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"}, 0xc07) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "7464fbe08eb369"}) unshare(0x2020c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "35103fef64d6f0"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001400)={r6}) 21:12:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) 21:12:27 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077", 0xe}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(r2, &(0x7f0000000240), 0x10) 21:12:27 executing program 4: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@default, @remote, @null, @netrom, @netrom, @remote, @remote, @netrom]}, &(0x7f00000001c0)=0x48) unshare(0x20080) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xabe8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2400c804, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$tipc(0xffffffffffffffff, &(0x7f0000002400)=@name, 0x0, 0x80000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000800) close(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "7464fbe08eb369"}) socket$inet6_dccp(0xa, 0x6, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000025c0)={'#! ', './file0', [{0x20, '.--{@'}, {0x20, '\\'}, {0x20, '*('}, {}], 0xa, "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"}, 0xc07) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "7464fbe08eb369"}) unshare(0x2020c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "35103fef64d6f0"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001400)={r6}) [ 177.012088][ T5878] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 177.255785][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 177.266150][ T5882] bond1: (slave batadv7): Enslaving as a backup interface with an up link [ 177.307553][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 177.316315][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 177.316331][ T27] audit: type=1804 audit(1686604348.177:53): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/36/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 177.390042][ T5888] bond1: (slave batadv8): Enslaving as a backup interface with an up link [ 177.432607][ T27] audit: type=1804 audit(1686604348.287:54): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/36/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 177.539775][ T27] audit: type=1804 audit(1686604348.327:55): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/36/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 177.710143][ T5129] bond1: (slave batadv7): link status up again after 0 ms [ 177.725373][ T5882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.735914][ T5129] bond1: (slave batadv8): link status up again after 0 ms 21:12:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 177.744440][ T27] audit: type=1804 audit(1686604348.327:56): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/36/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 177.794507][ T5129] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.892610][ T5129] bond1: (slave batadv7): link status up again after 0 ms [ 177.926802][ T5129] bond1: (slave batadv8): link status up again after 0 ms [ 177.983701][ T5888] bond1 (unregistering): (slave batadv7): Removing an active aggregator [ 177.992255][ T5888] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 178.039865][ T5888] bond1 (unregistering): (slave batadv7): Releasing backup interface [ 178.125464][ T5888] bond1 (unregistering): (slave batadv8): Removing an active aggregator [ 178.164555][ T5888] bond1 (unregistering): (slave batadv8): Releasing backup interface [ 178.204007][ T5888] bond1 (unregistering): Released all slaves [ 178.230027][ T5897] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:12:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 178.332570][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.355049][ T5898] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 178.377579][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 178.387558][ T5899] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 178.480741][ T5129] bond1: (slave batadv1): link status up again after 0 ms [ 178.481540][ T5901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.495769][ T5129] bond1: (slave batadv2): link status up again after 0 ms [ 178.504143][ T5129] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 178.562397][ T5129] bond1: (slave batadv1): link status up again after 0 ms [ 178.581749][ T5129] bond1: (slave batadv2): link status up again after 0 ms [ 178.622560][ T5903] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 178.631043][ T5903] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 178.677530][ T5903] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 178.715242][ T5903] bond1 (unregistering): (slave batadv2): Removing an active aggregator [ 178.735514][ T5903] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 178.781701][ T5903] bond1 (unregistering): Released all slaves [ 178.848564][ T5905] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:12:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 178.910936][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 178.959297][ T5906] bond1: (slave batadv9): Enslaving as a backup interface with an up link [ 179.031212][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 179.060650][ T5907] bond1: (slave batadv10): Enslaving as a backup interface with an up link [ 179.201360][ T5704] bond1: (slave batadv9): link status up again after 0 ms [ 179.214316][ T5909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.222450][ T5704] bond1: (slave batadv10): link status up again after 0 ms [ 179.249774][ T5704] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.308995][ T5910] bond1 (unregistering): (slave batadv9): Removing an active aggregator [ 179.317522][ T5910] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.336119][ T5910] bond1 (unregistering): (slave batadv9): Releasing backup interface [ 179.368530][ T5910] bond1 (unregistering): (slave batadv10): Removing an active aggregator [ 179.397346][ T5910] bond1 (unregistering): (slave batadv10): Releasing backup interface [ 179.437212][ T5910] bond1 (unregistering): Released all slaves [ 179.483371][ T5913] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:12:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 179.542295][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 179.569147][ T5914] bond1: (slave batadv3): Enslaving as a backup interface with an up link [ 179.632891][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 179.650586][ T5915] bond1: (slave batadv4): Enslaving as a backup interface with an up link [ 179.783212][ T5704] bond1: (slave batadv3): link status up again after 0 ms [ 179.792155][ T5917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.802520][ T5704] bond1: (slave batadv4): link status up again after 0 ms [ 179.822089][ T5704] bond1: (slave batadv3): failed to get link speed/duplex [ 179.841402][ T5704] bond1: (slave batadv4): failed to get link speed/duplex [ 179.860062][ T5704] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.898685][ T5918] bond1 (unregistering): (slave batadv3): Removing an active aggregator [ 179.907175][ T5918] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.945980][ T5918] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 179.981608][ T5918] bond1 (unregistering): (slave batadv4): Removing an active aggregator [ 179.991070][ T5918] bond1 (unregistering): (slave batadv4): Releasing backup interface [ 180.027879][ T5918] bond1 (unregistering): Released all slaves [ 180.083800][ T5921] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 21:12:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 180.155201][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 180.198379][ T5922] bond1: (slave batadv11): Enslaving as a backup interface with an up link [ 180.222763][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 180.231615][ T5923] bond1: (slave batadv12): Enslaving as a backup interface with an up link [ 180.260007][ T5929] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 180.346027][ T41] bond1: (slave batadv11): link status up again after 0 ms [ 180.354349][ T41] bond1: (slave batadv12): link status up again after 0 ms [ 180.361051][ T5925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.368504][ T41] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.386974][ T41] bond1: (slave batadv11): link status up again after 0 ms [ 180.394372][ T41] bond1: (slave batadv12): link status up again after 0 ms [ 180.428949][ T5926] bond1 (unregistering): (slave batadv11): Removing an active aggregator [ 180.437534][ T5926] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.449576][ T5926] bond1 (unregistering): (slave batadv11): Releasing backup interface [ 180.468068][ T5926] bond1 (unregistering): (slave batadv12): Removing an active aggregator [ 180.477293][ T5926] bond1 (unregistering): (slave batadv12): Releasing backup interface [ 180.494957][ T5926] bond1 (unregistering): Released all slaves [ 180.533206][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 180.548715][ T5931] bond1: (slave batadv5): Enslaving as a backup interface with an up link [ 180.581113][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 180.589979][ T5929] bond1: (slave batadv6): Enslaving as a backup interface with an up link 21:12:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 180.664223][ T1030] bond1: (slave batadv5): link status up again after 0 ms [ 180.675690][ T5933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.682464][ T1030] bond1: (slave batadv6): link status up again after 0 ms [ 180.718608][ T1030] bond1: (slave batadv5): link status up again after 0 ms [ 180.729155][ T1030] bond1: (slave batadv6): link status up again after 0 ms [ 180.772313][ T5929] bond1 (unregistering): (slave batadv5): Removing an active aggregator [ 180.798482][ T5929] bond1 (unregistering): (slave batadv5): Releasing backup interface [ 180.814692][ T5929] bond1 (unregistering): (slave batadv6): Removing an active aggregator [ 180.827222][ T5929] bond1 (unregistering): (slave batadv6): Releasing backup interface [ 180.860378][ T5929] bond1 (unregistering): Released all slaves [ 180.877533][ T5935] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 180.981339][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv13 [ 180.990751][ T5936] bond1: (slave batadv13): Enslaving as a backup interface with an up link [ 181.011785][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 181.020614][ T5937] bond1: (slave batadv14): Enslaving as a backup interface with an up link [ 181.102948][ T5935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.105525][ T1030] bond1: (slave batadv13): link status up again after 0 ms [ 181.132228][ T1030] bond1: (slave batadv14): link status up again after 0 ms [ 181.175748][ T1030] bond1: (slave batadv13): link status up again after 0 ms [ 181.185311][ T1030] bond1: (slave batadv14): link status up again after 0 ms [ 181.260488][ T5936] bond1 (unregistering): (slave batadv13): Removing an active aggregator [ 181.286460][ T5936] bond1 (unregistering): (slave batadv13): Releasing backup interface [ 181.325251][ T5936] bond1 (unregistering): (slave batadv14): Removing an active aggregator [ 181.346453][ T5936] bond1 (unregistering): (slave batadv14): Releasing backup interface [ 181.376804][ T5936] bond1 (unregistering): Released all slaves 21:12:34 executing program 2: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@default, @remote, @null, @netrom, @netrom, @remote, @remote, @netrom]}, &(0x7f00000001c0)=0x48) unshare(0x20080) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xabe8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2400c804, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$tipc(0xffffffffffffffff, &(0x7f0000002400)=@name, 0x0, 0x80000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000800) close(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "7464fbe08eb369"}) socket$inet6_dccp(0xa, 0x6, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000025c0)={'#! ', './file0', [{0x20, '.--{@'}, {0x20, '\\'}, {0x20, '*('}, {}], 0xa, "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"}, 0xc07) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "7464fbe08eb369"}) unshare(0x2020c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "35103fef64d6f0"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001400)={r6}) 21:12:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) 21:12:34 executing program 5: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@default, @remote, @null, @netrom, @netrom, @remote, @remote, @netrom]}, &(0x7f00000001c0)=0x48) unshare(0x20080) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xabe8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2400c804, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$tipc(0xffffffffffffffff, &(0x7f0000002400)=@name, 0x0, 0x80000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000800) close(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "7464fbe08eb369"}) socket$inet6_dccp(0xa, 0x6, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000025c0)={'#! ', './file0', [{0x20, '.--{@'}, {0x20, '\\'}, {0x20, '*('}, {}], 0xa, "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"}, 0xc07) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "7464fbe08eb369"}) unshare(0x2020c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "35103fef64d6f0"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001400)={r6}) 21:12:34 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="9b42072ebb"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077", 0xe}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(r2, &(0x7f0000000240), 0x10) 21:12:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 183.343118][ T5941] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 183.509402][ T5946] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 183.622706][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 183.661024][ T5948] bond1: (slave batadv7): Enslaving as a backup interface with an up link [ 183.701581][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv15 [ 183.752455][ T5953] bond1: (slave batadv15): Enslaving as a backup interface with an up link [ 183.796324][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 183.831396][ T5956] bond1: (slave batadv8): Enslaving as a backup interface with an up link [ 183.864049][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 183.876118][ T5957] bond1: (slave batadv16): Enslaving as a backup interface with an up link [ 184.082972][ T5946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.089939][ T41] bond1: (slave batadv15): link status up again after 0 ms [ 184.113318][ T41] bond1: (slave batadv16): link status up again after 0 ms [ 184.143503][ T41] net_ratelimit: 4 callbacks suppressed [ 184.143521][ T41] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.182633][ T5963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.184474][ T1030] bond1: (slave batadv7): link status up again after 0 ms [ 184.199816][ T41] bond1: (slave batadv15): link status up again after 0 ms [ 184.210082][ T1030] bond1: (slave batadv8): link status up again after 0 ms [ 184.218232][ T41] bond1: (slave batadv16): link status up again after 0 ms [ 184.228377][ T1030] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.268979][ T1030] bond1: (slave batadv7): link status up again after 0 ms [ 184.283863][ T1030] bond1: (slave batadv8): link status up again after 0 ms [ 184.300740][ T5964] bond1 (unregistering): (slave batadv15): Removing an active aggregator [ 184.309346][ T5964] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.324851][ T41] bond1: (slave batadv7): link status up again after 0 ms [ 184.333353][ T41] bond1: (slave batadv8): link status up again after 0 ms [ 184.336976][ T5964] bond1 (unregistering): (slave batadv15): Releasing backup interface [ 184.356257][ T5129] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.371519][ T5964] bond1 (unregistering): (slave batadv16): Removing an active aggregator [ 184.380213][ T5129] bond1: (slave batadv7): link status up again after 0 ms [ 184.380955][ T5964] bond1 (unregistering): (slave batadv16): Releasing backup interface [ 184.389775][ T5129] bond1: (slave batadv8): link status up again after 0 ms [ 184.416354][ T5964] bond1 (unregistering): Released all slaves [ 184.435603][ T5129] bond1: (slave batadv7): link status up again after 0 ms [ 184.443555][ T5129] bond1: (slave batadv8): link status up again after 0 ms [ 184.463692][ T5948] bond1 (unregistering): (slave batadv7): Removing an active aggregator [ 184.472180][ T5948] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.483440][ T5948] bond1 (unregistering): (slave batadv7): Releasing backup interface [ 184.517518][ T5948] bond1 (unregistering): (slave batadv8): Removing an active aggregator [ 184.540137][ T5948] bond1 (unregistering): (slave batadv8): Releasing backup interface [ 184.561196][ T5948] bond1 (unregistering): Released all slaves 21:12:35 executing program 4: unshare(0x6c060000) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@default, @remote, @null, @netrom, @netrom, @remote, @remote, @netrom]}, &(0x7f00000001c0)=0x48) unshare(0x20080) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xabe8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2400c804, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$tipc(0xffffffffffffffff, &(0x7f0000002400)=@name, 0x0, 0x80000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000800) close(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x5af, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "7464fbe08eb369"}) socket$inet6_dccp(0xa, 0x6, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000025c0)={'#! ', './file0', [{0x20, '.--{@'}, {0x20, '\\'}, {0x20, '*('}, {}], 0xa, "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"}, 0xc07) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "7464fbe08eb369"}) unshare(0x2020c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000400)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "35103fef64d6f0"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001400)={r6}) 21:12:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) 21:12:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 184.858637][ T5966] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 184.923257][ T5970] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 184.996511][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 185.004979][ T5974] bond1: (slave batadv9): Enslaving as a backup interface with an up link [ 185.027055][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 185.040110][ T5966] bond1: (slave batadv17): Enslaving as a backup interface with an up link [ 185.074950][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 185.098787][ T5970] bond1: (slave batadv10): Enslaving as a backup interface with an up link [ 185.115082][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 185.126930][ T5973] bond1: (slave batadv18): Enslaving as a backup interface with an up link [ 185.266577][ T5129] bond1: (slave batadv9): link status up again after 0 ms [ 185.267241][ T5970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.276969][ T5129] bond1: (slave batadv10): link status up again after 0 ms [ 185.296631][ T5973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.299048][ T5121] bond1: (slave batadv17): link status up again after 0 ms [ 185.330906][ T5129] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.344760][ T5121] bond1: (slave batadv18): link status up again after 0 ms [ 185.358270][ T5121] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.364691][ T5129] bond1: (slave batadv9): link status up again after 0 ms [ 185.380068][ T5121] bond1: (slave batadv17): link status up again after 0 ms [ 185.389771][ T5129] bond1: (slave batadv10): link status up again after 0 ms [ 185.401233][ T5121] bond1: (slave batadv18): link status up again after 0 ms [ 185.423785][ T5978] bond1 (unregistering): (slave batadv17): Removing an active aggregator [ 185.432365][ T5978] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.442974][ T5121] bond1: (slave batadv9): link status up again after 0 ms [ 185.452813][ T5121] bond1: (slave batadv10): link status up again after 0 ms [ 185.462258][ T5978] bond1 (unregistering): (slave batadv17): Releasing backup interface [ 185.475800][ T5121] bond1: (slave batadv9): link status up again after 0 ms [ 185.487687][ T5121] bond1: (slave batadv10): link status up again after 0 ms [ 185.496174][ T5978] bond1 (unregistering): (slave batadv18): Removing an active aggregator [ 185.496686][ T5121] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.516035][ T5978] bond1 (unregistering): (slave batadv18): Releasing backup interface [ 185.517503][ T1030] bond1: (slave batadv9): link status up again after 0 ms [ 185.535179][ T1030] bond1: (slave batadv10): link status up again after 0 ms [ 185.554595][ T5978] bond1 (unregistering): Released all slaves [ 185.561103][ T1030] bond1: (slave batadv9): link status up again after 0 ms [ 185.568691][ T1030] bond1: (slave batadv10): link status up again after 0 ms [ 185.602727][ T5974] bond1 (unregistering): (slave batadv9): Removing an active aggregator [ 185.611161][ T5974] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.622412][ T5974] bond1 (unregistering): (slave batadv9): Releasing backup interface [ 185.642831][ T5974] bond1 (unregistering): (slave batadv10): Removing an active aggregator [ 185.670223][ T5974] bond1 (unregistering): (slave batadv10): Releasing backup interface 21:12:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 185.723210][ T5974] bond1 (unregistering): Released all slaves 21:12:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r11}}, 0x20}}, 0x0) [ 185.802731][ T5980] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 185.938234][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv19 [ 185.981260][ T5982] bond1: (slave batadv19): Enslaving as a backup interface with an up link [ 186.001562][ T5984] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 186.154673][ T5985] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 186.231923][ T5985] bond1: (slave batadv11): Enslaving as a backup interface with an up link [ 186.274171][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv20 [ 186.287515][ T5980] bond1: (slave batadv20): Enslaving as a backup interface with an up link [ 186.321060][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 186.361474][ T5986] bond1: (slave batadv12): Enslaving as a backup interface with an up link [ 186.488057][ T5121] bond1: (slave batadv19): link status up again after 0 ms [ 186.498341][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.513302][ T5121] bond1: (slave batadv20): link status up again after 0 ms [ 186.557302][ T5121] bond1: (slave batadv19): link status up again after 0 ms [ 186.579099][ T5121] bond1: (slave batadv20): link status up again after 0 ms [ 186.621295][ T5990] bond1 (unregistering): (slave batadv19): Removing an active aggregator [ 186.637032][ T5990] bond1 (unregistering): (slave batadv19): Releasing backup interface [ 186.706386][ T5990] bond1 (unregistering): (slave batadv20): Removing an active aggregator [ 186.756203][ T5990] bond1 (unregistering): (slave batadv20): Releasing backup interface [ 186.797805][ T5990] bond1 (unregistering): Released all slaves 21:12:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) [ 186.995703][ T5121] bond1: (slave batadv11): link status up again after 0 ms [ 186.996380][ T5985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.011515][ T5121] bond1: (slave batadv12): link status up again after 0 ms [ 187.065971][ T5121] bond1: (slave batadv11): link status up again after 0 ms [ 187.099701][ T5121] bond1: (slave batadv12): link status up again after 0 ms [ 187.186859][ T5988] bond1 (unregistering): (slave batadv11): Removing an active aggregator [ 187.206594][ T5988] bond1 (unregistering): (slave batadv11): Releasing backup interface [ 187.257050][ T5988] bond1 (unregistering): (slave batadv12): Removing an active aggregator [ 187.274385][ T5988] bond1 (unregistering): (slave batadv12): Releasing backup interface [ 187.336254][ T5988] bond1 (unregistering): Released all slaves [ 187.395841][ T27] audit: type=1804 audit(1686604358.257:57): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/38/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 187.490142][ T27] audit: type=1804 audit(1686604358.347:58): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/38/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 21:12:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) [ 187.588959][ T27] audit: type=1804 audit(1686604358.347:59): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/38/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 187.698093][ T27] audit: type=1804 audit(1686604358.347:60): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/38/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 188.056606][ T27] audit: type=1804 audit(1686604358.917:61): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/43/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 188.226839][ T27] audit: type=1804 audit(1686604359.087:62): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/43/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 188.327254][ T27] audit: type=1804 audit(1686604359.117:63): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/43/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 