:10:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085000000050000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 516.173587][ T27] audit: type=1804 audit(1689732601.523:258): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/272/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 516.204980][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 516.235752][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.247572][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.259715][ T27] audit: type=1804 audit(1689732601.553:259): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/272/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 516.273822][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.306554][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.327572][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 02:10:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}, {{&(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001c80)="dfb2ad983015f3082e46f5", 0xb}], 0x1, 0x0, 0x100}}], 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) fstat(0xffffffffffffffff, &(0x7f0000000540)) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:01 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085000000050000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:01 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x490001, 0x0) 02:10:01 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x0, 0xc}, 0x14) [ 516.350039][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.358739][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.380061][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 02:10:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x10c94, &(0x7f0000000480)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 02:10:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x10c94, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000040)='./file0\x00', 0x183342, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 02:10:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085000000050000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 516.436690][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.471398][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.505652][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 516.540775][ T8963] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 02:10:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e0000008500000005000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x10c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$eJzs3U9LG2kcB/DfaJLN7h6Sw56WhR3YPewpqK9AWSwUPbXk0F7aUhWKCUKFQP/Q1FPvhb6NvpNe+g76Agq91UPplDGTP8hYjSZNkc/n4g/n+T5/xkfHyzy5/1d3f+fgcO/o+Yeo15NYWo/1OE6iGUsx9DIAgOvkOMviUzZwfutaRGSNQV1ZmvvkAIC5KH/+J4ucEgAwZ7fv3N3a2N7evJWm9Yjuq147f/bnXwfXN/biUXRiN1aiEV8ispFBfePm9mZU0lwz/u32e+082b33ruh/42PESX41GtEsz6+mAxP5fq9djd/yfFb8L7IWjfijPL9Wko92Lf77Zzj/r7vRika8fxgH0YmdyLPj/IvVNP0/e/P52clAeT7p99q/nLQby5Z/6A8GAAAAAAAAAAAAAAAAAAAAAIBrrZWOTJ7f0x+eBthqlV8/83yg4oSe/sT5Oitpmg6P8em1qzHIV+LPSlQWt3IAAAAAAAAAAAAAAAAAAAD4eRw+ebr/oNPZfTxlsVXky9sMX+u/TM95sf/2rJ6vWsRyMbVOcoUhhuub0cR+zedzifjr6cf6Oy451lRFjO5PEuc0rl9gk9SKIpli02Yl22/5zFRtRmuv/T7bm5mvuHrBzVad8W/KKcm8/gQBAAAAAAAAAAAAAAAAAACF8Uu/JRePFjAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiA8ef/j4ponv7O6aJfhL/XZrJDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLNvAQAA//9kyWqx") mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) [ 516.568255][ T8983] loop1: detected capacity change from 0 to 256 02:10:02 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='_', &(0x7f0000000080)='./file0\x00', r0) 02:10:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e0000008500000005000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) 02:10:02 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:02 executing program 0: r0 = getpid() getpgid(r0) syz_clone(0xc52c0200, &(0x7f0000000000)="fb8beae89ba1de998c06d6d042cf3a6cd3630d94d7dd06fcf0ef4bf0527a61fce874c92fb83f091066565477446cadf80f32525bdf606120581718215c7cf8780bae71acb4f10f3cffa6b6d89966507af154bac4c784b7e70e8a3027d56afc9ccc18f073ab6423f0813fefe41006a95dede3ec7c9c9b1e09077c0f9a898c03f4697784a1fb4a74241a293faf2eedccb9d5d1b27518a5d760d5e609161f4617c2336cc40a2e65baf669de", 0xaa, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") r1 = gettid() syz_open_procfs(r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, 0x0, 0x0) r3 = gettid() syz_open_procfs(r3, 0x0) gettid() 02:10:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e0000008500000005000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) 02:10:02 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 517.382129][ T9001] loop1: detected capacity change from 0 to 256 [ 517.451809][ T27] audit: type=1800 audit(1689732602.803:260): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048604 res=0 errno=0 02:10:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) 02:10:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 517.528906][ T46] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 517.564189][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.621335][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.628892][ T9013] loop1: detected capacity change from 0 to 256 02:10:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$eJzs3U9LG2kcB/DfaJLN7h6Sw56WhR3YPewpqK9AWSwUPbXk0F7aUhWKCUKFQP/Q1FPvhb6NvpNe+g76Agq91UPplDGTP8hYjSZNkc/n4g/n+T5/xkfHyzy5/1d3f+fgcO/o+Yeo15NYWo/1OE6iGUsx9DIAgOvkOMviUzZwfutaRGSNQV1ZmvvkAIC5KH/+J4ucEgAwZ7fv3N3a2N7evJWm9Yjuq147f/bnXwfXN/biUXRiN1aiEV8ispFBfePm9mZU0lwz/u32e+082b33ruh/42PESX41GtEsz6+mAxP5fq9djd/yfFb8L7IWjfijPL9Wko92Lf77Zzj/r7vRika8fxgH0YmdyLPj/IvVNP0/e/P52clAeT7p99q/nLQby5Z/6A8GAAAAAAAAAAAAAAAAAAAAAIBrrZWOTJ7f0x+eBthqlV8/83yg4oSe/sT5Oitpmg6P8em1qzHIV+LPSlQWt3IAAAAAAAAAAAAAAAAAAAD4eRw+ebr/oNPZfTxlsVXky9sMX+u/TM95sf/2rJ6vWsRyMbVOcoUhhuub0cR+zedzifjr6cf6Oy451lRFjO5PEuc0rl9gk9SKIpli02Yl22/5zFRtRmuv/T7bm5mvuHrBzVad8W/KKcm8/gQBAAAAAAAAAAAAAAAAAACF8Uu/JRePFjAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiA8ef/j4ponv7O6aJfhL/XZrJDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLNvAQAA//9kyWqx") open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) 02:10:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) [ 517.890165][ T9019] loop1: detected capacity change from 0 to 256 02:10:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) 02:10:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) 02:10:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$eJzs3U9LG2kcB/DfaJLN7h6Sw56WhR3YPewpqK9AWSwUPbXk0F7aUhWKCUKFQP/Q1FPvhb6NvpNe+g76Agq91UPplDGTP8hYjSZNkc/n4g/n+T5/xkfHyzy5/1d3f+fgcO/o+Yeo15NYWo/1OE6iGUsx9DIAgOvkOMviUzZwfutaRGSNQV1ZmvvkAIC5KH/+J4ucEgAwZ7fv3N3a2N7evJWm9Yjuq147f/bnXwfXN/biUXRiN1aiEV8ispFBfePm9mZU0lwz/u32e+082b33ruh/42PESX41GtEsz6+mAxP5fq9djd/yfFb8L7IWjfijPL9Wko92Lf77Zzj/r7vRika8fxgH0YmdyLPj/IvVNP0/e/P52clAeT7p99q/nLQby5Z/6A8GAAAAAAAAAAAAAAAAAAAAAIBrrZWOTJ7f0x+eBthqlV8/83yg4oSe/sT5Oitpmg6P8em1qzHIV+LPSlQWt3IAAAAAAAAAAAAAAAAAAAD4eRw+ebr/oNPZfTxlsVXky9sMX+u/TM95sf/2rJ6vWsRyMbVOcoUhhuub0cR+zedzifjr6cf6Oy451lRFjO5PEuc0rl9gk9SKIpli02Yl22/5zFRtRmuv/T7bm5mvuHrBzVad8W/KKcm8/gQBAAAAAAAAAAAAAAAAAACF8Uu/JRePFjAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiA8ef/j4ponv7O6aJfhL/XZrJDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLNvAQAA//9kyWqx") open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) 