188.425734][ T27] audit: type=1804 audit(1686604359.117:64): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1650346347/syzkaller.BlW6bx/43/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 21:12:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) [ 189.706432][ T27] audit: type=1804 audit(1686604360.567:65): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/39/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 189.799022][ T27] audit: type=1804 audit(1686604360.567:66): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir666398443/syzkaller.zitKQW/38/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 21:12:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000230000003500000000000000850000000800000095000000000000001b90b31a08f54ff40571eda5c56ad924a10c7b1e6003c9325fea577f8e46fe212b358f1d0838c8119ed74e74552ce4e6c8093375e35c8250f448a6a31260c2f9fbb70400000000000000b08b7aab5fd5d24dcff1ca14025b73c2da8f550900000000000000c340b111fcee90d6d90100000001000000babdee5b76635ce4f35f985e434196b5699ba66b9cb05e5259a1f61cafa3586a2228c4581dc29931a4ca0f4967706596014dc06b99b9c9ba49b34e516e0baed5cc60249894d0b0721265d3deb7a7182f2c369dca20170b851f987289cc77aeeb0d5dcdce0900000000000000ef363c9f5ca80b125dabc3adab1179388e76c44e7328318078af6a0a1a248a7b2ca42a05f4b033e9d8a7880a116a60bd69a463a73745e8950a8e1a3a86e2e1f134f18c4e7c6037b670a823e59267ae980c73ba0941"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) r1 = socket(0x10, 0x802, 0x0) write(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x3c, &(0x7f0000000240)=""/60, 0x41100, 0x11, '\x00', 0x0, 0x2d, r3, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x206b1048}, 0x10, r4, r5}, 0x80) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_delroute={0x40, 0x19, 0x0, 0x70bd28, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@RTA_METRICS={0x9, 0x8, 0x0, 0x1, "ec78440b5b"}, @RTA_TABLE={0x8}, @RTA_DPORT={0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x40}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, 0x0, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 21:12:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) [ 191.314274][ T6043] Zero length message leads to an empty skb 21:12:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) r1 = socket(0x10, 0x802, 0x0) write(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x3c, &(0x7f0000000240)=""/60, 0x41100, 0x11, '\x00', 0x0, 0x2d, r3, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x206b1048}, 0x10, r4, r5}, 0x80) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_delroute={0x40, 0x19, 0x0, 0x70bd28, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@RTA_METRICS={0x9, 0x8, 0x0, 0x1, "ec78440b5b"}, @RTA_TABLE={0x8}, @RTA_DPORT={0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x40}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, 0x0, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 21:12:42 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 21:12:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) r1 = socket(0x10, 0x802, 0x0) write(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x3c, &(0x7f0000000240)=""/60, 0x41100, 0x11, '\x00', 0x0, 0x2d, r3, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x206b1048}, 0x10, r4, r5}, 0x80) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_delroute={0x40, 0x19, 0x0, 0x70bd28, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@RTA_METRICS={0x9, 0x8, 0x0, 0x1, "ec78440b5b"}, @RTA_TABLE={0x8}, @RTA_DPORT={0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x40}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, 0x0, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 21:12:42 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 21:12:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0xf}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x13, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 21:12:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) r1 = socket(0x10, 0x802, 0x0) write(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000380)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x3c, &(0x7f0000000240)=""/60, 0x41100, 0x11, '\x00', 0x0, 0x2d, r3, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x206b1048}, 0x10, r4, r5}, 0x80) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_delroute={0x40, 0x19, 0x0, 0x70bd28, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@RTA_METRICS={0x9, 0x8, 0x0, 0x1, "ec78440b5b"}, @RTA_TABLE={0x8}, @RTA_DPORT={0x6}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x40}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, 0x0, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 21:12:42 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 21:12:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0xf}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x13, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 21:12:42 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:12:43 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 21:12:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0xf}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x13, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 21:12:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 21:12:43 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c4d4f1", 0x8, 0x3c, 0x0, @private1, @mcast2, {[], "905f38f43942e8d6"}}}}}, 0x0) 21:12:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0xf}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x13, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) [ 192.428449][ T6076] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains 21:12:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x25dfdbfb}, 0x1c}}, 0xc0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000100)="4224981cd46d888bb5eeec60e9220c1bc6ad72032a8ba233b36bac2aa1ff143865b16dcd929c8bea1a3172a7e4468ce0e0b582c9f40671d20a6b0ae2bd22303fcfe1c99012fc12056b6c4095715e98ac1cb3a707b8db658c56b7c7cbd4cb672ea7504586219e29c9b3449e0272288ac8ead0bc7bd09a2b0962966691"}, 0x20) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x10}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r6, 0x4) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40018401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) mmap(&(0x7f00006b0000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0xec77e000) sendfile(r8, r7, 0x0, 0x10000a006) 21:12:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ff0c200021bfa200000000000007010000f8ffffffb702000003000000bd120000000000008500000019000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e285f53c185dc147a6eace8eac9a007acec49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000002000010c63a949e8b7955394ffa82b8fc42c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0f8a1ae6dc64ea97c0af60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d645ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f7b87b0131394e9f620034bc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100007000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870cefd3467decb05cfd9fcb32c8e02000000000000003d5e71b5565b1768ee58969c41595229df17bcad70fb400100010000000000b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c726df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feadf8be58770a267eeb0bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e48f3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cbbf66f5c51514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958649216687094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a2409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e8e45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03a2a176a145361bfe66c92023f44a1d2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12e83c3431ee97471c7868dcda7eaa69ebf2391d637e447f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac49e290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28e678f66422436f949e2a2f1f54e0e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df8f111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb0000000000000000000000000000000000000000cc52e70bdfb47d64e7d414a8f04f32a394b14882b59379ca1508499326d10307f1f8e2d7762b62847ddf37ad25b22f311f5d0df5268967efeda71e87d46fa9ff7f496b421faf7de4c28337504a8c2099c3340ba44dadceca6f5fd30a77e1c92a6187e44bb5d22588cdc88f3415ef71776fb4949002f6f60f0074ccfc5c6a56bc53d2b8e6bee5f3ebdbc2b38649f14400000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 21:12:43 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c4d4f1", 0x8, 0x3c, 0x0, @private1, @mcast2, {[], "905f38f43942e8d6"}}}}}, 0x0) 21:12:43 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) [ 192.499247][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 192.499263][ T27] audit: type=1804 audit(1686604363.357:133): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2727809819/syzkaller.wcm0fR/43/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 192.620928][ T27] audit: type=1804 audit(1686604363.477:134): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2727809819/syzkaller.wcm0fR/43/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 192.733018][ T27] audit: type=1804 audit(1686604363.477:135): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2727809819/syzkaller.wcm0fR/43/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 21:12:43 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c4d4f1", 0x8, 0x3c, 0x0, @private1, @mcast2, {[], "905f38f43942e8d6"}}}}}, 0x0) 21:12:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) [ 192.786918][ T6090] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) [ 192.803044][ T27] audit: type=1804 audit(1686604363.477:136): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2727809819/syzkaller.wcm0fR/43/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 192.866277][ T6094] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 193.076605][ T27] audit: type=1804 audit(1686604363.937:137): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/43/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 193.172960][ T27] audit: type=1804 audit(1686604364.027:138): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/43/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 193.204868][ T27] audit: type=1804 audit(1686604364.027:139): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/43/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 193.237663][ T27] audit: type=1804 audit(1686604364.027:140): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/43/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 194.338994][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.345348][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 21:13:37 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:13:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 21:13:37 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfda3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) close(0xffffffffffffffff) 21:13:37 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c4d4f1", 0x8, 0x3c, 0x0, @private1, @mcast2, {[], "905f38f43942e8d6"}}}}}, 0x0) 21:13:37 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) 21:13:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) 21:13:38 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:13:38 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfda3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) close(0xffffffffffffffff) 21:13:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:13:38 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfda3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) close(0xffffffffffffffff) [ 247.547478][ T6116] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) 21:13:38 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfda3) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) close(0xffffffffffffffff) [ 247.685484][ T6112] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 247.718921][ T6131] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 247.755276][ T6114] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) 21:13:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) [ 247.805214][ T6114] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 247.886988][ T6130] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 248.235615][ T6137] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) [ 248.313214][ T6138] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 250.092733][ T4409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.111271][ T4409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.120601][ T4409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.129664][ T4409] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 250.137639][ T4409] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.312069][ T6140] chnl_net:caif_netlink_parms(): no params data found [ 250.378685][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.386000][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.393252][ T6140] bridge_slave_0: entered allmulticast mode [ 250.400406][ T6140] bridge_slave_0: entered promiscuous mode [ 250.408765][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.416054][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.423543][ T6140] bridge_slave_1: entered allmulticast mode [ 250.430966][ T6140] bridge_slave_1: entered promiscuous mode [ 250.464103][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.476973][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.511126][ T6140] team0: Port device team_slave_0 added [ 250.521143][ T6140] team0: Port device team_slave_1 added [ 250.548629][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.560143][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.588663][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.602418][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.609860][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.636325][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.684253][ T6140] hsr_slave_0: entered promiscuous mode [ 250.690920][ T6140] hsr_slave_1: entered promiscuous mode [ 250.697277][ T6140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.704869][ T6140] Cannot create hsr debugfs directory [ 250.826349][ T6140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.928895][ T6140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.049286][ T6140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.203912][ T6140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.416618][ T6140] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.427649][ T6140] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.439918][ T6140] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.450158][ T6140] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.534640][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.559664][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.571656][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.578849][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.597524][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.604749][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.644626][ T6140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.657698][ T6140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.865933][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.914422][ T6140] veth0_vlan: entered promiscuous mode [ 251.928329][ T6140] veth1_vlan: entered promiscuous mode [ 251.962320][ T6140] veth0_macvtap: entered promiscuous mode [ 251.972885][ T6140] veth1_macvtap: entered promiscuous mode [ 251.997709][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.009080][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.019938][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.030789][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.041855][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.052693][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.063899][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.074888][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.085350][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.100006][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.110534][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.121730][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.133880][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.150884][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.162228][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.173193][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.185606][ T5049] Bluetooth: hci6: command 0x0409 tx timeout [ 252.193246][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.205326][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.217955][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.228810][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.239678][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.250389][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.262188][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.272425][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.283997][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.295927][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.313041][ T6140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.322367][ T6140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.333140][ T6140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.345799][ T6140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.426155][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.446317][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.477097][ T5098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.484960][ T5098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.796061][ T6154] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 254.255663][ T5049] Bluetooth: hci6: command 0x041b tx timeout [ 255.779165][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785556][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.335850][ T5049] Bluetooth: hci6: command 0x040f tx timeout [ 258.415692][ T5049] Bluetooth: hci6: command 0x0419 tx timeout [ 268.095656][ T5053] Bluetooth: hci1: command 0x0406 tx timeout [ 268.101741][ T5053] Bluetooth: hci2: command 0x0406 tx timeout [ 268.109577][ T5049] Bluetooth: hci5: command 0x0406 tx timeout [ 268.109600][ T4409] Bluetooth: hci3: command 0x0406 tx timeout [ 268.115642][ T5055] Bluetooth: hci0: command 0x0406 tx timeout [ 268.115676][ T5055] Bluetooth: hci4: command 0x0406 tx timeout 21:14:38 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:14:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:14:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) 21:14:38 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:14:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) 21:14:38 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) [ 307.917600][ T6161] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) 21:14:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:14:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000680)={0x0, r1, 0x89b, 0x8, 0x9, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x884, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="850000002f000000186600000c00e701028a000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f761785"], &(0x7f0000000400)='syzkaller\x00', 0x401, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d9500000000000059eb00000d4af4fffcffffff8500001688000000182a0000", @ANYRES32, @ANYBLOB="00000000040000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003dc0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x5, &(0x7f00000008c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x2, 0x3, 0x2, 0x0, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0xffffff38, 0xe8, &(0x7f0000000940)=""/232, 0x41100, 0x19, '\x00', 0x0, 0x11, r6, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x6}, 0x10, 0xffffffffffffffff, r0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r7, 0x0, 0xc1, 0x1000, &(0x7f0000000b40)="3c0f8f82001ac00fe75cdbd828098b98c9baf16f4786c2a011834f09780ab6edcb77068985aa23afcad22cc26ee7594000c00d89f55140114adb8d4841de4d8db56570a9c051b1b63d2f9f3d2e2f2181b298702e76d5b403a0032037df218b45d546fb5f4f1b4f8ac347910aa5ae6e12e37517d46a2b6d4854f9b769bc4f4ce2cb63fd2901ed6d9b45792f4ad97007e1a78892b36b3ef64bf6c6d9949a536fd6d2dbd0b03144d4778e58481a83c31026ebf7d148784e12793c53007c0ac92a7c8e", &(0x7f00000017c0)=""/4096, 0x3, 0x0, 0x24, 0xe8, &(0x7f0000000c40)="b4b99c72f3a2991d33c0895573a0fec0dc24903db7c8234fb3039a3a91477db89b6d22c2", &(0x7f0000000c80)="7048878dda73f372572fdaaeda8607fc4b44a61c7d6f3831a4f437caf67b1f1660e43de7477be2b4abfe3c3665c8e6d09f046366e4ec80f156e1147b38d752a6dee63696985024d7780387a8505c48f482f3519b8f586fce94579d232e05f15c38b443c40e6e9f1a38e94a1a7ab82fd9e30bcab28c4f9284e40db7f409accf587c75eb83762b55f28e263ef0b32c689b6eddfe9d359b7818c19a3a7af9b1f085f92b27bdf529723e664003ad19cbd99e5dd1f004a4a9e1b7a313d97a75f37997f219265a0938472a5a7b5974c25c6178d63464c1689f0dae2e6d682d2f1a326c8d947f0aa81ed708", 0x1, 0x3}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40286608, &(0x7f0000000000)) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000000)=0x2) 21:14:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 21:14:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 21:14:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 308.015770][ T6157] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 308.617751][ T6172] EXT4-fs warning (device sda1): verify_group_input:150: Cannot add at group 0 (only 8 groups) [ 308.695562][ T6173] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains 21:14:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) [ 308.695568][ T6172] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 309.241363][ T4409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.262736][ T4409] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.271900][ T4409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.280172][ T4409] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.287893][ T4409] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 309.295286][ T4409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.670870][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 309.723974][ T4409] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.735795][ T4409] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 309.747580][ T4409] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 309.756462][ T4409] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 309.764331][ T4409] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 309.772007][ T4409] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 309.832513][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.850140][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.860376][ T6185] bridge_slave_0: entered allmulticast mode [ 309.861033][ T4409] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 309.867869][ T6185] bridge_slave_0: entered promiscuous mode [ 309.881175][ T4409] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 309.890278][ T4409] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 309.890308][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.905366][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.913474][ T6185] bridge_slave_1: entered allmulticast mode [ 309.913923][ T4409] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 309.922994][ T6185] bridge_slave_1: entered promiscuous mode [ 309.934789][ T4409] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 309.944271][ T4409] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 310.007415][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.037247][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.111712][ T6185] team0: Port device team_slave_0 added [ 310.129813][ T6185] team0: Port device team_slave_1 added [ 310.201522][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.212199][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.238809][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.277932][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.284927][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.311459][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.450153][ T6185] hsr_slave_0: entered promiscuous mode [ 310.457783][ T6185] hsr_slave_1: entered promiscuous mode [ 310.467342][ T6185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.475834][ T6185] Cannot create hsr debugfs directory [ 310.488122][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 310.542697][ T6197] chnl_net:caif_netlink_parms(): no params data found [ 310.676915][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.684290][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.691825][ T6192] bridge_slave_0: entered allmulticast mode [ 310.699281][ T6192] bridge_slave_0: entered promiscuous mode [ 310.733717][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.741494][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.749295][ T6192] bridge_slave_1: entered allmulticast mode [ 310.759661][ T6192] bridge_slave_1: entered promiscuous mode [ 310.793088][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.800741][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.808150][ T6197] bridge_slave_0: entered allmulticast mode [ 310.816844][ T6197] bridge_slave_0: entered promiscuous mode [ 310.838459][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.846590][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.854083][ T6197] bridge_slave_1: entered allmulticast mode [ 310.861428][ T6197] bridge_slave_1: entered promiscuous mode [ 