02:10:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:06 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/167) [ 520.957988][ T9028] loop1: detected capacity change from 0 to 256 02:10:06 executing program 0: timer_create(0x3, &(0x7f0000002200)={0x0, 0x2b, 0x0, @thr={0x0, 0x0}}, &(0x7f0000002240)) 02:10:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) [ 521.038306][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 521.038322][ T27] audit: type=1800 audit(1689732606.383:265): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048607 res=0 errno=0 [ 521.078566][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 521.106036][ T9030] __nla_validate_parse: 411 callbacks suppressed [ 521.106059][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.141429][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.149305][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:06 executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) 02:10:06 executing program 0: syz_clone(0x9d020100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)="b39ba6820944fe0fc7ea64cb454914689d2e8b84912be5af4889b075e71db5596bfc0ece887b36ea3b46bd7a39e9d569cc0a352ecd773f48c17e621fc642d4d9a6f702023b92e5ee25b83ca3b631844b03e090f9968b2ea865258632b7b5ecf5ef49a9e833318bd487371ef55dfea31e90fbf5ed4db6de3c6df821f689a102b92234addaed7baf04000000000000007c74987cea354644a998f3c94af410bfa3c56a7a8fec0a0449d494179e98dfefc875be074b473f82cb1b0c5e6995d54327a391c050c7a50bca2360c8ad") [ 521.168503][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.176609][ T27] audit: type=1804 audit(1689732606.403:266): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/274/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 521.218944][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.272256][ T9030] validate_nla: 139 callbacks suppressed [ 521.272276][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 02:10:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 521.309802][ T27] audit: type=1804 audit(1689732606.403:267): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/274/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 521.357789][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.379392][ T27] audit: type=1800 audit(1689732606.713:268): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1948 res=0 errno=0 [ 521.401876][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.418496][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.435027][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.459940][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.484100][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.535304][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.570940][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.579187][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.597547][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.605848][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.627272][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.637078][ T9030] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.656092][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.666856][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 521.684663][ T9030] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 02:10:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000980)=ANY=[], 0xffffff4d) ftruncate(r0, 0x2000009) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 02:10:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fsopen(&(0x7f0000000200)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='?dev/null\x00', 0x0, r0) 02:10:09 executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) 02:10:09 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:09 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:09 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x10c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@utf8}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(0x0, 0x141042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x8942, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES32=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 02:10:09 executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x145343, 0x0) [ 524.047682][ T27] audit: type=1800 audit(1689732609.393:269): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1968 res=0 errno=0 02:10:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) fchmod(0xffffffffffffffff, 0x0) [ 524.153948][ T27] audit: type=1804 audit(1689732609.493:270): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/275/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 524.199827][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(0x0, 0x145343, 0x0) 02:10:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:09 executing program 0: r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7001, 0x400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r0, &(0x7f0000000040)=0x100000001, 0xd2d) [ 524.234994][ T27] audit: type=1804 audit(1689732609.533:271): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/275/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 524.261406][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.294702][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.370480][ T27] audit: type=1800 audit(1689732609.563:272): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1975 res=0 errno=0 [ 524.405538][ T9077] loop1: detected capacity change from 0 to 256 02:10:10 executing program 3: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x3, 0x70, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x5, {0x7, 0x25, 0x1, 0x80, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x14}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xf8, 0x0, 0x7, 0x90, 0x1f}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x1f, 0x0, 0xee28, 0xf0f, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0xff, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a1fb4b4204e0890209a9080f5fde6e7c"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x9, 0x20}, @ptm_cap={0x3}]}, 0x7, [{0x7c, &(0x7f0000000180)=@string={0x7c, 0x3, "36a5e0e735135e05413ca412f259ad1b21e93c32018ae66160c3b49c771b9ce16adc68e416e5e06119ad4429a3ef2683cf042dfe9c34fbfd2081011ec9028fd8c45103b32f41ab458aace6a3ecc51ae95df8001f78cf8aa59c81ff379735b06d3f8d39090c1ebef866f8fe1da5ba97be0ef6561add7dfbf019a4"}}, {0x7c, &(0x7f0000000200)=@string={0x7c, 0x3, "055f2d13d394daf451038b86b6e88afe92e6ed47ccbffc6029c0dfa4e7e37f5f4ab55c3f21d0b5cf20d546b809735ed54fdcc691d4932be7ee85ecffd0e2d2bd134e92dc4bae19b4824baf8784714015a288c9e0579d51646240af0f72fec8f199c6e649fbe0a95641d693e256f6595c0c2c5b8a1c802e9d1b99"}}, {0x88, &(0x7f0000000280)=@string={0x88, 0x3, "4c32fefbb119fb172a4e213b1961b464fb453c58484d70f6f08afa227b1b2a1be9e5541617aa0c049951428eabd447a39506877415584eacfeb8b705eeeff3bbfc46928e7347f5af781a6f163c2e8ec557d0b652db4f0fa7022bb7b00cea2f059a7c665e4878f6a75f74a7a57549c58279e1f916ef40da17126d1a9bb936dfa2d95efd7c9b50"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x809}}, {0xd3, &(0x7f0000000380)=@string={0xd3, 0x3, "e2f5177cfb379b13a783a84a3829a98e74ffefccf67800a987aea3f5e57b1ece392ce7d329462821e31390b7fbf8998a4ff024d301c29bdd0dd4c1976aa38c77e48ced89353a667721b4a113dfced7b989ab819dd9aff557697d34f43ab6f04aa4e6857e2eacd81e99b7fee8aabb9db276852003129791b6bc10e850928afa32f06b4f911c8377f449bc9b1f9c3d0cfd77df5fd3c15caa1c84429d864f6159aeec8d9c5bec96bb34251212f761f6017148cf1ff88fb2e04c51c5c2c9ec18d83047fd24aff8d37709f0dc8e75963911636e"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) 02:10:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x810c94, &(0x7f0000000480)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@fat=@check_strict}, {@shortname_winnt}, {@fat=@usefree}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 02:10:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) fchmod(0xffffffffffffffff, 0x0) 02:10:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(0x0, 0x145343, 0x0) 02:10:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:10 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:10 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRES8], 0x78}}, {{&(0x7f0000001600)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x4084) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:10 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) [ 525.158195][ T9087] loop1: detected capacity change from 0 to 256 02:10:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$eJzs3U9LG2kcB/DfaJLN7h6Sw56WhR3YPewpqK9AWSwUPbXk0F7aUhWKCUKFQP/Q1FPvhb6NvpNe+g76Agq91UPplDGTP8hYjSZNkc/n4g/n+T5/xkfHyzy5/1d3f+fgcO/o+Yeo15NYWo/1OE6iGUsx9DIAgOvkOMviUzZwfutaRGSNQV1ZmvvkAIC5KH/+J4ucEgAwZ7fv3N3a2N7evJWm9Yjuq147f/bnXwfXN/biUXRiN1aiEV8ispFBfePm9mZU0lwz/u32e+082b33ruh/42PESX41GtEsz6+mAxP5fq9djd/yfFb8L7IWjfijPL9Wko92Lf77Zzj/r7vRika8fxgH0YmdyLPj/IvVNP0/e/P52clAeT7p99q/nLQby5Z/6A8GAAAAAAAAAAAAAAAAAAAAAIBrrZWOTJ7f0x+eBthqlV8/83yg4oSe/sT5Oitpmg6P8em1qzHIV+LPSlQWt3IAAAAAAAAAAAAAAAAAAAD4eRw+ebr/oNPZfTxlsVXky9sMX+u/TM95sf/2rJ6vWsRyMbVOcoUhhuub0cR+zedzifjr6cf6Oy451lRFjO5PEuc0rl9gk9SKIpli02Yl22/5zFRtRmuv/T7bm5mvuHrBzVad8W/KKcm8/gQBAAAAAAAAAAAAAAAAAACF8Uu/JRePFjAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFiA8ef/j4ponv7O6aJfhL/XZrJDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLNvAQAA//9kyWqx") open(0x0, 0x145343, 0x0) [ 525.261331][ T27] audit: type=1804 audit(1689732610.613:273): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/276/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 02:10:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) [ 525.315619][ T963] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 525.366677][ T9096] loop1: detected capacity change from 0 to 256 [ 525.375816][ T27] audit: type=1804 audit(1689732610.653:274): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/276/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 525.402171][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:10:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 525.434365][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.499607][ T3897] usb 4-1: new high-speed USB device number 6 using dummy_hcd 02:10:10 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80, 0x14}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x18, &(0x7f00000000c0)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9}]}, 0x4, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x3, &(0x7f0000000380)=@string={0x3, 0x3, "e2"}}]}) [ 525.553580][ T9101] loop1: detected capacity change from 0 to 256 [ 525.749753][ T3897] usb 4-1: Using ep0 maxpacket: 8 [ 525.869666][ T3897] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 525.878413][ T3897] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 525.895273][ T3897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.059760][ T3897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.068861][ T3897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.082076][ T3897] usb 4-1: Product: ㉌ﯾᦱ៻个㬡愙撴䗻堼䵈諰⋺᭻ᬪᙔꨗЌ写蹂풫ꍇڕ璇堕걎룾ַ믳䛼躒䝳꿵᩸ᙯ⸼얎큗劶俛꜏⬂낷ԯ粚幦硈ꟶ瑟ꖧ䥵苅᛹䃯៚洒鬚㚹ꋟ廙糽傛 [ 526.107987][ T3897] usb 4-1: Manufacturer: 弅ጭ铓͑蚋ﺊ䟭뿌惼쀩ꓟ彿땊㽜퀡쾵픠롆猉핞釆鏔藮￬뷒专깋됙䮂螯熄ᕀ袢鵗摑䁢ྯﹲ욙䧦嚩홁屙Ⰼ詛耜鴮餛 [ 526.138259][ T3897] usb 4-1: SerialNumber: 㐁 [ 526.499766][ T3897] usb 4-1: 0:2 : does not exist [ 526.518269][ T3897] usb 4-1: USB disconnect, device number 6 [ 526.547818][ T3705] udevd[3705]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 02:10:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2902, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './bus'}, 0x9) 02:10:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x10c94, &(0x7f0000000080)={[{@uni_xlate}, {@numtail}, {@fat=@usefree}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000040)='./file0\x00', 0x183342, 0x0) 02:10:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 02:10:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:12 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:12 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201}) [ 526.948880][ T9112] loop1: detected capacity change from 0 to 256 [ 527.014723][ T27] audit: type=1804 audit(1689732612.363:275): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/277/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 527.075475][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:12 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201}) 02:10:12 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0xb, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 02:10:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0/file0\x00', 0x10c85, &(0x7f0000000100), 0x1, 0x25e, &(0x7f0000000200)="$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") sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="100025bd7000fedbdf2502e5ffff3b001580060001000a000000060005004e240000050002000800000008000700", @ANYRES32=0x0, @ANYBLOB="05000200010000000600010002000000060001000a0000000800020002000000080003000800000008000200040000000800020008000000"], 0x70}}, 0x40) [ 527.121314][ T27] audit: type=1804 audit(1689732612.433:276): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/277/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 527.156974][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:10:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:10:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x210c94, &(0x7f0000000040)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@uni_xlate}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_win95}]}, 0x1, 0x25e, &(0x7f0000000200)="$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") open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 527.185731][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:12 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0xb, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 527.261545][ T9120] device wireguard0 entered promiscuous mode 02:10:12 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201}) [ 527.344293][ T9126] loop1: detected capacity change from 0 to 256 [ 527.360986][ T9127] loop3: detected capacity change from 0 to 256 02:10:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0xd0b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) [ 527.490337][ T9130] device wireguard1 entered promiscuous mode 02:10:12 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000200)=@string={0x2}}, {0x0, 0x0}]}) [ 527.550771][ T27] audit: type=1804 audit(1689732612.903:277): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/278/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 