310.880625][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.957536][ T6185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.989608][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.008818][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.045890][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.106478][ T6185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.179967][ T6192] team0: Port device team_slave_0 added [ 311.197983][ T6192] team0: Port device team_slave_1 added [ 311.234838][ T6185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.284540][ T6197] team0: Port device team_slave_0 added [ 311.317986][ T6197] team0: Port device team_slave_1 added [ 311.341887][ T6185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.376097][ T5053] Bluetooth: hci7: command 0x0409 tx timeout [ 311.376763][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.405481][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.455473][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.499645][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.515472][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.575437][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.640212][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.652513][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.685330][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.719216][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.726572][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.754805][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.780344][ T6192] hsr_slave_0: entered promiscuous mode [ 311.793689][ T6192] hsr_slave_1: entered promiscuous mode [ 311.816873][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.824476][ T6192] Cannot create hsr debugfs directory [ 311.855718][ T4409] Bluetooth: hci8: command 0x0409 tx timeout [ 312.012169][ T6197] hsr_slave_0: entered promiscuous mode [ 312.018119][ T4409] Bluetooth: hci9: command 0x0409 tx timeout [ 312.034741][ T6197] hsr_slave_1: entered promiscuous mode [ 312.041463][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.049484][ T6197] Cannot create hsr debugfs directory [ 312.059147][ T6185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.085671][ T6185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.097461][ T6185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.134498][ T6185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.237496][ T6192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.333413][ T6192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.454779][ T6192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.494556][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.569329][ T6192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.621536][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.650456][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.657635][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.710515][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.717696][ T5043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.796400][ T6197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.879704][ T6197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.001444][ T6197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.098841][ T6197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.237213][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.332362][ T6185] veth0_vlan: entered promiscuous mode [ 313.342908][ T6192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.358402][ T6185] veth1_vlan: entered promiscuous mode [ 313.369580][ T6192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.403664][ T6192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.418671][ T6192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.432194][ T6197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.453643][ T6197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.460784][ T4409] Bluetooth: hci7: command 0x041b tx timeout [ 313.479545][ T6185] veth0_macvtap: entered promiscuous mode [ 313.489066][ T6197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.500675][ T6197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.519502][ T6185] veth1_macvtap: entered promiscuous mode [ 313.580910][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.593859][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.604264][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.620417][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.631478][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.644383][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.655580][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.667924][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.678112][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.688791][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.699397][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.710360][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.721245][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.732164][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.746732][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.789225][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.800097][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.810551][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.821758][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.831968][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.845566][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.856516][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.867392][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.877556][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.890520][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.900891][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.912559][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.922822][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.934414][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.944495][ T5053] Bluetooth: hci8: command 0x041b tx timeout [ 313.954922][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.967978][ T6185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.977078][ T6185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.986320][ T6185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.995056][ T6185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.096126][ T4409] Bluetooth: hci9: command 0x041b tx timeout [ 314.107019][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.130530][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.179762][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.199369][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.206536][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.229207][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.236206][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.244555][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.297390][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.304520][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.320523][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.327698][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.357340][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.364479][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.376325][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.405797][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.449675][ T6192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.667808][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.749215][ T6197] veth0_vlan: entered promiscuous mode [ 314.782320][ T6197] veth1_vlan: entered promiscuous mode [ 314.846078][ T6225] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 314.850051][ T6197] veth0_macvtap: entered promiscuous mode [ 314.879902][ T6197] veth1_macvtap: entered promiscuous mode [ 314.920454][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.942300][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.953101][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.964073][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.976477][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.987225][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.998495][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.009126][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.020302][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.030945][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.041053][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.052371][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.064571][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.077940][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.088033][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.098730][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.111860][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.131691][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.154154][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.165835][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.179062][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.189275][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.199941][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.210024][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.222200][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.232191][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.242837][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.253356][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.264333][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.276910][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.287521][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.299260][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.310004][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.321719][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.348949][ T6197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.359346][ T6197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.369240][ T6197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.380939][ T6197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.401060][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.511432][ T6192] veth0_vlan: entered promiscuous mode [ 315.520726][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.541830][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.549655][ T4409] Bluetooth: hci7: command 0x040f tx timeout [ 315.586035][ T6192] veth1_vlan: entered promiscuous mode [ 315.594735][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.609373][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.618954][ T6192] veth0_macvtap: entered promiscuous mode [ 315.632993][ T6192] veth1_macvtap: entered promiscuous mode [ 315.654234][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.688852][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.700196][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.711258][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.721364][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.732233][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.749117][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.765885][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.784193][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.799274][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.809305][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.819879][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.837153][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.854552][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.875481][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.892776][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.903054][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.915875][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.927802][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.950748][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.984353][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.005512][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.015833][ T5053] Bluetooth: hci8: command 0x040f tx timeout [ 316.022084][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.038457][ T6229] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 316.048145][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.067811][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.090371][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.105030][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.115213][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.127846][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.138663][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.149593][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.159849][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.170655][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.180808][ T5053] Bluetooth: hci9: command 0x040f tx timeout [ 316.197984][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.209036][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.219158][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.230042][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.244279][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.270940][ T6192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.279838][ T6192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.289518][ T6192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.301291][ T6192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.391502][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.412121][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.453588][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.462427][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.788820][ T6232] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 317.217865][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225358][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.625527][ T4409] Bluetooth: hci7: command 0x0419 tx timeout [ 318.096100][ T4409] Bluetooth: hci8: command 0x0419 tx timeout [ 318.256528][ T5053] Bluetooth: hci9: command 0x0419 tx timeout 21:15:42 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:15:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 21:15:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c00058006000900020000000500080000000000080003"], 0x54}}, 0x0) 21:15:42 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:15:42 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:15:42 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_pid(r1, &(0x7f0000000080), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000000d) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'FROZEN\x00'}, {}, {0x20, '{'}], 0xa, "c92f9cbaac359e75930e26a57e9e7f43a6b2ba714eceb5c4cf1926e283060a69e39ab32d774b398b7dfea3d53d9280a8606bbb852c1bd93b60f1d9550c0582446b1c6b411d4aa932a7e85866735f04412abfce9cdda4801f1de728a3c257bc3fa2bf21c366b2a3cbc82a63557040c7749e768b10e6310a358bdd4ad13537fdd4a1077f932a39414268774ab140e15e9c4ebb0065f41ce342018ee5e75078a68ad5ad3e97833cf790252b7986cfab6e2bc9b8a1943d9b64424ddefc2f3a3ba648331b0f7b8be3f3258a89f808958bf79c1ee8d552df0442072525ac85b81f205073d3c2db36d1d8fbe01523a7995e88bf6363bff033"}, 0x10b) openat$cgroup_ro(r4, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x2, 0x6, 0x8a8, 0xd0, 0x0, 0x6b8, 0x1b0, 0xd0, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x7d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x23c7}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @private2, @private1, @mcast2, @dev, @private2, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x908) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000cc0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="003f80000000fddb40007a000000aebbddff2bb8bf3d0de9", @ANYBLOB="29dbf991a1e00cad2258639b8c209c928e4a4583879f6f8ade96ec81cc0871dadb3e545363aef4f1e6f8ba17deaae3bc5d99181c89573eaff3a85eae305bc42f1771a5018d8e9cd4e2ee7ce1cbaeae4abd37a69b6d95b77f7129fe4b91b7bbbad28bb7e5e530ba1ce6e011ce94d49cb8cc6707004883c7407af7fac891ecc7b813b6e067b2fdf046e3f07fb06b6f7a4dfb8c1570b606f452d227ec", @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="980000000b060101000000000000000002000009100008800c000780060005404e24000064ffffffff00028008000900ffffffff06001df9ce40000400000800064000000004060005404e200000eaff1c40000000070900130073797a32000000001400170070696d3672656730000000000000bf20cc76460877ac947b14001700626f6e645f736c6176655f3100000000100007360c0019400000000000000009"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400ed005200000002000000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21:15:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 371.662855][ T6242] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 21:15:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c00058006000900020000000500080000000000080003"], 0x54}}, 0x0) 21:15:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 21:15:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c00058006000900020000000500080000000000080003"], 0x54}}, 0x0) [ 371.828369][ T6247] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 21:15:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 371.955799][ T6252] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 21:15:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c00058006000900020000000500080000000000080003"], 0x54}}, 0x0) [ 372.097621][ T6256] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 373.426020][ T4409] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 373.435317][ T4409] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 373.446358][ T4409] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 373.454167][ T4409] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 373.465795][ T4409] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 373.618942][ T4409] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 373.627347][ T4409] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 373.636433][ T4409] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 373.646980][ T4409] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 373.654386][ T4409] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 373.890430][ T4409] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 373.899282][ T4409] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 373.913077][ T4409] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 373.920938][ T4409] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 373.928760][ T4409] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 374.015930][ T4409] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 374.024441][ T4409] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 374.032463][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 374.040397][ T4409] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 374.049132][ T4409] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 374.058093][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 374.058391][ T4409] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 374.307222][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.314488][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.321966][ T6261] bridge_slave_0: entered allmulticast mode [ 374.329206][ T6261] bridge_slave_0: entered promiscuous mode [ 374.367693][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.374837][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.382408][ T6261] bridge_slave_1: entered allmulticast mode [ 374.389818][ T6261] bridge_slave_1: entered promiscuous mode [ 374.414002][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.421548][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.431603][ T6263] bridge_slave_0: entered allmulticast mode [ 374.439633][ T6263] bridge_slave_0: entered promiscuous mode [ 374.478639][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.486054][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.493292][ T6263] bridge_slave_1: entered allmulticast mode [ 374.501246][ T6263] bridge_slave_1: entered promiscuous mode [ 374.556421][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.600294][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.628166][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.644391][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.668817][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 374.689310][ T6268] chnl_net:caif_netlink_parms(): no params data found [ 374.703636][ T6261] team0: Port device team_slave_0 added [ 374.737996][ T6261] team0: Port device team_slave_1 added [ 374.748188][ T6263] team0: Port device team_slave_0 added [ 374.784672][ T6263] team0: Port device team_slave_1 added [ 374.834664][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.842052][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.868776][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.909993][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.917450][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.943824][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.956325][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.963296][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.994301][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.026997][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.033992][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.061453][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.134068][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.142993][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.151262][ T6273] bridge_slave_0: entered allmulticast mode [ 375.158836][ T6273] bridge_slave_0: entered promiscuous mode [ 375.182359][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.189924][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.197975][ T6268] bridge_slave_0: entered allmulticast mode [ 375.205151][ T6268] bridge_slave_0: entered promiscuous mode [ 375.217537][ T6261] hsr_slave_0: entered promiscuous mode [ 375.224945][ T6261] hsr_slave_1: entered promiscuous mode [ 375.234759][ T6261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.242807][ T6261] Cannot create hsr debugfs directory [ 375.248978][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.257058][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.264343][ T6273] bridge_slave_1: entered allmulticast mode [ 375.271970][ T6273] bridge_slave_1: entered promiscuous mode [ 375.291758][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.299253][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.307162][ T6268] bridge_slave_1: entered allmulticast mode [ 375.314289][ T6268] bridge_slave_1: entered promiscuous mode [ 375.349733][ T6263] hsr_slave_0: entered promiscuous mode [ 375.356759][ T6263] hsr_slave_1: entered promiscuous mode [ 375.363180][ T6263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.371202][ T6263] Cannot create hsr debugfs directory [ 375.428330][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.451695][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.470571][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.489582][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.535832][ T4409] Bluetooth: hci10: command 0x0409 tx timeout [ 375.594335][ T6268] team0: Port device team_slave_0 added [ 375.616251][ T4409] Bluetooth: hci6: command 0x0406 tx timeout [ 375.617343][ T6273] team0: Port device team_slave_0 added [ 375.646633][ T6268] team0: Port device team_slave_1 added [ 375.672538][ T6273] team0: Port device team_slave_1 added [ 375.695892][ T4409] Bluetooth: hci11: command 0x0409 tx timeout [ 375.806196][ T6263] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.866924][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.875077][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.946469][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.977100][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.984099][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.016257][ T4409] Bluetooth: hci12: command 0x0409 tx timeout [ 376.045523][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.096030][ T4409] Bluetooth: hci13: command 0x0409 tx timeout [ 376.111295][ T6263] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.198958][ T6263] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.239361][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.255511][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.315860][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.346993][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.353983][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.416211][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.464802][ T6263] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.562086][ T6268] hsr_slave_0: entered promiscuous mode [ 376.584229][ T6268] hsr_slave_1: entered promiscuous mode [ 376.605603][ T6268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.620468][ T6268] Cannot create hsr debugfs directory [ 376.683215][ T6273] hsr_slave_0: entered promiscuous mode [ 376.690606][ T6273] hsr_slave_1: entered promiscuous mode [ 376.705027][ T6273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.717936][ T6273] Cannot create hsr debugfs directory [ 376.752445][ T6261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.876606][ T6261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.989761][ T6261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.098796][ T6261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.257017][ T6261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.282596][ T6261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.300988][ T6261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.316891][ T6261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 377.369615][ T6268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.394949][ T6263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.419073][ T6263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.495330][ T6268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.530672][ T6263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.578108][ T6263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.615668][ T4409] Bluetooth: hci10: command 0x041b tx timeout [ 377.656372][ T6268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.776472][ T4409] Bluetooth: hci11: command 0x041b tx timeout [ 377.813862][ T6268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.855030][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.922684][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.961855][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.969058][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.999508][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.006668][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.072352][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.095910][ T4409] Bluetooth: hci12: command 0x041b tx timeout [ 378.175643][ T4409] Bluetooth: hci13: command 0x041b tx timeout [ 378.256996][ T6273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.301052][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.317579][ T6268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.417225][ T6273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.455775][ T6268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.479169][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.486326][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.496883][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.504001][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.545687][ T6268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.594845][ T6273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.637289][ T6268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.652979][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.661744][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.661837][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.759031][ T6273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.824897][ T6263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.846249][ T6263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.969889][ T6261] veth0_vlan: entered promiscuous mode [ 379.030969][ T6261] veth1_vlan: entered promiscuous mode [ 379.137508][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.169649][ T6261] veth0_macvtap: entered promiscuous mode [ 379.204043][ T6261] veth1_macvtap: entered promiscuous mode [ 379.214667][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.253742][ T6273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.269908][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.277094][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.289243][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.301851][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.314742][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.325995][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.337412][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.348140][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.359209][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.369958][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.382930][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.394490][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.404596][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.417126][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.427973][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.438945][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.450546][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.461892][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.471951][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.484885][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.494991][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.506698][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.518766][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.536675][ T6273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.551098][ T900] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.558268][ T900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.588788][ T6273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.601358][ T6273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.620538][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.631501][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.645003][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.656036][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.666412][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.678521][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.691574][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.702907][ T4409] Bluetooth: hci10: command 0x040f tx timeout [ 379.709185][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.720338][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.731061][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.741105][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.753280][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.763355][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.774165][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.795549][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.807613][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.820781][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.832022][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.842225][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.853077][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.858210][ T4409] Bluetooth: hci11: command 0x040f tx timeout [ 379.865087][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.891773][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.906376][ T6261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.915139][ T6261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.925106][ T6261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.934555][ T6261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.954726][ T6268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.968034][ T6268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.156549][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.164426][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.176372][ T4409] Bluetooth: hci12: command 0x040f tx timeout [ 380.239434][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.255781][ T4409] Bluetooth: hci13: command 0x040f tx timeout [ 380.268974][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.290456][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.317391][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.407336][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.414484][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.479059][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.486242][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.524159][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.590228][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.714318][ T6263] veth0_vlan: entered promiscuous mode [ 380.729603][ T6268] veth0_vlan: entered promiscuous mode [ 380.748617][ T6315] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 380.751414][ T6263] veth1_vlan: entered promiscuous mode [ 380.784176][ T6268] veth1_vlan: entered promiscuous mode [ 380.855207][ T6263] veth0_macvtap: entered promiscuous mode [ 380.878254][ T6268] veth0_macvtap: entered promiscuous mode [ 380.895020][ T6263] veth1_macvtap: entered promiscuous mode [ 380.910024][ T6268] veth1_macvtap: entered promiscuous mode [ 380.948322][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.959731][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.973391][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.984423][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.995547][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.007467][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.020795][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.031122][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.042225][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.052469][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.064709][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.075235][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.089351][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.099793][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.110749][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.124705][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.136054][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.146615][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.157659][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.168050][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.179276][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.189584][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.202477][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.214880][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.233015][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.243945][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.254825][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.266151][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.277253][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.288074][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.298862][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.310937][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.322853][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.333924][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.345585][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.356462][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.366555][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.378319][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.388797][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.399891][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.410164][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.425855][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.436086][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.447611][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.459118][ T6263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.469975][ T6263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.482233][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.508288][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.519161][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.533159][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.546851][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.556957][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.567605][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.577566][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.588299][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.598455][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.609084][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.621102][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.635202][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.645208][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.657407][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.667657][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.678368][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.688496][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.699546][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.709671][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.720521][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.733929][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.744590][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.754697][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.765378][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.776762][ T4409] Bluetooth: hci10: command 0x0419 tx timeout [ 381.779820][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.799079][ T6263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.808667][ T6263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.818319][ T6263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.827708][ T6263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.867475][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.888377][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.898494][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.909193][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.919840][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.930428][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.936999][ T4409] Bluetooth: hci11: command 0x0419 tx timeout [ 381.944300][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.957175][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.968725][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.979498][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.990088][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.001643][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.012533][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.023831][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.034155][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.047159][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.057432][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.069839][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.081902][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.092711][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.103041][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.115147][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.126375][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.137577][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.151430][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.199334][ T6268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.209309][ T6268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.219207][ T6268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.228971][ T6268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.255862][ T4409] Bluetooth: hci12: command 0x0419 tx timeout [ 382.258544][ T6273] veth0_vlan: entered promiscuous mode [ 382.335526][ T4409] Bluetooth: hci13: command 0x0419 tx timeout [ 382.360535][ T6273] veth1_vlan: entered promiscuous mode [ 382.399866][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.416176][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.469747][ T6273] veth0_macvtap: entered promiscuous mode [ 382.479448][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.507456][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.534366][ T6273] veth1_macvtap: entered promiscuous mode [ 382.552628][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.554219][ T5164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.566819][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.582084][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.593946][ T5164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.601745][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.616979][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.627925][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.638128][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.649199][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.668419][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.679280][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.690227][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.701104][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.711246][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.723386][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.734095][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.745457][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.760050][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.770823][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.781436][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.792275][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.802478][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.813264][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.824812][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.836892][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.847118][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.861909][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.872452][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.883732][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.904638][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.938115][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.976355][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.994218][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.015674][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.059905][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.085758][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.106633][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.128349][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.154165][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.183625][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.194346][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.205361][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.215717][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.228770][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.239108][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.250209][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.260921][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.276151][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.288031][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.301734][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.313312][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.324679][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.335311][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.335994][ T6324] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 383.356574][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.367008][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.388479][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.389171][ T6325] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 383.402217][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.447420][ T6273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.458869][ T6273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.468512][ T6273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.482424][ T6273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.594583][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.608864][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.685319][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.694959][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.102372][ T6329] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 431.945603][ T4409] Bluetooth: hci7: command 0x0406 tx timeout [ 431.946459][ T5053] Bluetooth: hci8: command 0x0406 tx timeout [ 437.055686][ T5053] Bluetooth: hci9: command 0x0406 tx timeout 21:16:49 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:16:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xb0, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}]}]}, 0xb0}}, 0x0) 21:16:49 executing program 5: r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) close(r0) 21:16:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, &(0x7f0000000600)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) 21:16:49 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 21:16:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="f6b3", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18}}], 0x18}}], 0x2, 0x4010) [ 438.775824][ T6332] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:16:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xb0, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}]}]}, 0xb0}}, 0x0) 21:16:49 executing program 5: r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) close(r0) 21:16:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xb0, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}]}]}, 0xb0}}, 0x0) 21:16:49 executing program 5: r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) close(r0) [ 438.948210][ T6337] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:16:49 executing program 5: r0 = socket$kcm(0x23, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) close(r0) [ 439.118542][ T6342] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:16:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xb0, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private}}}]}]}, 0xb0}}, 0x0) [ 439.262297][ T6346] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 440.107245][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.113618][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.436223][ T4409] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 440.444743][ T4409] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 440.453439][ T4409] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 440.461212][ T4409] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 440.474033][ T4409] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 440.857031][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 440.956934][ T4409] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 440.975976][ T4409] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 440.984708][ T4409] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 440.993406][ T4409] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 441.001241][ T4409] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 441.009434][ T4409] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 441.018315][ T4409] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 441.029612][ T4409] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 441.036161][ T5059] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 441.044374][ T5059] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 441.052075][ T5059] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 441.143158][ T5049] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 441.151997][ T5049] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 441.164767][ T5049] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 441.172518][ T5049] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 441.183024][ T5049] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 441.234905][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.242506][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.250704][ T6348] bridge_slave_0: entered allmulticast mode [ 441.258768][ T6348] bridge_slave_0: entered promiscuous mode [ 441.318849][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.326422][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.338302][ T6348] bridge_slave_1: entered allmulticast mode [ 441.346032][ T6348] bridge_slave_1: entered promiscuous mode [ 441.422801][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.451197][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.576372][ T6348] team0: Port device team_slave_0 added [ 441.631791][ T6348] team0: Port device team_slave_1 added [ 441.650608][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 441.730236][ T6360] chnl_net:caif_netlink_parms(): no params data found [ 441.755119][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.763077][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.790113][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.826716][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.833732][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.865531][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.898596][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 442.012176][ T6348] hsr_slave_0: entered promiscuous mode [ 442.020885][ T6348] hsr_slave_1: entered promiscuous mode [ 442.028414][ T6348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.038951][ T6348] Cannot create hsr debugfs directory [ 442.054434][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.062803][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.070467][ T6356] bridge_slave_0: entered allmulticast mode [ 442.078967][ T6356] bridge_slave_0: entered promiscuous mode [ 442.112731][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.120360][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.128483][ T6356] bridge_slave_1: entered allmulticast mode [ 442.136774][ T6356] bridge_slave_1: entered promiscuous mode [ 442.194680][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.202600][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.210335][ T6360] bridge_slave_0: entered allmulticast mode [ 442.218361][ T6360] bridge_slave_0: entered promiscuous mode [ 442.253248][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.264396][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.274044][ T6360] bridge_slave_1: entered allmulticast mode [ 442.282148][ T6360] bridge_slave_1: entered promiscuous mode [ 442.291763][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.307685][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.314812][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.322274][ T6364] bridge_slave_0: entered allmulticast mode [ 442.329715][ T6364] bridge_slave_0: entered promiscuous mode [ 442.354034][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.371820][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.380062][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.387581][ T6364] bridge_slave_1: entered allmulticast mode [ 442.394756][ T6364] bridge_slave_1: entered promiscuous mode [ 442.443597][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.459506][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.495850][ T5049] Bluetooth: hci14: command 0x0409 tx timeout [ 442.529894][ T6356] team0: Port device team_slave_0 added [ 442.550528][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.567310][ T6360] team0: Port device team_slave_0 added [ 442.575049][ T6356] team0: Port device team_slave_1 added [ 442.593902][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.605261][ T6360] team0: Port device team_slave_1 added [ 442.686913][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.693899][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.723734][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.736547][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.743527][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.775722][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.798170][ T6364] team0: Port device team_slave_0 added [ 442.804928][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.814730][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.886626][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.917122][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.924105][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.975631][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.037847][ T6348] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.056167][ T5049] Bluetooth: hci15: command 0x0409 tx timeout [ 443.074652][ T6364] team0: Port device team_slave_1 added [ 443.135870][ T5049] Bluetooth: hci16: command 0x0409 tx timeout [ 443.226759][ T5049] Bluetooth: hci17: command 0x0409 tx timeout [ 443.235279][ T6348] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.284898][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.295724][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.355825][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.386162][ T6360] hsr_slave_0: entered promiscuous mode [ 443.393130][ T6360] hsr_slave_1: entered promiscuous mode [ 443.403794][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.411635][ T6360] Cannot create hsr debugfs directory [ 443.456228][ T6348] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.487937][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.494933][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.565458][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.598939][ T6356] hsr_slave_0: entered promiscuous mode [ 443.619264][ T6356] hsr_slave_1: entered promiscuous mode [ 443.635756][ T6356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.643355][ T6356] Cannot create hsr debugfs directory [ 443.703489][ T6348] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.890707][ T6364] hsr_slave_0: entered promiscuous mode [ 443.907091][ T6364] hsr_slave_1: entered promiscuous mode [ 443.915901][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.923504][ T6364] Cannot create hsr debugfs directory [ 444.221972][ T6348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.270321][ T6360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.307846][ T6348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.344570][ T6348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.394507][ T6360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.437235][ T6348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.551543][ T6360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.577518][ T5049] Bluetooth: hci14: command 0x041b tx timeout [ 444.662577][ T6360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.715747][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.738458][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.759513][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.766690][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.811007][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.818198][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.910014][ T6356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.952791][ T6348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.976176][ T6348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.056681][ T6356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.139320][ T5059] Bluetooth: hci15: command 0x041b tx timeout [ 445.190923][ T6356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.233166][ T5059] Bluetooth: hci16: command 0x041b tx timeout [ 445.295912][ T5049] Bluetooth: hci17: command 0x041b tx timeout [ 445.428203][ T6356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.489946][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.598208][ T6348] veth0_vlan: entered promiscuous mode [ 445.691329][ T6364] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.752467][ T6348] veth1_vlan: entered promiscuous mode [ 445.886428][ T6364] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.940495][ T6348] veth0_macvtap: entered promiscuous mode [ 446.031437][ T6364] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.050224][ T6348] veth1_macvtap: entered promiscuous mode [ 446.089604][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.115996][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.145456][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.165564][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.195539][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.215458][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.225313][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.255706][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.276044][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.305624][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.325874][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.347168][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.365486][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.376391][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.386625][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.397426][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.408764][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.421466][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.431891][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.442714][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.455230][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.466845][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.477079][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.496645][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.516502][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.535547][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.545398][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.585474][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.606985][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.649826][ T6364] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.665910][ T5049] Bluetooth: hci14: command 0x040f tx timeout [ 446.707801][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.735771][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.756723][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.775625][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.796239][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.816200][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.835531][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.855460][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.885587][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.906239][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.925622][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.945470][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.955333][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.995578][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.015454][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.035461][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.045315][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.085540][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.105509][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.125561][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.155553][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.185461][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.195315][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.225607][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.225686][ T5049] Bluetooth: hci15: command 0x040f tx timeout [ 447.255761][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.275567][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.295596][ T5049] Bluetooth: hci16: command 0x040f tx timeout [ 447.295628][ T6348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.335783][ T6348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.357667][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.385648][ T5049] Bluetooth: hci17: command 0x040f tx timeout [ 447.412613][ T6348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.423192][ T6348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.434002][ T6348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.443986][ T6348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.595052][ T5107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.613516][ T5107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.633703][ T6360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.647374][ T6360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.672522][ T6360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.672789][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.691223][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.699554][ T6360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.792040][ T6356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.819203][ T6356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.837373][ T6356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.858037][ T6356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.986722][ T6364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.019440][ T6364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.033559][ T6364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.051286][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.069425][ T6364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.116421][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.133441][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.140627][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.179335][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.203678][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.210902][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.241637][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.299022][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.306207][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.350677][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.357883][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.421897][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.482383][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.527572][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.534711][ T5107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.569695][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.576898][ T5107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.722374][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.737971][ T5049] Bluetooth: hci14: command 0x0419 tx timeout [ 448.793177][ T6360] veth0_vlan: entered promiscuous mode [ 448.833456][ T6360] veth1_vlan: entered promiscuous mode [ 448.854450][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.910877][ T6360] veth0_macvtap: entered promiscuous mode [ 448.937351][ T6360] veth1_macvtap: entered promiscuous mode [ 448.980191][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.008998][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.020705][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.046453][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.075578][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.095618][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.105831][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.119812][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.130085][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.142378][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.153360][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.164992][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.175203][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.187683][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.198164][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.209013][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.222658][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.234706][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.244906][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.256992][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.267897][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.279725][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.290118][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.303696][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.307790][ T5049] Bluetooth: hci15: command 0x0419 tx timeout [ 449.316481][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.330542][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.341621][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.352651][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.362933][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.373693][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.386569][ T5049] Bluetooth: hci16: command 0x0419 tx timeout [ 449.394255][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.438737][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.456265][ T5049] Bluetooth: hci17: command 0x0419 tx timeout [ 449.465887][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.486293][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.505727][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.525530][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.556091][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.575944][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.594155][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.605356][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.616159][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.632906][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.646341][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.656512][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.667042][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.676944][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.687522][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.700320][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.711490][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.721497][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.737328][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.748105][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.760064][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.769993][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.781083][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.791031][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.802144][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.812128][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.822686][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.837823][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.848516][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.862714][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.880769][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.892282][ T6360] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.915610][ T6360] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.924374][ T6360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.955601][ T6360] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.182066][ T6356] veth0_vlan: entered promiscuous mode [ 450.210690][ T6364] veth0_vlan: entered promiscuous mode [ 450.228177][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.229051][ T6356] veth1_vlan: entered promiscuous mode [ 450.248166][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.274966][ T6364] veth1_vlan: entered promiscuous mode [ 450.302887][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.311895][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.405191][ T6364] veth0_macvtap: entered promiscuous mode [ 450.438251][ T6356] veth0_macvtap: entered promiscuous mode [ 450.458442][ T6364] veth1_macvtap: entered promiscuous mode [ 450.480248][ T6356] veth1_macvtap: entered promiscuous mode [ 450.509512][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.522033][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.532223][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.548599][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.560709][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.571526][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.592036][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.603202][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.613694][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.624579][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.635511][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.651852][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.662443][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.675163][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.686120][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.697343][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.707740][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.718512][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.729053][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.741532][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.757279][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.768876][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.780904][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.791734][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.802079][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.812873][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.824169][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.835094][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.845374][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.861729][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.872054][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.883200][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.898066][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.920402][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.931970][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.942472][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.959016][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.969293][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.982860][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.993901][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.005568][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.017926][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.028733][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.038889][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.049719][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.066282][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.077288][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.087514][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.098264][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.108631][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.120099][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.131633][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.145546][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.156061][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.172275][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.182603][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.193422][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.203771][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.214646][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.226166][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.238980][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.249651][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.266068][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.276944][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.287710][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.298588][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.309337][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.321393][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.337885][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.352311][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.368416][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.380090][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.390307][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.401058][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.411121][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.422093][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.432246][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.442940][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.452997][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.471235][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.481367][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.492079][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.502204][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.512957][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.523207][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.533957][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.544375][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.555072][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.565236][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.583657][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.594172][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.604957][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.615021][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.635928][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.645988][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.656797][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.666852][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.683144][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.695292][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.706708][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.718642][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.738673][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.750578][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.761727][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.777942][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.789919][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.802634][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.812709][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.823474][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.833693][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.844403][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.854772][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.866253][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.882070][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.892824][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.902874][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.915940][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.926373][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.939296][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.949478][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.960114][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.970266][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.986571][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.996771][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.007464][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.019568][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.031158][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.041344][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.052030][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.062982][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.073682][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.089388][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.101063][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.111229][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.121909][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.135240][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.159447][ T6364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.172697][ T6364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.189631][ T6364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.199169][ T6364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.216843][ T6356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.226449][ T6356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.235193][ T6356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.246080][ T6356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.407461][ T5144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.415368][ T5144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.458888][ T5144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.476056][ T5144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.520747][ T5097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.529086][ T5097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.568880][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.577575][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.923492][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.934684][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.945802][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.956596][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.967749][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.984483][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.994862][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.008208][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.019998][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.031247][ T6415] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.135295][ T6416] net_ratelimit: 4 callbacks suppressed [ 453.135315][ T6416] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 21:17:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 21:17:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xb) 21:17:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) preadv(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001440)=""/23, 0x17}], 0x2, 0x0, 0x0) 21:17:04 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 21:17:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:17:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="f6b3", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18}}], 0x18}}], 0x2, 0x4010) 21:17:04 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) 21:17:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="f6b3", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18}}], 0x18}}], 0x2, 0x4010) [ 453.550406][ T27] audit: type=1804 audit(1686604624.407:141): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/1/memory.events" dev="sda1" ino=2011 res=1 errno=0 21:17:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xb) [ 453.631900][ T6425] bond_slave_0: entered promiscuous mode [ 453.638076][ T6425] bond_slave_1: entered promiscuous mode [ 453.682460][ T27] audit: type=1800 audit(1686604624.437:142): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=2011 res=0 errno=0 [ 453.689065][ T6425] macsec1: entered promiscuous mode 21:17:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="f6b3", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18}}], 0x18}}], 0x2, 0x4010) 21:17:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xb) 21:17:04 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') pwritev(r0, 0x0, 0x0, 0x0, 0x0) [ 453.805366][ T27] audit: type=1804 audit(1686604624.437:143): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/1/memory.events" dev="sda1" ino=2011 res=1 errno=0 [ 453.835503][ T6425] bond0: entered promiscuous mode [ 453.886871][ T6425] bond0: left promiscuous mode [ 453.931324][ T6425] bond_slave_0: left promiscuous mode [ 453.936922][ T6425] bond_slave_1: left promiscuous mode 21:17:05 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 21:17:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) preadv(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001440)=""/23, 0x17}], 0x2, 0x0, 0x0) 21:17:05 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:17:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000000)=@proc, 0xb) [ 454.201172][ T27] audit: type=1804 audit(1686604625.057:144): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/2/memory.events" dev="sda1" ino=2006 res=1 errno=0 [ 454.282512][ T27] audit: type=1800 audit(1686604625.057:145): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=2006 res=0 errno=0 [ 454.373716][ T27] audit: type=1804 audit(1686604625.057:146): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/2/memory.events" dev="sda1" ino=2006 res=1 errno=0 [ 454.401547][ T6456] bond_slave_0: entered promiscuous mode [ 454.407347][ T6456] bond_slave_1: entered promiscuous mode [ 454.426599][ T6456] macsec1: entered promiscuous mode [ 454.444309][ T6456] bond0: entered promiscuous mode [ 454.461785][ T6456] bond0: left promiscuous mode [ 454.475645][ T6456] bond_slave_0: left promiscuous mode [ 454.481175][ T6456] bond_slave_1: left promiscuous mode [ 454.772286][ T6455] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 454.911124][ T6458] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 21:17:06 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:17:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:17:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 21:17:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) preadv(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001440)=""/23, 0x17}], 0x2, 0x0, 0x0) 21:17:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) [ 455.210368][ T27] audit: type=1804 audit(1686604626.067:147): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/3/memory.events" dev="sda1" ino=2006 res=1 errno=0 [ 455.286439][ T27] audit: type=1800 audit(1686604626.097:148): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=2006 res=0 errno=0 21:17:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c3063502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ffd9d34e9821e508bb09e8f915631b970aea2275f8a643bc4e8667b809db397ddfdfc7a1b84a99c7d28fb4e16ea0d410f4207ffd1319f92dbb3225d9436005e5dc8266b7e252e1f54a5007f2d83ab42c7bc557e73cb1435dd1e8d2400146daa5e882f65604f6499c9f910d662d8f3c2b2a491b14e13966939cfbbcd3cdbfaaea38fe7b00"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 455.383350][ T6465] bond_slave_0: entered promiscuous mode [ 455.389185][ T6465] bond_slave_1: entered promiscuous mode [ 455.395364][ T27] audit: type=1804 audit(1686604626.107:149): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/3/memory.events" dev="sda1" ino=2006 res=1 errno=0 [ 455.421475][ T6465] macsec1: entered promiscuous mode [ 455.489411][ T6465] bond0: entered promiscuous mode 21:17:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) preadv(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000001440)=""/23, 0x17}], 0x2, 0x0, 0x0) [ 455.528086][ T6465] bond0: left promiscuous mode [ 455.540272][ T6465] bond_slave_0: left promiscuous mode [ 455.546911][ T6465] bond_slave_1: left promiscuous mode [ 455.707175][ T6466] bond_slave_0: entered promiscuous mode [ 455.713895][ T6466] bond_slave_1: entered promiscuous mode [ 455.744114][ T27] audit: type=1804 audit(1686604626.597:150): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/4/memory.events" dev="sda1" ino=2021 res=1 errno=0 [ 455.758636][ T6466] macsec1: entered promiscuous mode [ 455.833294][ T6466] bond0: entered promiscuous mode [ 455.878466][ T6466] bond0: left promiscuous mode [ 455.896741][ T6466] bond_slave_0: left promiscuous mode [ 455.902431][ T6466] bond_slave_1: left promiscuous mode 21:17:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:17:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 21:17:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) [ 456.173511][ T6471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 456.536148][ T6495] bond_slave_0: entered promiscuous mode [ 456.541966][ T6495] bond_slave_1: entered promiscuous mode 21:17:07 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 456.616969][ T6495] macsec1: entered promiscuous mode [ 456.652177][ T6495] bond0: entered promiscuous mode [ 456.702332][ T6495] bond0: left promiscuous mode [ 456.754347][ T6495] bond_slave_0: left promiscuous mode [ 456.760004][ T6495] bond_slave_1: left promiscuous mode [ 456.896119][ T6494] bond_slave_0: entered promiscuous mode [ 456.901916][ T6494] bond_slave_1: entered promiscuous mode [ 456.963994][ T6494] macsec1: entered promiscuous mode [ 457.004038][ T6494] bond0: entered promiscuous mode [ 457.063624][ T6494] bond0: left promiscuous mode [ 457.086257][ T6494] bond_slave_0: left promiscuous mode [ 457.091836][ T6494] bond_slave_1: left promiscuous mode [ 457.227384][ T6496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.243493][ T6497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:17:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000024000b0e0000c0204b267c3d832a50c0", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c00058018000100e0ffffff000000000000000000000000000000000800070001"], 0x70}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3}, 0x14) 21:17:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 457.522837][ T6503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:17:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 21:17:08 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x27}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0001000000000000ffffff8180"], 0x1c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xb}, {0x0, 0xc}, {0xffe0, 0xb}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_POLICE={0x20, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5c}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4098) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca000000000000eeff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf91bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x0, 0x6, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2}, 0x5, 0x1, 0x0, 0x0, "08867c47a8a41fb91254372d2f88a493aba564d21952eb69cd29a0839a9a4e838eacc7d32dd89af7f94e72228e182b789631fd5453227c1bbf5b959c491c56a6"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x44000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe83, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x115, 0x819ad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) [ 457.789265][ T6506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:17:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 458.024462][ T6509] __nla_validate_parse: 4078 callbacks suppressed [ 458.024483][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 21:17:08 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c3063502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ffd9d34e9821e508bb09e8f915631b970aea2275f8a643bc4e8667b809db397ddfdfc7a1b84a99c7d28fb4e16ea0d410f4207ffd1319f92dbb3225d9436005e5dc8266b7e252e1f54a5007f2d83ab42c7bc557e73cb1435dd1e8d2400146daa5e882f65604f6499c9f910d662d8f3c2b2a491b14e13966939cfbbcd3cdbfaaea38fe7b00"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 458.236288][ T6523] bond_slave_0: entered promiscuous mode [ 458.242093][ T6523] bond_slave_1: entered promiscuous mode [ 458.310353][ T6523] macsec1: entered promiscuous mode 21:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x700}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 458.344225][ T6523] bond0: entered promiscuous mode [ 458.383056][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.393758][ T6523] bond0: left promiscuous mode [ 458.405990][ T6523] bond_slave_0: left promiscuous mode [ 458.411557][ T6523] bond_slave_1: left promiscuous mode [ 458.419479][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.452663][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.555706][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.614778][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.639890][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 458.657147][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 21:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x700}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 458.694869][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.766049][ T6520] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 21:17:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x8b, 0x0, 0x5, 0x3, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @exit, @cb_func={0x18, 0xf, 0x4, 0x0, 0x5}, @generic={0xd, 0x8, 0x7, 0x6, 0xaa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x481}], &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet6(r3, &(0x7f0000000580)="6ccfdf19b55dfe4241e28bc56b1d81351574bae8d0f05b24ae65538666ca5445e0e90ec0049db76ea40656b7dfe9b4f09bb046e5611742d5246ebe5cc94f37a461c3ff33c9cfce58b54b42254b38e22572d4852ea46a9e56824a962c7cabfa40ce0dfa292c03475b69ea56ce427766e3bfb188e6f085ebda9ccaa19c18ed8960af88074c6d156d916bfbfba7d7823ec054fe96fe9f1cfd80622c1e12d232b608e638339543a49a6b0f0416d6a6b23824a9689d4d8c1653b2652b04cbff0d61f46b691404c675fd39", 0xc8, 0x40841, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000480)=""/81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000380)=@raw=[@generic={0x3, 0x0, 0x3, 0x7, 0x1}, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xbf, &(0x7f0000000880)=""/191, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r5, r0]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000300000000000000000000004001c00ffffffff2500feff0000000095000000d3d100e9333c5c8300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f0000000a00)=""/58, 0x3a}, {&(0x7f0000000fc0)=""/145, 0x91}], 0x6}, 0x6}], 0x1, 0x101, &(0x7f0000000840)) 21:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x700}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) 21:17:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x700}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0) [ 459.069271][ T6548] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 459.098505][ T6534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 459.217810][ T6525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:17:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) 21:17:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) 21:17:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000001440)={0x2, 0x0, @multicast2}, 0x8, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) [ 459.531050][ T6541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:17:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) 21:17:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x8b, 0x0, 0x5, 0x3, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @exit, @cb_func={0x18, 0xf, 0x4, 0x0, 0x5}, @generic={0xd, 0x8, 0x7, 0x6, 0xaa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x481}], &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet6(r3, &(0x7f0000000580)="6ccfdf19b55dfe4241e28bc56b1d81351574bae8d0f05b24ae65538666ca5445e0e90ec0049db76ea40656b7dfe9b4f09bb046e5611742d5246ebe5cc94f37a461c3ff33c9cfce58b54b42254b38e22572d4852ea46a9e56824a962c7cabfa40ce0dfa292c03475b69ea56ce427766e3bfb188e6f085ebda9ccaa19c18ed8960af88074c6d156d916bfbfba7d7823ec054fe96fe9f1cfd80622c1e12d232b608e638339543a49a6b0f0416d6a6b23824a9689d4d8c1653b2652b04cbff0d61f46b691404c675fd39", 0xc8, 0x40841, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000480)=""/81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000380)=@raw=[@generic={0x3, 0x0, 0x3, 0x7, 0x1}, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xbf, &(0x7f0000000880)=""/191, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r5, r0]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000300000000000000000000004001c00ffffffff2500feff0000000095000000d3d100e9333c5c8300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f0000000a00)=""/58, 0x3a}, {&(0x7f0000000fc0)=""/145, 0x91}], 0x6}, 0x6}], 0x1, 0x101, &(0x7f0000000840)) 21:17:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/330], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)="3900000013001104680907000000000f0000ff3f04000000290a001700000000040037000a0003", 0x27}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a01010000000000000000020000000900010073797a300000000080000000030a4f200000000000000000020000000900010073797a300000000009"], 0xdc}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) sendfile(r8, r7, 0x0, 0x800000000000c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = gettid() r11 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878394}, 0x9c) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYRES32=r8], 0x4) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x1000000000000330, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 459.690478][ T6564] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 459.692065][ T6547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 21:17:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) 21:17:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000107000000800000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000000c0)=""/10, 0x1a}, {&(0x7f00000002c0)=""/4096, 0xf12}, {&(0x7f0000000140)=""/13, 0xd}], 0x3}}], 0x2, 0x0, 0x0) 21:17:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000001440)={0x2, 0x0, @multicast2}, 0x8, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) 21:17:10 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000107000000800000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000000c0)=""/10, 0x1a}, {&(0x7f00000002c0)=""/4096, 0xf12}, {&(0x7f0000000140)=""/13, 0xd}], 0x3}}], 0x2, 0x0, 0x0) 21:17:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 21:17:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000001440)={0x2, 0x0, @multicast2}, 0x8, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) 21:17:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 21:17:10 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 21:17:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x8b, 0x0, 0x5, 0x3, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @exit, @cb_func={0x18, 0xf, 0x4, 0x0, 0x5}, @generic={0xd, 0x8, 0x7, 0x6, 0xaa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x481}], &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet6(r3, &(0x7f0000000580)="6ccfdf19b55dfe4241e28bc56b1d81351574bae8d0f05b24ae65538666ca5445e0e90ec0049db76ea40656b7dfe9b4f09bb046e5611742d5246ebe5cc94f37a461c3ff33c9cfce58b54b42254b38e22572d4852ea46a9e56824a962c7cabfa40ce0dfa292c03475b69ea56ce427766e3bfb188e6f085ebda9ccaa19c18ed8960af88074c6d156d916bfbfba7d7823ec054fe96fe9f1cfd80622c1e12d232b608e638339543a49a6b0f0416d6a6b23824a9689d4d8c1653b2652b04cbff0d61f46b691404c675fd39", 0xc8, 0x40841, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000480)=""/81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000380)=@raw=[@generic={0x3, 0x0, 0x3, 0x7, 0x1}, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xbf, &(0x7f0000000880)=""/191, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r5, r0]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000300000000000000000000004001c00ffffffff2500feff0000000095000000d3d100e9333c5c8300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f0000000a00)=""/58, 0x3a}, {&(0x7f0000000fc0)=""/145, 0x91}], 0x6}, 0x6}], 0x1, 0x101, &(0x7f0000000840)) [ 460.549997][ T6592] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 460.564006][ T6593] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 21:17:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xe, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x8b, 0x0, 0x5, 0x3, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @exit, @cb_func={0x18, 0xf, 0x4, 0x0, 0x5}, @generic={0xd, 0x8, 0x7, 0x6, 0xaa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x481}], &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet6(r3, &(0x7f0000000580)="6ccfdf19b55dfe4241e28bc56b1d81351574bae8d0f05b24ae65538666ca5445e0e90ec0049db76ea40656b7dfe9b4f09bb046e5611742d5246ebe5cc94f37a461c3ff33c9cfce58b54b42254b38e22572d4852ea46a9e56824a962c7cabfa40ce0dfa292c03475b69ea56ce427766e3bfb188e6f085ebda9ccaa19c18ed8960af88074c6d156d916bfbfba7d7823ec054fe96fe9f1cfd80622c1e12d232b608e638339543a49a6b0f0416d6a6b23824a9689d4d8c1653b2652b04cbff0d61f46b691404c675fd39", 0xc8, 0x40841, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000480)=""/81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x7, &(0x7f0000000380)=@raw=[@generic={0x3, 0x0, 0x3, 0x7, 0x1}, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xbf, &(0x7f0000000880)=""/191, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x4, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r5, r0]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.numa_stat\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000300000000000000000000004001c00ffffffff2500feff0000000095000000d3d100e9333c5c8300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r7, &(0x7f0000000500)=[{{&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f0000000a00)=""/58, 0x3a}, {&(0x7f0000000fc0)=""/145, 0x91}], 0x6}, 0x6}], 0x1, 0x101, &(0x7f0000000840)) 21:17:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 21:17:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000107000000800000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000000c0)=""/10, 0x1a}, {&(0x7f00000002c0)=""/4096, 0xf12}, {&(0x7f0000000140)=""/13, 0xd}], 0x3}}], 0x2, 0x0, 0x0) 21:17:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000001440)={0x2, 0x0, @multicast2}, 0x8, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) 21:17:11 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:11 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:11 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000107000000800000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000087c0)=[{{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000000c0)=""/10, 0x1a}, {&(0x7f00000002c0)=""/4096, 0xf12}, {&(0x7f0000000140)=""/13, 0xd}], 0x3}}], 0x2, 0x0, 0x0) 21:17:11 executing program 4: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:11 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 21:17:12 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) [ 461.098297][ T6598] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 461.239762][ T6617] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 21:17:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) 21:17:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r2, 0x803}, 0x14}}, 0x0) 21:17:12 executing program 4: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:12 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 21:17:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) 21:17:12 executing program 2: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) 21:17:12 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd3000fedbdf25270000000800020052664b22d9"], 0x54}}, 0x0) 21:17:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r2, 0x803}, 0x14}}, 0x0) 21:17:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000008b40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ed", 0x1}], 0x1, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x41}}], 0x30}], 0x1, 0xfc) 21:17:12 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 21:17:12 executing program 4: socketpair(0x15, 0x5, 0x0, &(0x7f0000001200)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @remote, 0x3}, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1, {[0xfff, 0x5, 0x0, 0x200, 0x25, 0x200, 0x1, 0x4]}}, 0x5c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 21:17:12 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd3000fedbdf25270000000800020052664b22d9"], 0x54}}, 0x0) 21:17:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) 21:17:12 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 21:17:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:17:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000008b40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ed", 0x1}], 0x1, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x41}}], 0x30}], 0x1, 0xfc) 21:17:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r2, 0x803}, 0x14}}, 0x0) 21:17:12 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd3000fedbdf25270000000800020052664b22d9"], 0x54}}, 0x0) 21:17:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:12 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 21:17:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, r2, 0x803}, 0x14}}, 0x0) 21:17:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000008b40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ed", 0x1}], 0x1, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x41}}], 0x30}], 0x1, 0xfc) 21:17:12 executing program 5: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd3000fedbdf25270000000800020052664b22d9"], 0x54}}, 0x0) 21:17:13 executing program 1: unshare(0x60020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:17:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 462.143446][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 462.143463][ T27] audit: type=1804 audit(1686604632.997:153): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/15/cgroup.controllers" dev="sda1" ino=1989 res=1 errno=0 21:17:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:17:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000008b40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ed", 0x1}], 0x1, &(0x7f0000000140)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x41}}], 0x30}], 0x1, 0xfc) [ 462.257323][ T5164] IPVS: starting estimator thread 0... 