527.571461][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:13 executing program 0: syz_clone(0x9d020100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 527.643800][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.652021][ T27] audit: type=1804 audit(1689732612.903:278): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/278/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 527.705537][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:13 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100), 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:13 executing program 1: r0 = getpid() getpgid(r0) syz_clone(0xc52c0200, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") gettid() write$nbd(0xffffffffffffffff, 0x0, 0x0) gettid() gettid() 02:10:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='cpu.idle\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x1, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) 02:10:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x108000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x40}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='cpu.idle\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66660f3831030f795122f30f0966f30f53920e000f093edfcc0f30f30f019f0e000f3566b9b20b00000f32", 0x2b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000, 0x200040}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:15 executing program 3: r0 = getpid() getpgid(r0) syz_clone(0xc52c0200, &(0x7f0000000000)="fb8beae89ba1de998c06d6d042cf3a6cd3630d94d7dd06fcf0ef4bf0527a61fce874c92fb83f091066565477446cadf80f32525bdf606120581718215c7cf8780bae71acb4f10f3cffa6b6d89966507af154bac4c784b7e70e8a3027d56afc9ccc18f073ab6423f0813fefe41006a95dede3ec7c9c9b1e09077c0f9a898c03f4697784a1fb4a74241a293faf2eedccb9d5d1b27518a5d760d5e609161f4617c2336cc40a2e65baf669de", 0xaa, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") gettid() write$nbd(0xffffffffffffffff, 0x0, 0x0) gettid() gettid() 02:10:15 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, &(0x7f0000000080)) 02:10:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:10:15 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}]}) 02:10:15 executing program 1: syz_clone(0xc52c0200, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) gettid() 02:10:15 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100), 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:15 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) writev(r0, &(0x7f0000002300)=[{&(0x7f0000000080)="b7", 0x1}], 0x1) [ 530.478675][ T27] audit: type=1804 audit(1689732615.823:279): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/279/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 530.506648][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 530.537146][ T27] audit: type=1804 audit(1689732615.823:280): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/279/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 530.563414][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:10:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 530.584816][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x1, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 02:10:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x5) [ 530.789984][ T27] audit: type=1804 audit(1689732616.133:281): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/280/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 530.818336][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 530.834984][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.844165][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.852296][ T27] audit: type=1804 audit(1689732616.143:282): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/280/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 02:10:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 02:10:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$eJzs3cFqE1sYB/BvkrQ3vXeRLO5KBAd04aq0fYIGqSB2IZUs1EUttgVJQsFCoFVMu/IJfCw3voEPIHSnCyEyTdK0MNEE0kTq77fJgXP+852Zc0JWc/Lydquxe3C4f/ruS5TLSRTWYz05i6hGIQZOAgC4Sba2dmpn3Z7JkqXCdc0JALhe37vdGOP3f2mGUwIArtnTZ88f1zY3N7bStBzR+tCuJ9H77PXX9uN1NGMvVqISPyK6F3rth482N6KUZqpxr9Vp17Nka/tT//q1rxHn+dWoRDU/v5r2XMp32vWF+Ldffz3Lr0Ul/s/Pr+Xko74Y9+9emv9yVOLzqziIZuxGlh3m36+m6YPux29vX2QzzvJJp13/53zcULc488UBAAAAAAAAAAAAAAAAAAAAAODGWk7TNO2fqNO5cv5OsXPev5wOVK+ez9PLjzofqHPpfJ2VrETSGz/Ml+JWKUrzvHcAAAAAAAAAAAAAAAAAAAD4UxweHTd2ms29N1NtDF7rzxuT9vumXnSsRhQH5ZOImVcf0VjK5jObWndi0lrJyUTrFYWj48ZgdzV2kvhNqpy7ScZobD/55ZhuzvYrjrzg4pQe7+J/012vJCIWLh7m6MHZDlqY8jcFAAAAAAAAAAAAAAAAAACYseFLvzmdp3OYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMwfD//ydodPrhMVNzvkUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Aj8DAAD//+7Ecro=") creat(&(0x7f0000000080)='./file0\x00', 0x0) 02:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x1000, 0x108000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x40}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66660f3831030f795122f30f0966f30f53920e000f093edfcc0f30f30f019f0e000f3566b9b20b00000f32", 0x2b}], 0x1, 0x1, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000, 0x200040}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 02:10:16 executing program 1: syz_clone(0xc52c0200, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) gettid() 02:10:16 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100), 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000380)={0xcc, 0x0, 0x1}) 02:10:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00c8d9"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000b80)) [ 531.603702][ T9195] loop3: detected capacity change from 0 to 256 [ 531.627888][ T9195] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 02:10:17 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 02:10:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) 02:10:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$eJzs3cFqE1sYB/BvkrQ3vXeRLO5KBAd04aq0fYIGqSB2IZUs1EUttgVJQsFCoFVMu/IJfCw3voEPIHSnCyEyTdK0MNEE0kTq77fJgXP+852Zc0JWc/Lydquxe3C4f/ruS5TLSRTWYz05i6hGIQZOAgC4Sba2dmpn3Z7JkqXCdc0JALhe37vdGOP3f2mGUwIArtnTZ88f1zY3N7bStBzR+tCuJ9H77PXX9uN1NGMvVqISPyK6F3rth482N6KUZqpxr9Vp17Nka/tT//q1rxHn+dWoRDU/v5r2XMp32vWF+Ldffz3Lr0Ul/s/Pr+Xko74Y9+9emv9yVOLzqziIZuxGlh3m36+m6YPux29vX2QzzvJJp13/53zcULc488UBAAAAAAAAAAAAAAAAAAAAAODGWk7TNO2fqNO5cv5OsXPev5wOVK+ez9PLjzofqHPpfJ2VrETSGz/Ml+JWKUrzvHcAAAAAAAAAAAAAAAAAAAD4UxweHTd2ms29N1NtDF7rzxuT9vumXnSsRhQH5ZOImVcf0VjK5jObWndi0lrJyUTrFYWj48ZgdzV2kvhNqpy7ScZobD/55ZhuzvYrjrzg4pQe7+J/012vJCIWLh7m6MHZDlqY8jcFAAAAAAAAAAAAAAAAAACYseFLvzmdp3OYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMwfD//ydodPrhMVNzvkUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Aj8DAAD//+7Ecro=") creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 531.788832][ T3624] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 531.832550][ T27] audit: type=1804 audit(1689732617.183:283): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/281/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 531.873146][ T4617] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:17 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usbip_server_init(0x5) [ 531.915783][ T4617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.938956][ T4617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.959801][ T27] audit: type=1804 audit(1689732617.213:284): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/281/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 532.055875][ T9208] loop3: detected capacity change from 0 to 256 [ 532.075443][ T9208] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 02:10:17 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1f, 0x9, 0x1}]}) setregid(0xee01, 0x0) 02:10:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:10:17 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 532.237862][ T27] audit: type=1326 audit(1689732617.583:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe624c7cb29 code=0x0 [ 532.296908][ T3624] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 532.398466][ T27] audit: type=1804 audit(1689732617.743:286): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/282/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 532.417163][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 532.476441][ T27] audit: type=1804 audit(1689732617.753:287): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/282/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 532.503154][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.520435][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:18 executing program 1: syz_clone(0xc52c0200, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) gettid() 02:10:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) 02:10:18 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:18 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffe}) 02:10:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r7, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 02:10:18 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0x60, 0x8c, 0x40, 0x50d, 0x5055, 0x4063, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x2a, 0x5b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(0x0, 0x0) 02:10:18 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:18 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 532.918422][ T9224] loop3: detected capacity change from 0 to 256 [ 532.940236][ T27] audit: type=1804 audit(1689732618.293:288): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/283/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 532.990696][ T4586] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 533.006943][ T9224] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 533.035433][ T27] audit: type=1804 audit(1689732618.313:289): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/283/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 533.072500][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:10:18 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x1}, 0x8) [ 533.094036][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) 02:10:18 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='cpu.idle\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x1, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) [ 533.208236][ T3624] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 533.401564][ T9243] loop3: detected capacity change from 0 to 256 [ 533.414257][ T9243] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 533.525463][ T3624] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 02:10:19 executing program 1: syz_clone(0xc52c0200, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) gettid() 02:10:19 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$usbip_server(r0, 0x0, 0x0) 02:10:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:19 executing program 4: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0xc0045878, 0x0) 02:10:19 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) 02:10:19 executing program 4: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) memfd_create(&(0x7f0000000040)=']^\\:\xc4@\'$&\x00', 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) syz_usbip_server_init(0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) 02:10:19 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x20, 0x2, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 02:10:19 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:19 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 534.078791][ T27] audit: type=1804 audit(1689732619.423:290): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/284/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 534.163653][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 534.190811][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:10:19 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 534.224093][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.238763][ T27] audit: type=1804 audit(1689732619.463:291): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/284/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 02:10:19 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:20 executing program 1: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000012c0)='wg0\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xa001800f, 0x0, 0x0, 0x0, 0x0, 0xffeb}, 0xfffffdef}], 0x4000095, 0x3f000000) 02:10:20 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) 02:10:20 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:20 executing program 0: quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000c00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:10:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000011c0)={'ip6_vti0\x00', 0x0}) 02:10:20 executing program 4: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 02:10:20 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00055a6f46449f"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 02:10:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$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") creat(0x0, 0x0) 02:10:20 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 535.459888][ T27] audit: type=1804 audit(1689732620.783:292): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/285/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 535.524256][ T4598] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 02:10:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00055a6f46449f"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) [ 535.581929][ T27] audit: type=1804 audit(1689732620.843:293): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/285/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 535.610296][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.624400][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.650733][ T9294] loop3: detected capacity change from 0 to 256 [ 535.683107][ T9294] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) 02:10:21 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00055a6f46449f440f105889c8b5dc2509a9"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 02:10:21 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:21 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 02:10:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$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") creat(0x0, 0x0) 02:10:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00055a6f46449f"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 02:10:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00055a6f46449f"], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) [ 536.467504][ T9304] loop3: detected capacity change from 0 to 256 [ 536.499940][ T9304] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 536.591566][ T27] audit: type=1804 audit(1689732621.943:294): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/286/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 536.635669][ T3624] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 536.703045][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.751826][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:10:22 executing program 4: r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) 02:10:22 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@shortname_mixed}, {@utf8no}]}, 0x1, 0x24e, &(0x7f0000000180)="$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") creat(0x0, 0x0) 02:10:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 02:10:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x84, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x0, 0x80000001}, [@TCA_NETEM_CORR={0x10, 0x1, {0x100009c7}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x5}, @TCA_NETEM_DELAY_DIST={0xe, 0x2, "eef18b580e86e3c24293"}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x84}}, 0x4004800) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) accept$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000400)="0503460008003e00000002000800", 0xe, 0x0, 0x0, 0x0) 02:10:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, r8, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 536.891765][ T9314] loop3: detected capacity change from 0 to 256 02:10:22 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) [ 536.940071][ T9318] __nla_validate_parse: 283 callbacks suppressed [ 536.940094][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 536.940869][ T9314] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 537.003287][ T9324] [ 537.005695][ T9324] ===================================================== [ 537.012650][ T9324] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 537.020300][ T9324] 6.1.38-syzkaller #0 Not tainted [ 537.025344][ T9324] ----------------------------------------------------- [ 537.032299][ T9324] syz-executor.1/9324 [HC0[0]:SC0[2]:HE1:SE0] is trying to acquire: [ 537.040355][ T9324] ffffffff8d0023a0 (fs_reclaim){+.+.}-{0:0}, at: slab_pre_alloc_hook+0x2a/0x2a0 [ 537.049633][ T9324] [ 537.049633][ T9324] and this task is already holding: [ 537.057027][ T9324] ffff888078c0d108 (&sch->q.lock){+.-.}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 537.065979][ T9324] which would create a new lock dependency: [ 537.071900][ T9324] (&sch->q.lock){+.-.}-{2:2} -> (fs_reclaim){+.+.}-{0:0} [ 537.079106][ T9324] [ 537.079106][ T9324] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 537.088591][ T9324] (&sch->q.lock){+.-.}-{2:2} [ 537.088630][ T9324] [ 537.088630][ T9324] ... which became SOFTIRQ-irq-safe at: [ 537.101060][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.105811][ T9324] _raw_spin_lock+0x2a/0x40 [ 537.110552][ T9324] __dev_queue_xmit+0xd50/0x3c90 [ 537.115672][ T9324] ip6_finish_output2+0xf9f/0x15b0 [ 537.121013][ T9324] ip6_finish_output+0x6ac/0xa80 [ 537.126050][ T9324] ndisc_send_skb+0xb04/0x1380 [ 537.131073][ T9324] addrconf_rs_timer+0x357/0x610 [ 537.136136][ T9324] call_timer_fn+0x19e/0x6b0 [ 537.140926][ T9324] __run_timers+0x67c/0x890 [ 537.145588][ T9324] run_timer_softirq+0x63/0xf0 [ 537.150454][ T9324] __do_softirq+0x2e9/0xa4c [ 537.155061][ T9324] __irq_exit_rcu+0x155/0x240 [ 537.159902][ T9324] irq_exit_rcu+0x5/0x20 [ 537.164512][ T9324] sysvec_apic_timer_interrupt+0x91/0xb0 [ 537.170243][ T9324] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 537.176452][ T9324] lock_acquire+0x26f/0x5a0 [ 537.181052][ T9324] rcu_lock_acquire+0x2a/0x30 [ 537.185920][ T9324] inet_twsk_purge+0x124/0xad0 [ 537.190809][ T9324] cleanup_net+0x763/0xb60 [ 537.195344][ T9324] process_one_work+0x8aa/0x11f0 [ 537.200422][ T9324] worker_thread+0xa5f/0x1210 [ 537.205192][ T9324] kthread+0x26e/0x300 [ 537.209384][ T9324] ret_from_fork+0x1f/0x30 [ 537.213996][ T9324] [ 537.213996][ T9324] to a SOFTIRQ-irq-unsafe lock: [ 537.221014][ T9324] (fs_reclaim){+.+.}-{0:0} [ 537.221043][ T9324] [ 537.221043][ T9324] ... which became SOFTIRQ-irq-unsafe at: [ 537.233421][ T9324] ... [ 537.233429][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.240692][ T9324] fs_reclaim_acquire+0x83/0x120 [ 537.245760][ T9324] slab_pre_alloc_hook+0x2a/0x2a0 [ 537.250972][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 537.256440][ T9324] kmalloc_trace+0x26/0xe0 [ 537.260993][ T9324] alloc_workqueue_attrs+0x46/0xc0 [ 537.266196][ T9324] wq_numa_init+0x122/0x4b0 [ 537.270838][ T9324] workqueue_init+0x22/0x59d [ 537.275532][ T9324] kernel_init_freeable+0x40a/0x61f [ 537.280932][ T9324] kernel_init+0x19/0x290 [ 537.285355][ T9324] ret_from_fork+0x1f/0x30 [ 537.289886][ T9324] [ 537.289886][ T9324] other info that might help us debug this: [ 537.289886][ T9324] [ 537.300115][ T9324] Possible interrupt unsafe locking scenario: [ 537.300115][ T9324] [ 537.308435][ T9324] CPU0 CPU1 [ 537.313798][ T9324] ---- ---- [ 537.319160][ T9324] lock(fs_reclaim); [ 537.323149][ T9324] local_irq_disable(); [ 537.329906][ T9324] lock(&sch->q.lock); [ 537.336587][ T9324] lock(fs_reclaim); [ 537.343100][ T9324] [ 537.346572][ T9324] lock(&sch->q.lock); [ 537.350905][ T9324] [ 537.350905][ T9324] *** DEADLOCK *** [ 537.350905][ T9324] [ 537.359221][ T9324] 2 locks held by syz-executor.1/9324: [ 537.364769][ T9324] #0: ffffffff8e096b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x720/0xf00 [ 537.374247][ T9324] #1: ffff888078c0d108 (&sch->q.lock){+.-.}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 537.383496][ T9324] [ 537.383496][ T9324] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 537.393902][ T9324] -> (&sch->q.lock){+.-.}-{2:2} { [ 537.398976][ T9324] HARDIRQ-ON-W at: [ 537.402960][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.409120][ T9324] _raw_spin_lock_bh+0x31/0x40 [ 537.415543][ T9324] dev_reset_queue+0x131/0x1a0 [ 537.422037][ T9324] dev_deactivate_many+0x525/0xaf0 [ 537.428822][ T9324] dev_deactivate+0x177/0x270 [ 537.435159][ T9324] linkwatch_do_dev+0x104/0x160 [ 537.441753][ T9324] __linkwatch_run_queue+0x448/0x6b0 [ 537.448694][ T9324] linkwatch_event+0x48/0x50 [ 537.454937][ T9324] process_one_work+0x8aa/0x11f0 [ 537.461535][ T9324] worker_thread+0xa5f/0x1210 [ 537.467870][ T9324] kthread+0x26e/0x300 [ 537.473615][ T9324] ret_from_fork+0x1f/0x30 [ 537.479696][ T9324] IN-SOFTIRQ-W at: [ 537.483676][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.489830][ T9324] _raw_spin_lock+0x2a/0x40 [ 537.495994][ T9324] __dev_queue_xmit+0xd50/0x3c90 [ 537.502692][ T9324] ip6_finish_output2+0xf9f/0x15b0 [ 537.509492][ T9324] ip6_finish_output+0x6ac/0xa80 [ 537.516088][ T9324] ndisc_send_skb+0xb04/0x1380 [ 537.522515][ T9324] addrconf_rs_timer+0x357/0x610 [ 537.529129][ T9324] call_timer_fn+0x19e/0x6b0 [ 537.535387][ T9324] __run_timers+0x67c/0x890 [ 537.541640][ T9324] run_timer_softirq+0x63/0xf0 [ 537.548062][ T9324] __do_softirq+0x2e9/0xa4c [ 537.554226][ T9324] __irq_exit_rcu+0x155/0x240 [ 537.560555][ T9324] irq_exit_rcu+0x5/0x20 [ 537.566451][ T9324] sysvec_apic_timer_interrupt+0x91/0xb0 [ 537.573738][ T9324] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 537.581382][ T9324] lock_acquire+0x26f/0x5a0 [ 537.587552][ T9324] rcu_lock_acquire+0x2a/0x30 [ 537.593916][ T9324] inet_twsk_purge+0x124/0xad0 [ 537.600358][ T9324] cleanup_net+0x763/0xb60 [ 537.606440][ T9324] process_one_work+0x8aa/0x11f0 [ 537.613040][ T9324] worker_thread+0xa5f/0x1210 [ 537.619378][ T9324] kthread+0x26e/0x300 [ 537.625100][ T9324] ret_from_fork+0x1f/0x30 [ 537.631185][ T9324] INITIAL USE at: [ 537.635086][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.641158][ T9324] _raw_spin_lock_bh+0x31/0x40 [ 537.647493][ T9324] dev_reset_queue+0x131/0x1a0 [ 537.653827][ T9324] dev_deactivate_many+0x525/0xaf0 [ 537.660508][ T9324] dev_deactivate+0x177/0x270 [ 537.666773][ T9324] linkwatch_do_dev+0x104/0x160 [ 537.673191][ T9324] __linkwatch_run_queue+0x448/0x6b0 [ 537.680068][ T9324] linkwatch_event+0x48/0x50 [ 537.686225][ T9324] process_one_work+0x8aa/0x11f0 [ 537.692737][ T9324] worker_thread+0xa5f/0x1210 [ 537.698987][ T9324] kthread+0x26e/0x300 [ 537.704621][ T9324] ret_from_fork+0x1f/0x30 [ 537.710612][ T9324] } [ 537.713110][ T9324] ... key at: [] qdisc_alloc.__key+0x0/0x20 [ 537.721137][ T9324] [ 537.721137][ T9324] the dependencies between the lock to be acquired [ 537.721146][ T9324] and SOFTIRQ-irq-unsafe lock: [ 537.734670][ T9324] -> (fs_reclaim){+.+.}-{0:0} { [ 537.739549][ T9324] HARDIRQ-ON-W at: [ 537.743531][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.749708][ T9324] fs_reclaim_acquire+0x83/0x120 [ 537.756301][ T9324] slab_pre_alloc_hook+0x2a/0x2a0 [ 537.762983][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 537.770011][ T9324] kmalloc_trace+0x26/0xe0 [ 537.776079][ T9324] alloc_workqueue_attrs+0x46/0xc0 [ 537.782846][ T9324] wq_numa_init+0x122/0x4b0 [ 537.789016][ T9324] workqueue_init+0x22/0x59d [ 537.795269][ T9324] kernel_init_freeable+0x40a/0x61f [ 537.802130][ T9324] kernel_init+0x19/0x290 [ 537.808127][ T9324] ret_from_fork+0x1f/0x30 [ 537.814227][ T9324] SOFTIRQ-ON-W at: [ 537.818258][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.824443][ T9324] fs_reclaim_acquire+0x83/0x120 [ 537.831037][ T9324] slab_pre_alloc_hook+0x2a/0x2a0 [ 537.837743][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 537.844776][ T9324] kmalloc_trace+0x26/0xe0 [ 537.850846][ T9324] alloc_workqueue_attrs+0x46/0xc0 [ 537.857612][ T9324] wq_numa_init+0x122/0x4b0 [ 537.863788][ T9324] workqueue_init+0x22/0x59d [ 537.870048][ T9324] kernel_init_freeable+0x40a/0x61f [ 537.876907][ T9324] kernel_init+0x19/0x290 [ 537.882901][ T9324] ret_from_fork+0x1f/0x30 [ 537.889007][ T9324] INITIAL USE at: [ 537.892993][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.899077][ T9324] fs_reclaim_acquire+0x83/0x120 [ 537.905581][ T9324] slab_pre_alloc_hook+0x2a/0x2a0 [ 537.912178][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 537.919140][ T9324] kmalloc_trace+0x26/0xe0 [ 537.925120][ T9324] alloc_workqueue_attrs+0x46/0xc0 [ 537.931799][ T9324] wq_numa_init+0x122/0x4b0 [ 537.937878][ T9324] workqueue_init+0x22/0x59d [ 537.944045][ T9324] kernel_init_freeable+0x40a/0x61f [ 537.950821][ T9324] kernel_init+0x19/0x290 [ 537.956719][ T9324] ret_from_fork+0x1f/0x30 [ 537.962720][ T9324] } [ 537.965219][ T9324] ... key at: [] __fs_reclaim_map+0x0/0xe0 [ 537.973200][ T9324] ... acquired at: [ 537.977002][ T9324] lock_acquire+0x1f8/0x5a0 [ 537.981682][ T9324] fs_reclaim_acquire+0x83/0x120 [ 537.986793][ T9324] slab_pre_alloc_hook+0x2a/0x2a0 [ 537.991996][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 537.997548][ T9324] __kmalloc_node+0xa2/0x230 [ 538.002324][ T9324] kvmalloc_node+0x6e/0x180 [ 538.007084][ T9324] get_dist_table+0x91/0x380 [ 538.011871][ T9324] netem_change+0x947/0x1ea0 [ 538.016649][ T9324] netem_init+0x58/0xb0 [ 538.020990][ T9324] qdisc_create+0x8a1/0x1220 [ 538.025766][ T9324] tc_modify_qdisc+0x9e0/0x1da0 [ 538.030802][ T9324] rtnetlink_rcv_msg+0x776/0xf00 [ 538.035916][ T9324] netlink_rcv_skb+0x1cd/0x410 [ 538.041033][ T9324] netlink_unicast+0x7bf/0x990 [ 538.046004][ T9324] netlink_sendmsg+0xa26/0xd60 [ 538.050962][ T9324] ____sys_sendmsg+0x59e/0x8f0 [ 538.055990][ T9324] __sys_sendmsg+0x2a9/0x390 [ 538.060794][ T9324] do_syscall_64+0x3d/0xb0 [ 538.065447][ T9324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.071547][ T9324] [ 538.073876][ T9324] [ 538.073876][ T9324] stack backtrace: [ 538.079763][ T9324] CPU: 1 PID: 9324 Comm: syz-executor.1 Not tainted 6.1.38-syzkaller #0 [ 538.088093][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 538.098238][ T9324] Call Trace: [ 538.101524][ T9324] [ 538.104457][ T9324] dump_stack_lvl+0x1e3/0x2cb [ 538.109151][ T9324] ? nf_tcp_handle_invalid+0x642/0x642 [ 538.114622][ T9324] ? panic+0x75d/0x75d [ 538.118709][ T9324] ? print_shortest_lock_dependencies+0xee/0x150 [ 538.125076][ T9324] validate_chain+0x4d2e/0x58e0 [ 538.130033][ T9324] ? reacquire_held_locks+0x660/0x660 [ 538.135414][ T9324] ? reacquire_held_locks+0x660/0x660 [ 538.140794][ T9324] ? validate_chain+0x115/0x58e0 [ 538.145747][ T9324] ? unwind_next_frame+0x1a3f/0x2220 [ 538.151069][ T9324] ? mark_lock+0x9a/0x340 [ 538.155408][ T9324] __lock_acquire+0x125b/0x1f80 [ 538.160271][ T9324] lock_acquire+0x1f8/0x5a0 [ 538.164789][ T9324] ? slab_pre_alloc_hook+0x2a/0x2a0 [ 538.170015][ T9324] ? read_lock_is_recursive+0x10/0x10 [ 538.175413][ T9324] ? __lock_acquire+0x125b/0x1f80 [ 538.180472][ T9324] fs_reclaim_acquire+0x83/0x120 [ 538.185589][ T9324] ? slab_pre_alloc_hook+0x2a/0x2a0 [ 538.190801][ T9324] slab_pre_alloc_hook+0x2a/0x2a0 [ 538.195843][ T9324] ? kvmalloc_node+0x6e/0x180 [ 538.200526][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 538.205915][ T9324] ? kvmalloc_node+0x6e/0x180 [ 538.210597][ T9324] __kmalloc_node+0xa2/0x230 [ 538.215198][ T9324] kvmalloc_node+0x6e/0x180 [ 538.219707][ T9324] get_dist_table+0x91/0x380 [ 538.224315][ T9324] netem_change+0x947/0x1ea0 [ 538.228935][ T9324] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 538.234922][ T9324] ? netem_destroy+0xb0/0xb0 [ 538.239525][ T9324] ? do_raw_spin_unlock+0x137/0x8a0 [ 538.244744][ T9324] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 538.250650][ T9324] ? lockdep_hardirqs_on+0x94/0x130 [ 538.255862][ T9324] ? memset+0x1f/0x40 [ 538.259909][ T9324] ? __hrtimer_init+0x181/0x260 [ 538.264800][ T9324] netem_init+0x58/0xb0 [ 538.268965][ T9324] ? qdisc_peek_dequeued+0x220/0x220 [ 538.274282][ T9324] qdisc_create+0x8a1/0x1220 [ 538.278892][ T9324] ? qdisc_notify+0x390/0x390 [ 538.283586][ T9324] tc_modify_qdisc+0x9e0/0x1da0 [ 538.288454][ T9324] ? rcu_lock_release+0x20/0x20 [ 538.293417][ T9324] ? rcu_lock_release+0x20/0x20 [ 538.298279][ T9324] rtnetlink_rcv_msg+0x776/0xf00 [ 538.303230][ T9324] ? print_irqtrace_events+0x210/0x210 [ 538.308696][ T9324] ? rtnetlink_bind+0x80/0x80 [ 538.313379][ T9324] ? __local_bh_enable_ip+0x164/0x1f0 [ 538.318755][ T9324] ? local_bh_enable+0x5/0x20 [ 538.323444][ T9324] ? _local_bh_enable+0xa0/0xa0 [ 538.328314][ T9324] ? __dev_queue_xmit+0x177a/0x3c90 [ 538.333533][ T9324] ? netdev_core_pick_tx+0x320/0x320 [ 538.338828][ T9324] ? ref_tracker_free+0x638/0x7d0 [ 538.343914][ T9324] ? memcpy+0x3c/0x60 [ 538.347904][ T9324] ? refcount_inc+0x80/0x80 [ 538.352442][ T9324] netlink_rcv_skb+0x1cd/0x410 [ 538.357217][ T9324] ? rtnetlink_bind+0x80/0x80 [ 538.361899][ T9324] ? netlink_ack+0xe60/0xe60 [ 538.366500][ T9324] netlink_unicast+0x7bf/0x990 [ 538.371296][ T9324] ? netlink_detachskb+0x90/0x90 [ 538.376233][ T9324] ? __virt_addr_valid+0x22b/0x2e0 [ 538.381360][ T9324] ? __phys_addr_symbol+0x2b/0x70 [ 538.386394][ T9324] ? __check_object_size+0x4dd/0xa30 [ 538.391751][ T9324] ? bpf_lsm_netlink_send+0x5/0x10 [ 538.396908][ T9324] netlink_sendmsg+0xa26/0xd60 [ 538.401684][ T9324] ? netlink_getsockopt+0x5b0/0x5b0 [ 538.406912][ T9324] ? aa_sock_msg_perm+0x91/0x150 [ 538.411891][ T9324] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 538.417182][ T9324] ? security_socket_sendmsg+0x7d/0xa0 [ 538.422722][ T9324] ? netlink_getsockopt+0x5b0/0x5b0 [ 538.428035][ T9324] ____sys_sendmsg+0x59e/0x8f0 [ 538.432820][ T9324] ? __sys_sendmsg_sock+0x30/0x30 [ 538.437866][ T9324] __sys_sendmsg+0x2a9/0x390 [ 538.442471][ T9324] ? ____sys_sendmsg+0x8f0/0x8f0 [ 538.447438][ T9324] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 538.453431][ T9324] ? syscall_enter_from_user_mode+0x2e/0x220 [ 538.459418][ T9324] ? lockdep_hardirqs_on+0x94/0x130 [ 538.464628][ T9324] ? syscall_enter_from_user_mode+0x2e/0x220 [ 538.470620][ T9324] do_syscall_64+0x3d/0xb0 [ 538.475055][ T9324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.480964][ T9324] RIP: 0033:0x7f310387cb29 [ 538.485384][ T9324] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 538.504996][ T9324] RSP: 002b:00007f31045620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.513419][ T9324] RAX: ffffffffffffffda RBX: 00007f310399c050 RCX: 00007f310387cb29 [ 538.521402][ T9324] RDX: 0000000004004800 RSI: 0000000020000440 RDI: 0000000000000003 [ 538.529376][ T9324] RBP: 00007f31038c847a R08: 0000000000000000 R09: 0000000000000000 [ 538.537364][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.545338][ T9324] R13: 000000000000006e R14: 00007f310399c050 R15: 00007ffc633e9338 [ 538.553327][ T9324] [ 538.556552][ T9324] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274 [ 538.566184][ T9324] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9324, name: syz-executor.1 [ 538.575635][ T9324] preempt_count: 201, expected: 0 [ 538.580728][ T9324] RCU nest depth: 0, expected: 0 [ 538.585695][ T9324] INFO: lockdep is turned off. [ 538.590522][ T9324] Preemption disabled at: [ 538.590535][ T9324] [<0000000000000000>] 0x0 [ 538.599327][ T9324] CPU: 1 PID: 9324 Comm: syz-executor.1 Not tainted 6.1.38-syzkaller #0 [ 538.607689][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 538.617780][ T9324] Call Trace: [ 538.621110][ T9324] [ 538.624051][ T9324] dump_stack_lvl+0x1e3/0x2cb [ 538.628754][ T9324] ? nf_tcp_handle_invalid+0x642/0x642 [ 538.634228][ T9324] ? panic+0x75d/0x75d [ 538.638313][ T9324] ? rcu_is_watching+0x11/0xb0 [ 538.643171][ T9324] __might_resched+0x5cb/0x780 [ 538.647991][ T9324] ? __might_sleep+0xb0/0xb0 [ 538.652605][ T9324] slab_pre_alloc_hook+0x4a/0x2a0 [ 538.657647][ T9324] ? kvmalloc_node+0x6e/0x180 [ 538.662331][ T9324] __kmem_cache_alloc_node+0x47/0x260 [ 538.667717][ T9324] ? kvmalloc_node+0x6e/0x180 [ 538.672398][ T9324] __kmalloc_node+0xa2/0x230 [ 538.676993][ T9324] kvmalloc_node+0x6e/0x180 [ 538.681504][ T9324] get_dist_table+0x91/0x380 [ 538.686107][ T9324] netem_change+0x947/0x1ea0 [ 538.690713][ T9324] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 538.696702][ T9324] ? netem_destroy+0xb0/0xb0 [ 538.701306][ T9324] ? do_raw_spin_unlock+0x137/0x8a0 [ 538.706514][ T9324] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 538.712430][ T9324] ? lockdep_hardirqs_on+0x94/0x130 [ 538.717737][ T9324] ? memset+0x1f/0x40 [ 538.721732][ T9324] ? __hrtimer_init+0x181/0x260 [ 538.726604][ T9324] netem_init+0x58/0xb0 [ 538.730775][ T9324] ? qdisc_peek_dequeued+0x220/0x220 [ 538.736073][ T9324] qdisc_create+0x8a1/0x1220 [ 538.740681][ T9324] ? qdisc_notify+0x390/0x390 [ 538.745375][ T9324] tc_modify_qdisc+0x9e0/0x1da0 [ 538.750246][ T9324] ? rcu_lock_release+0x20/0x20 [ 538.755154][ T9324] ? rcu_lock_release+0x20/0x20 [ 538.760101][ T9324] rtnetlink_rcv_msg+0x776/0xf00 [ 538.765050][ T9324] ? print_irqtrace_events+0x210/0x210 [ 538.770519][ T9324] ? rtnetlink_bind+0x80/0x80 [ 538.775217][ T9324] ? __local_bh_enable_ip+0x164/0x1f0 [ 538.780601][ T9324] ? local_bh_enable+0x5/0x20 [ 538.785285][ T9324] ? _local_bh_enable+0xa0/0xa0 [ 538.790144][ T9324] ? __dev_queue_xmit+0x177a/0x3c90 [ 538.795360][ T9324] ? netdev_core_pick_tx+0x320/0x320 [ 538.800657][ T9324] ? ref_tracker_free+0x638/0x7d0 [ 538.805692][ T9324] ? memcpy+0x3c/0x60 [ 538.809689][ T9324] ? refcount_inc+0x80/0x80 [ 538.814202][ T9324] netlink_rcv_skb+0x1cd/0x410 [ 538.818980][ T9324] ? rtnetlink_bind+0x80/0x80 [ 538.823664][ T9324] ? netlink_ack+0xe60/0xe60 [ 538.828276][ T9324] netlink_unicast+0x7bf/0x990 [ 538.833061][ T9324] ? netlink_detachskb+0x90/0x90 [ 538.838115][ T9324] ? __virt_addr_valid+0x22b/0x2e0 [ 538.843280][ T9324] ? __phys_addr_symbol+0x2b/0x70 [ 538.848366][ T9324] ? __check_object_size+0x4dd/0xa30 [ 538.853678][ T9324] ? bpf_lsm_netlink_send+0x5/0x10 [ 538.858826][ T9324] netlink_sendmsg+0xa26/0xd60 [ 538.863621][ T9324] ? netlink_getsockopt+0x5b0/0x5b0 [ 538.868838][ T9324] ? aa_sock_msg_perm+0x91/0x150 [ 538.873879][ T9324] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 538.879180][ T9324] ? security_socket_sendmsg+0x7d/0xa0 [ 538.884653][ T9324] ? netlink_getsockopt+0x5b0/0x5b0 [ 538.889863][ T9324] ____sys_sendmsg+0x59e/0x8f0 [ 538.894650][ T9324] ? __sys_sendmsg_sock+0x30/0x30 [ 538.899702][ T9324] __sys_sendmsg+0x2a9/0x390 [ 538.904312][ T9324] ? ____sys_sendmsg+0x8f0/0x8f0 [ 538.909282][ T9324] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 538.915288][ T9324] ? syscall_enter_from_user_mode+0x2e/0x220 [ 538.921273][ T9324] ? lockdep_hardirqs_on+0x94/0x130 [ 538.926478][ T9324] ? syscall_enter_from_user_mode+0x2e/0x220 [ 538.932465][ T9324] do_syscall_64+0x3d/0xb0 [ 538.937074][ T9324] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 538.942980][ T9324] RIP: 0033:0x7f310387cb29 [ 538.947410][ T9324] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 538.967039][ T9324] RSP: 002b:00007f31045620c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.975474][ T9324] RAX: ffffffffffffffda RBX: 00007f310399c050 RCX: 00007f310387cb29 [ 538.983562][ T9324] RDX: 0000000004004800 RSI: 0000000020000440 RDI: 0000000000000003 [ 538.991542][ T9324] RBP: 00007f31038c847a R08: 0000000000000000 R09: 0000000000000000 [ 538.999520][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 02:10:22 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007700)=[{{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000018c0)=""/223, 0xea4}, {0x0, 0x478}, {&(0x7f0000002a80)=""/4090, 0xba8}], 0x3, 0x0, 0xa}}], 0x2f3, 0x10000, 0x0) 02:10:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f00000001c0), 0x4) [ 539.007496][ T9324] R13: 000000000000006e R14: 00007f310399c050 R15: 00007ffc633e9338 [ 539.015480][ T9324] [ 539.046257][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 539.046306][ T27] audit: type=1804 audit(1689732624.374:296): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3924699472/syzkaller.WNUAxN/287/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 02:10:24 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 02:10:24 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)