21:17:13 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) [ 462.330924][ T5107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.345806][ T6672] IPVS: using max 17 ests per chain, 40800 per kthread [ 462.375834][ T5107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:17:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:17:13 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 21:17:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 462.690864][ T27] audit: type=1804 audit(1686604633.547:154): pid=6691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/16/cgroup.controllers" dev="sda1" ino=1999 res=1 errno=0 21:17:13 executing program 1: unshare(0x60020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:17:13 executing program 0: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) [ 462.881269][ T27] audit: type=1804 audit(1686604633.747:155): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/15/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 21:17:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 463.064552][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.083935][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:17:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x0, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:17:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) [ 463.341324][ T27] audit: type=1804 audit(1686604634.197:156): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/17/cgroup.controllers" dev="sda1" ino=2009 res=1 errno=0 21:17:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) [ 463.465907][ T27] audit: type=1804 audit(1686604634.327:157): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/80/cgroup.controllers" dev="sda1" ino=2000 res=1 errno=0 21:17:14 executing program 5: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) 21:17:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:14 executing program 1: unshare(0x60020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 463.698123][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.717164][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:17:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) [ 463.739796][ T27] audit: type=1804 audit(1686604634.597:158): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/16/cgroup.controllers" dev="sda1" ino=2018 res=1 errno=0 21:17:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:14 executing program 5: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) [ 463.840824][ T5164] IPVS: starting estimator thread 0... 21:17:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) [ 463.909069][ T27] audit: type=1804 audit(1686604634.767:159): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/18/cgroup.controllers" dev="sda1" ino=2009 res=1 errno=0 [ 463.975655][ T6738] IPVS: using max 22 ests per chain, 52800 per kthread [ 464.045606][ T27] audit: type=1804 audit(1686604634.887:160): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/81/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 21:17:15 executing program 5: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000140)=""/58, 0x67, 0x3a}, 0x20) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0xfc, 0x4, 0x0, 0xfffffffffffff800, 0x5999c176c949b1, 0x6, 0x5956, 0x54, 0x40, 0x298, 0xff, 0x7f, 0x38, 0x1, 0x71, 0xd0, 0x3fd}, [{0x0, 0x0, 0x0, 0x0, 0x8, 0xf79, 0x0, 0x4}], "036f66ea39472c74b545600cf402611d732228201de4b5c9ffeefc50a9d5560dba5a99de7ab7e464cb76773b9274021b6d4a275a879fb5ea99bede1c86cc29da298184e6cc9b5968ecebda9fca1a2d2c0644352cec11288c9c9e3d2c2ff7680b45664753864cd85f2f83", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000d00)={0x40000000}) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x417}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010102, 0x0, 0x8006, 'sh\x00', 0x17}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x11, @remote, 0x0, 0x0, 'sh\x00'}, 0x2c) [ 464.189969][ T27] audit: type=1804 audit(1686604635.007:161): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/16/cgroup.controllers" dev="sda1" ino=2001 res=1 errno=0 21:17:15 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) [ 464.388202][ T27] audit: type=1804 audit(1686604635.247:162): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/17/cgroup.controllers" dev="sda1" ino=2019 res=1 errno=0 [ 464.435887][ T6301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.458392][ T6301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:17:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x3d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20048085) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r12, r14, &(0x7f0000000380)=0x1f, 0x7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x33c, r9, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x0, 0x1, 0x40, 0x1}}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_IE={0x1e0, 0x2a, [@fast_bss_trans={0x37, 0xab, {0xf3, 0x4, "d3c17d91073e274a713b714c32e1e9b9", "efdb1a3c996e25931087162d12104b477eef961752c585b535799518f35bb03c", "e7b0a5f3f7dc37d6e62302c85820b1480ed84571d3c79076cca94e31514718e2", [{0x4, 0x11, "ce97213223c51c8c3a74d89b51adbdb21f"}, {0x3, 0x1e, "dddc01cb1e1384ce3335c9b968c0b5670b598c223c64e3121c83dc30abf9"}, {0x1, 0x9, "41c7ffdc9d97d910c5"}, {0x1, 0x19, "7cdd1fd268f0e9c98d00e618c4bfd66b67f598d9f3c34d15ad"}]}}, @measure_req={0x26, 0x5c, {0x8, 0x6, 0x0, "94b08a7b85fee9ec3537405de5f3be841295e5a832bd2d7b7b2587873419e7420c1c01fe402a07cfb67e74126bd3316af28871279b8e8361f45a37669c21fa2c35dc2f8492b2f112fd0ab3804992093b70a3fca04cec856f73"}}, @measure_req={0x26, 0xc1, {0x20, 0x0, 0x4, "5c190d5063aee105648ac891af3880667c48f1ff1b20eb630a7dc9f557ebe0019e3df86191e2611c60383ad44f6e0b57887bc83a43f0a4276b0aa8006bd0f9467382877a3c4355a72a36d9475585acdba3a3a9f555dd22db933658f3cfa2e16ad5f4dc547f8c36e5fbda32dbedad42768522233772d8698aac509c2f6905b82bfc1fc468519076466a390487b5896ec52188022877d8e03e309d51a0f23de395a115e3ce75623156f0f67e62207e10a87e42f80dc7ccef315a0a1792e044"}}, @ssid, @ibss={0x6, 0x2, 0x1}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0xb, 0xff}}]}, @NL80211_ATTR_KEYS={0x114, 0x51, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "26075a98ed5fcbd8"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e4eb8a9ec"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9f38efaf8"}, @NL80211_KEY_SEQ={0x5, 0x4, "86"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b599144521"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f92bd9e3009437b846d95a1b4a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad96d2441d26fa17a0f0585e0c"}, @NL80211_KEY_SEQ={0xf, 0x4, "42c33927b04e3ccdcee4e9"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8a7e62475d15c06073b48bbb8d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "67d93a2832"}]}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40008840}, 0x20000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000370f000008000300", @ANYRES32=r7, @ANYBLOB="080026006c0900000800570080"], 0x2c}}, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)=""/135, &(0x7f0000000400)=0x87) sendfile(r5, r1, 0x0, 0x10000a006) 21:17:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:15 executing program 1: unshare(0x60020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 21:17:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:15 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:15 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) 21:17:16 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000950000040000000092e1e6cb9d03d87cf4dc40b204e444db0c7df7dca48df09fd83968e8f0f90406b2ea868cb44472473395abb96d3084a9de0f8bbc8c418440886c129c5d72a16fc6cdadb3cb5aa4d49021a1db9c70cf0905c2e12fae42a1c6a73c5648285979e74a8ca8f510f87644c30e807f9966538eab7f7a1d75f8b63a4251167008366f49d7f0ba709c489dbaafb0e434305746860a035a628d75cf6c3ce47485e87678b7ad1c34fdb22885e677700fa1d3a49184aa43988faf29931c452d8b09fe4783e13237623740709174aedb6f37bba9015f9d07473ed2fde651d0297765f19176c4b2e6fade10307b5a07168713c406f99c83c7b15ab7a4d07ce83b27b86fb0b08964a842f4dfb7836aee289d19cc318f3ee00681"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 21:17:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x8, 0x8e3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:17:16 executing program 1: pipe(&(0x7f0000000080)) unshare(0x4c000080) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000d00)) 21:17:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x8, 0x8e3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:17:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x8, 0x8e3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:17:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x8, 0x8e3, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:17:17 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:17 executing program 1: pipe(&(0x7f0000000080)) unshare(0x4c000080) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000d00)) [ 465.727515][ T6760] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 467.571366][ T6810] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 21:17:18 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 21:17:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:18 executing program 1: pipe(&(0x7f0000000080)) unshare(0x4c000080) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000d00)) [ 467.910418][ T6825] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 468.227032][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 468.227048][ T27] audit: type=1804 audit(1686604639.087:166): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/84/memory.events" dev="sda1" ino=2018 res=1 errno=0 21:17:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 468.638794][ T27] audit: type=1804 audit(1686604639.497:167): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/22/memory.events" dev="sda1" ino=2022 res=1 errno=0 21:17:19 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:19 executing program 1: pipe(&(0x7f0000000080)) unshare(0x4c000080) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000d00)) 21:17:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 21:17:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 469.785392][ T6855] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 470.020285][ T27] audit: type=1804 audit(1686604640.877:168): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/23/memory.events" dev="sda1" ino=2024 res=1 errno=0 21:17:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:21 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) [ 470.522529][ T27] audit: type=1804 audit(1686604641.377:169): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/23/memory.events" dev="sda1" ino=2005 res=1 errno=0 21:17:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000950000040000000092e1e6cb9d03d87cf4dc40b204e444db0c7df7dca48df09fd83968e8f0f90406b2ea868cb44472473395abb96d3084a9de0f8bbc8c418440886c129c5d72a16fc6cdadb3cb5aa4d49021a1db9c70cf0905c2e12fae42a1c6a73c5648285979e74a8ca8f510f87644c30e807f9966538eab7f7a1d75f8b63a4251167008366f49d7f0ba709c489dbaafb0e434305746860a035a628d75cf6c3ce47485e87678b7ad1c34fdb22885e677700fa1d3a49184aa43988faf29931c452d8b09fe4783e13237623740709174aedb6f37bba9015f9d07473ed2fde651d0297765f19176c4b2e6fade10307b5a07168713c406f99c83c7b15ab7a4d07ce83b27b86fb0b08964a842f4dfb7836aee289d19cc318f3ee00681"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 470.582308][ T6863] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 471.211913][ T27] audit: type=1804 audit(1686604642.067:170): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/86/memory.events" dev="sda1" ino=2011 res=1 errno=0 [ 471.437159][ T27] audit: type=1804 audit(1686604642.297:171): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/24/memory.events" dev="sda1" ino=2017 res=1 errno=0 21:17:22 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 471.890086][ T27] audit: type=1804 audit(1686604642.747:172): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/24/memory.events" dev="sda1" ino=1995 res=1 errno=0 [ 472.057418][ T6891] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 472.227431][ T27] audit: type=1804 audit(1686604643.087:173): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/25/memory.events" dev="sda1" ino=2018 res=1 errno=0 21:17:23 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:23 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 472.829603][ T27] audit: type=1804 audit(1686604643.687:174): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/87/memory.events" dev="sda1" ino=2010 res=1 errno=0 [ 473.017688][ T27] audit: type=1804 audit(1686604643.877:175): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/25/memory.events" dev="sda1" ino=2017 res=1 errno=0 21:17:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000950000040000000092e1e6cb9d03d87cf4dc40b204e444db0c7df7dca48df09fd83968e8f0f90406b2ea868cb44472473395abb96d3084a9de0f8bbc8c418440886c129c5d72a16fc6cdadb3cb5aa4d49021a1db9c70cf0905c2e12fae42a1c6a73c5648285979e74a8ca8f510f87644c30e807f9966538eab7f7a1d75f8b63a4251167008366f49d7f0ba709c489dbaafb0e434305746860a035a628d75cf6c3ce47485e87678b7ad1c34fdb22885e677700fa1d3a49184aa43988faf29931c452d8b09fe4783e13237623740709174aedb6f37bba9015f9d07473ed2fde651d0297765f19176c4b2e6fade10307b5a07168713c406f99c83c7b15ab7a4d07ce83b27b86fb0b08964a842f4dfb7836aee289d19cc318f3ee00681"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 21:17:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 473.450999][ T6906] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 473.575589][ T27] audit: type=1804 audit(1686604644.417:176): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/23/memory.events" dev="sda1" ino=2021 res=1 errno=0 [ 473.797282][ T27] audit: type=1804 audit(1686604644.657:177): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/26/memory.events" dev="sda1" ino=2018 res=1 errno=0 21:17:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:25 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) [ 474.332044][ T27] audit: type=1804 audit(1686604645.187:178): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/88/memory.events" dev="sda1" ino=2010 res=1 errno=0 21:17:25 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 21:17:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) [ 475.233411][ T27] audit: type=1804 audit(1686604646.087:179): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/24/memory.events" dev="sda1" ino=2020 res=1 errno=0 [ 475.407367][ T27] audit: type=1804 audit(1686604646.267:180): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/27/memory.events" dev="sda1" ino=2018 res=1 errno=0 21:17:26 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0xa, 'pimreg\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0xfff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="e81a72e01d5a792cdd752c07cf5933cc736b814dc2c77d2a0e12788fb9f3e751d5da63a9e36695d603ec852e", 0x2c) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="947e2ce0496824073e3b437aa48c7cd64ac75591d85b0578fb2d2677b6de9063718c0625323838cac33084aaaf522b513fd0bb08a69254a88cf246128205143d15931541b1a74eb9169ffe2e19f51239b773d90cabd694d2d4113ec01132b96b87d9e46a1937a5faff1566cd2e2cc5e52854806d2c2b428a2478f705f07d28881bc9263f6c2fc9f4cd288e3d9604ef", 0xdd) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x8}, 0x400c484) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) [ 475.898290][ T27] audit: type=1804 audit(1686604646.757:181): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/89/memory.events" dev="sda1" ino=2008 res=1 errno=0 [ 476.012059][ T6940] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 21:17:27 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x20}) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)) getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000480)=""/81, &(0x7f0000000100)=0x51) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x400, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, 'memory.events\x00'}, {0x20, '/dev/net/tun\x00'}], 0xa, "351c9163008b546dae3b700c1a4015a503f284fe9ac8d2e74b916250e74f2d64e771a1df407cba2b803414ce9fb94b7ac67b0be95af10c81ef5427df893cd7eeb0a4ae9ade117a20ca6eb300b8b9d9385efda0a29bbf06638866def59b249e3e24657bd9fa3303d02ef01cc96303b77f19339b5a6a5607503ca00742c7459b0d4a518edd9f0039b86397b9d319bdd9a43d108f4d4b1a6552bd8fae0be1d4ba04966d875074b5283ecfc7ccf62aa23ca1750ab43ccc0b9baf76d91b1eaf2c523da3e2a59519f61b5701"}, 0xff) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000283a0020010000000000000000000000000001ff0200000000000000000000000000018900907800000000fc000000000000000000000000000000ff020000000000000001000000000000"], 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x20}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r4, 0x0, 0x8}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000540)={0x1, 0x1, [0xf5f, 0x0, 0x49e, 0x9fc]}) syz_emit_ethernet(0xc3, &(0x7f00000007c0)={@remote, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3}], @llc={@snap={0xaa, 0x1, "9b", "567c13", 0x4305, "2d92e046d6e7158db0944b88fb9e5ab66ef15d2631c676388a1b87bd323b913e433207486489bed4e92398b073d7ca1253dfcbbaaa22c582d688fe84ac174e02c2541cbcea6b925aedbc744d75b891189fb36b235e3a7f930ec2bcd4549f9d324502714b94f9c31bf8a16fd3036a32d6abf2547e485ba186aa58e19c6978291386011248407c1463d1944a6208a65ff25673a9d523b67c1064d319538df8dc1fe3719266ffbbf78ef9"}}}}}}, 0x0) ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000500)={'batadv0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x521240, 0x0) write$tun(r7, &(0x7f0000000380)={@void, @val={0x0, 0x80, 0x6, 0x0, 0x7, 0x3ff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @multicast, @private0, @random="011707bfa19e", @mcast1}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) 21:17:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:27 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) [ 476.149106][ T6949] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 477.038621][ T27] audit: type=1804 audit(1686604647.897:182): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/25/memory.events" dev="sda1" ino=2011 res=1 errno=0 21:17:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:28 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 21:17:28 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 21:17:28 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 21:17:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000000)={'wpan3\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x89a1, &(0x7f0000000000)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 21:17:28 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) [ 477.816210][ T27] audit: type=1804 audit(1686604648.677:183): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/28/cgroup.controllers" dev="sda1" ino=2014 res=1 errno=0 [ 478.022696][ T27] audit: type=1804 audit(1686604648.877:184): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/28/memory.events" dev="sda1" ino=2015 res=1 errno=0 21:17:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) [ 478.583448][ T6976] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 21:17:30 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) 21:17:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) 21:17:30 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/n_q@\x11n_max\x00'/36}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='device_pm_callback_start\x00', r2}, 0x10) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000002c0), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x0, 0x9527, 0xd1d, 0x80000000, 0x9}) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0xfd3678f9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1c) write$cgroup_int(r4, &(0x7f0000000240)=0x1, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) mkdirat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x80, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r8, 0x11c, 0x3, &(0x7f0000000080)=""/4088, &(0x7f0000001080)=0xff8) getpid() write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 21:17:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) 21:17:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) 21:17:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) 21:17:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14}, 0x14}}, 0x0) [ 478.883708][ T6985] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 479.894623][ T27] audit: type=1804 audit(1686604650.747:185): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/29/memory.events" dev="sda1" ino=2017 res=1 errno=0 21:17:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) [ 480.217153][ T27] audit: type=1804 audit(1686604651.077:186): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/29/memory.events" dev="sda1" ino=2017 res=1 errno=0 [ 480.466531][ T27] audit: type=1804 audit(1686604651.327:187): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/98/cgroup.controllers" dev="sda1" ino=2001 res=1 errno=0 [ 480.882112][ T27] audit: type=1804 audit(1686604651.737:188): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/98/memory.events" dev="sda1" ino=2002 res=1 errno=0 21:17:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) [ 480.941301][ T7035] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 481.641629][ T7055] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 481.910341][ T27] audit: type=1804 audit(1686604652.757:189): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/29/cgroup.controllers" dev="sda1" ino=2025 res=1 errno=0 [ 482.308641][ T27] audit: type=1804 audit(1686604653.167:190): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/29/memory.events" dev="sda1" ino=1992 res=1 errno=0 21:17:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="e336ce46feaf47a81af071f4582a7a28449e9e72e2c3e59b2bb9cfd5", 0x1c}, {&(0x7f00000003c0)="84d13b1d1ce73cc454d3cf3563cdc0bb80d1f5ded520bb70eb11b5071b", 0x1d}, {&(0x7f0000000540)="5bb7db", 0x3}, {&(0x7f0000000400)="2976280d910aebc8b8bff1780ab747f7dc53d996db3d23f0b68c7f6a124f16ef5aa658af37456ddfea7af04fd461d990d15cd4607851b9f5f0105d06184a09e40ba73c9c15d470223306b69a49615125f06055c8192cc20bf7cebba1e402efc1530ee349ba934c362f24b4d05a6af73cfd70ce1a39a9622b360e9e68e0005c61abc9240c81aec682e3a6c71d56408743872769a2a112", 0x96}, {&(0x7f0000000280)="d21967220a29e2bf46274b48224ee0067a738694f20022b231e82179c8801e3bd4237100", 0x24}, {&(0x7f00000000c0)="50a9", 0x2}], 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb336a9bed9c3520d, 0x0) 21:17:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}}, 0x0) 21:17:33 executing program 2: bind$ax25(0xffffffffffffffff, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x100000001, 0x3f4, 0x7f}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x89}, 0x38) [ 482.788501][ T27] audit: type=1804 audit(1686604653.647:191): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/30/cgroup.controllers" dev="sda1" ino=2013 res=1 errno=0 21:17:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}}, 0x0) 21:17:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) [ 483.030395][ T27] audit: type=1804 audit(1686604653.887:192): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/30/cgroup.controllers" dev="sda1" ino=2023 res=1 errno=0 21:17:34 executing program 2: bind$ax25(0xffffffffffffffff, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x100000001, 0x3f4, 0x7f}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x89}, 0x38) 21:17:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}}, 0x0) [ 483.183362][ T27] audit: type=1804 audit(1686604654.037:193): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/30/memory.events" dev="sda1" ino=1989 res=1 errno=0 [ 483.457722][ T27] audit: type=1804 audit(1686604654.317:194): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/30/memory.events" dev="sda1" ino=2004 res=1 errno=0 21:17:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}]}}]}, 0x38}}, 0x0) 21:17:34 executing program 2: bind$ax25(0xffffffffffffffff, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x100000001, 0x3f4, 0x7f}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x89}, 0x38) 21:17:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x6e8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x2d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x19, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x6e8}}, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 484.954468][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 484.954485][ T27] audit: type=1804 audit(1686604655.807:199): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir666398443/syzkaller.zitKQW/100/cgroup.controllers" dev="sda1" ino=2008 res=1 errno=0 [ 485.187888][ T27] audit: type=1804 audit(1686604656.047:200): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/31/cgroup.controllers" dev="sda1" ino=2013 res=1 errno=0 [ 485.531472][ T27] audit: type=1804 audit(1686604656.387:201): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/31/memory.events" dev="sda1" ino=2015 res=1 errno=0 21:17:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:36 executing program 2: bind$ax25(0xffffffffffffffff, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x100000001, 0x3f4, 0x7f}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r2, 0x0, 0x89}, 0x38) 21:17:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x6e8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x2d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x19, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x6e8}}, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 21:17:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) [ 486.096110][ T27] audit: type=1804 audit(1686604656.957:202): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/31/cgroup.controllers" dev="sda1" ino=2018 res=1 errno=0 21:17:37 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @dev}}, 0x24) [ 486.230430][ T27] audit: type=1804 audit(1686604657.077:203): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir666398443/syzkaller.zitKQW/101/cgroup.controllers" dev="sda1" ino=2019 res=1 errno=0 21:17:37 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @dev}}, 0x24) [ 486.337682][ T27] audit: type=1804 audit(1686604657.147:204): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/100/cgroup.controllers" dev="sda1" ino=2007 res=1 errno=0 21:17:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x6e8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x2d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x19, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x6e8}}, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 486.457294][ T27] audit: type=1804 audit(1686604657.167:205): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/31/cgroup.controllers" dev="sda1" ino=2023 res=1 errno=0 21:17:37 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @dev}}, 0x24) [ 486.627913][ T27] audit: type=1804 audit(1686604657.417:206): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/31/memory.events" dev="sda1" ino=2004 res=1 errno=0 21:17:37 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @dev}}, 0x24) [ 486.882807][ T27] audit: type=1804 audit(1686604657.577:207): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/100/memory.events" dev="sda1" ino=2024 res=1 errno=0 [ 487.218656][ T27] audit: type=1804 audit(1686604657.587:208): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir681151472/syzkaller.EtYoAf/31/memory.events" dev="sda1" ino=2025 res=1 errno=0 21:17:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x6e8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x2d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x3d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x19, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x15, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x25, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HT={0x51, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x6e8}}, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 21:17:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) bind$netrom(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x100000001) socket$inet(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x40) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 21:17:39 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x26, [{0x0, 0x1}, {0x0, 0x1}]}]}}, &(0x7f0000000300)=""/188, 0x4a, 0xbc, 0x1}, 0x20) 21:17:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:39 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x26, [{0x0, 0x1}, {0x0, 0x1}]}]}}, &(0x7f0000000300)=""/188, 0x4a, 0xbc, 0x1}, 0x20) 21:17:39 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x26, [{0x0, 0x1}, {0x0, 0x1}]}]}}, &(0x7f0000000300)=""/188, 0x4a, 0xbc, 0x1}, 0x20) 21:17:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x26, [{0x0, 0x1}, {0x0, 0x1}]}]}}, &(0x7f0000000300)=""/188, 0x4a, 0xbc, 0x1}, 0x20) 21:17:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1000006, 0x10, r0, 0x0) 21:17:41 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0x7b, [@multicast1]}, @ssrr={0x89, 0x3}]}}}}}}, 0x0) [ 490.653358][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 490.653375][ T27] audit: type=1804 audit(1686604661.507:221): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2773698153/syzkaller.JsIYyq/34/cgroup.controllers" dev="sda1" ino=2015 res=1 errno=0 [ 490.800704][ T27] audit: type=1804 audit(1686604661.537:222): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/47/cgroup.controllers" dev="sda1" ino=2014 res=1 errno=0 21:17:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) [ 490.911386][ T27] audit: type=1804 audit(1686604661.557:223): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/106/cgroup.controllers" dev="sda1" ino=2019 res=1 errno=0 21:17:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) [ 491.044642][ T27] audit: type=1804 audit(1686604661.597:224): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir666398443/syzkaller.zitKQW/105/cgroup.controllers" dev="sda1" ino=2013 res=1 errno=0 21:17:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 21:17:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) [ 491.167979][ T27] audit: type=1804 audit(1686604661.627:225): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/34/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0 21:17:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 21:17:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 21:17:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 21:17:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) [ 491.445983][ T27] audit: type=1804 audit(1686604662.307:226): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir666398443/syzkaller.zitKQW/106/cgroup.controllers" dev="sda1" ino=2006 res=1 errno=0 21:17:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) sendmsg$alg(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20008080) 21:17:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) [ 491.575242][ T27] audit: type=1804 audit(1686604662.337:227): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2962814605/syzkaller.25aefv/35/cgroup.controllers" dev="sda1" ino=1992 res=1 errno=0 21:17:42 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'macvtap0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) [ 491.683215][ T27] audit: type=1804 audit(1686604662.537:228): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir656446229/syzkaller.a2bjz6/48/cgroup.controllers" dev="sda1" ino=2013 res=1 errno=0 21:17:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) 21:17:42 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'macvtap0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 21:17:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:42 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'macvtap0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 21:17:42 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) [ 492.033972][ T27] audit: type=1804 audit(1686604662.887:229): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1201423547/syzkaller.avovpi/107/cgroup.controllers" dev="sda1" ino=2008 res=1 errno=0 21:17:43 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c0022800800"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:17:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 21:17:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'macvtap0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 21:17:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 21:17:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 21:17:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 21:17:43 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c0022800800"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:17:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000260608000fff52004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 21:17:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:44 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 21:17:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000260608000fff52004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @empty}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffffe}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21:17:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fb7e7830e3f60aa1f6b5ad50b01cd68f0bb9b53e1d2da1a9158764ee9f575ae0beddbe6d9b2e558a1d0a0e468998aeff", 0x30}, {&(0x7f0000000100)="382b533fe7f0ca25aef7381daee5de32e6", 0x11}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x0, 0x0}) [ 493.606238][ T7427] __nla_validate_parse: 2538 callbacks suppressed [ 493.606281][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.689208][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.732163][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.745979][ T7440] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 493.772559][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.810960][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.860677][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.885587][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.949864][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.007764][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.085933][ T7427] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 21:17:45 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c0022800800"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:17:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, 0x3a, 0x5991ffd96b3f1ba9, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 21:17:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fb7e7830e3f60aa1f6b5ad50b01cd68f0bb9b53e1d2da1a9158764ee9f575ae0beddbe6d9b2e558a1d0a0e468998aeff", 0x30}, {&(0x7f0000000100)="382b533fe7f0ca25aef7381daee5de32e6", 0x11}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x0, 0x0}) 21:17:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/122, 0x1626000, 0x800}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e2ad) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000811) r2 = socket(0x840000000002, 0x0, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@rand_addr=0x64010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffffffffffffffb}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x4d4}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x3}}, 0xe8) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) 21:17:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, 0x3a, 0x5991ffd96b3f1ba9, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 21:17:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fb7e7830e3f60aa1f6b5ad50b01cd68f0bb9b53e1d2da1a9158764ee9f575ae0beddbe6d9b2e558a1d0a0e468998aeff", 0x30}, {&(0x7f0000000100)="382b533fe7f0ca25aef7381daee5de32e6", 0x11}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x0, 0x0}) 21:17:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, 0x3a, 0x5991ffd96b3f1ba9, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 21:17:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fb7e7830e3f60aa1f6b5ad50b01cd68f0bb9b53e1d2da1a9158764ee9f575ae0beddbe6d9b2e558a1d0a0e468998aeff", 0x30}, {&(0x7f0000000100)="382b533fe7f0ca25aef7381daee5de32e6", 0x11}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x0, 0x0}) 21:17:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, 0x3a, 0x5991ffd96b3f1ba9, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 495.181844][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.190478][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.801983][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.856085][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.343228][ T7440] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.352731][ T7440] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.364897][ T7440] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.374406][ T7440] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 21:17:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/122, 0x1626000, 0x800}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e2ad) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000811) r2 = socket(0x840000000002, 0x0, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@rand_addr=0x64010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffffffffffffffb}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x4d4}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x3}}, 0xe8) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) 21:17:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:49 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c0022800800"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 21:17:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 498.495703][ T5059] Bluetooth: hci10: command 0x0406 tx timeout [ 498.501860][ T5059] Bluetooth: hci11: command 0x0406 tx timeout [ 498.508256][ T5049] Bluetooth: hci12: command 0x0406 tx timeout [ 498.515182][ T5049] Bluetooth: hci13: command 0x0406 tx timeout [ 498.541756][ T7495] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 498.687103][ T7486] __nla_validate_parse: 1014 callbacks suppressed [ 498.687124][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.741338][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 21:17:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/122, 0x1626000, 0x800}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e2ad) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000811) r2 = socket(0x840000000002, 0x0, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@rand_addr=0x64010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffffffffffffffb}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x4d4}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x3}}, 0xe8) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) [ 498.787471][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.826332][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.853925][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.900077][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.946341][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.982974][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 21:17:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 499.011758][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 499.079082][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 21:17:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/122, 0x1626000, 0x800}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x208e2ad) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000811) r2 = socket(0x840000000002, 0x0, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@rand_addr=0x64010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0xfffffffffffffffb}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfe}, 0x4d4}, 0xa, @in=@rand_addr=0x64010100, 0x3501, 0x3}}, 0xe8) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) 21:17:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 499.716179][ T7522] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 21:17:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 500.922867][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.931493][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.547328][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.553762][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 21:17:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:17:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 502.743772][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.848170][ T7522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 21:17:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:17:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 503.769375][ T7522] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.783624][ T7522] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.808148][ T7522] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.831209][ T7522] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.057132][ T7550] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 504.076784][ T7553] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 504.788226][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.795761][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.324220][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.378805][ T7553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.809492][ T7553] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.818892][ T7553] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.828471][ T7553] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.838390][ T7553] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.989512][ T7555] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 506.401116][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.408765][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.304644][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.411037][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.861261][ T7555] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.870325][ T7555] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.880910][ T7555] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.892582][ T7555] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.061686][ T7572] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 508.456907][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.464260][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.945987][ T7572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.994760][ T7572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.419947][ T7572] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.432042][ T7572] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.441422][ T7572] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.450518][ T7572] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.577600][ T7572] bridge1: left allmulticast mode [ 509.597278][ T7572] bridge2: left allmulticast mode [ 509.617963][ T7572] bridge3: left allmulticast mode [ 509.638352][ T7572] bridge4: left allmulticast mode 21:18:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:18:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:18:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:18:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) [ 514.097714][ T7596] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 21:18:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) [ 514.256595][ T7606] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 514.352314][ T7604] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 514.625734][ T7612] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 21:18:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:18:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:18:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1100, 0x7fffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 21:18:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) [ 515.678527][ T7627] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 515.971691][ T7635] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 21:18:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:18:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 21:18:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) [ 516.610502][ T7642] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 21:18:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 21:18:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 21:18:08 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 21:18:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:18:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='X', 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x0, 0x800}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000000000) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010000000000000000005e000000faff5af608000000", @ANYRES32=0x0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet(r6, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x40000e2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8000, 0x3ff, 0x7}, &(0x7f0000000140)=0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000950000006a971528110000000000000000e3069d17591927c778748725fd8c42b7c0dcfea153c341443fc1ca1fe32fdbc96fab85030514576c8b1a49e14ac59d1b7df3bd5562a4a0176d76eca4ef3cdd08fc8b427c93d8"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) unshare(0x6c060000) r8 = accept4(r0, &(0x7f0000000400)=@nfc, &(0x7f00000001c0)=0x80, 0x81c00) sendto$inet6(r8, &(0x7f0000000500)="259330942194c017edb00fc5e63de78f0af422ce261a6642858a3527591b7554225841729f1cc478555713800f8c976bc372b7dd22d0616b818da75466de12bb80a24b81562446c462f83a94362a1302", 0x50, 0x88c0, &(0x7f0000000380)={0xa, 0x4e21, 0xce9b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x22b8}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 21:18:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 21:18:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 21:18:10 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 21:18:10 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 21:18:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 21:18:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 21:18:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) [ 519.486758][ T7675] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 519.719134][ T7674] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 21:18:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 21:18:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 21:18:11 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) [ 562.987490][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.993851][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.055694][ T5049] Bluetooth: hci15: command 0x0406 tx timeout [ 565.061886][ T5049] Bluetooth: hci14: command 0x0406 tx timeout [ 565.068965][ T5059] Bluetooth: hci16: command 0x0406 tx timeout [ 565.075107][ T5059] Bluetooth: hci17: command 0x0406 tx timeout 21:19:06 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 21:19:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 21:19:06 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 21:19:06 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 21:19:53 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) connect$netrom(r0, 0x0, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7581000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="9b425540e0"], 0x20000600}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x6, 0x2, 0x4a4, {r7, r8/1000+10000}, {}, {0x4, 0x1}, 0x1, @canfd={{0x1}, 0xf, 0x0, 0x0, 0x0, "df7b23e4e9ef83a9330cdf21ef4134e3a49c8b00838cd6af01c9a25370c21643593641908d1a43bca2f999e9b69b8c07f3a69e16f95e1bdaa75fe26a9654fe55"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000070}, 0x1) r9 = socket$phonet(0x23, 0x2, 0x1) shutdown(r9, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) unshare(0x40000000) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000340)="02844a3f3cc43c1f3d45ac51b077820e71ab08d15f2458bcd33e84cf521844042570", 0x22}, {&(0x7f00000003c0)}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) [ 624.423221][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.429632][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 21:20:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) [ 678.818456][ T28] INFO: task khugepaged:34 blocked for more than 143 seconds. [ 678.916374][ T28] Not tainted 6.4.0-rc5-syzkaller-01182-g3a2cb45ca0cc #0 [ 679.596261][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.983544][ T28] task:khugepaged state:D stack:28736 pid:34 ppid:2 flags:0x00004000 [ 680.467198][ T28] Call Trace: [ 680.817493][ T28] [ 680.918304][ T28] __schedule+0xc9a/0x5880 [ 681.074699][ T28] ? mark_lock.part.0+0xee/0x1970 [ 681.541175][ T28] ? mark_held_locks+0x9f/0xe0 [ 682.407069][ T28] ? io_schedule_timeout+0x150/0x150 [ 682.935480][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 682.940799][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 683.779838][ T28] ? schedule_timeout+0x26e/0x2b0 [ 683.933272][ T28] schedule+0xde/0x1a0 [ 683.948179][ T28] schedule_timeout+0x276/0x2b0 [ 684.307392][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 684.628532][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.091910][ T28] ? _raw_spin_unlock_irq+0x29/0x50 [ 685.115484][ T28] __wait_for_common+0x1ce/0x5c0 [ 685.120496][ T28] ? usleep_range_state+0x1b0/0x1b0 21:20:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x54, r1, 0x1, 0x0, 0x0, {0x30}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) [ 685.430867][ T28] ? bit_wait_io_timeout+0x160/0x160 [ 685.862643][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.869038][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.016985][ T28] __flush_work+0x595/0xb60 [ 686.025232][ T28] ? mod_delayed_work_on+0x220/0x220 [ 686.463838][ T28] ? mark_held_locks+0x9f/0xe0 [ 686.486896][ T28] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 686.712663][ T28] ? __lru_add_drain_all+0x184/0x6a0 [ 686.723065][ T28] __lru_add_drain_all+0x1bf/0x6a0 [ 686.763770][ T28] khugepaged+0x105/0x1740 [ 686.965464][ T28] ? collapse_pte_mapped_thp+0x1560/0x1560 [ 686.971364][ T28] ? __kthread_parkme+0xce/0x220 [ 687.658199][ T28] ? lock_downgrade+0x690/0x690 [ 688.166925][ T28] ? prepare_to_swait_exclusive+0x240/0x240 [ 688.318845][ T28] ? kthread+0x278/0x440 [ 688.665287][ T28] ? __kthread_parkme+0x163/0x220 [ 688.671751][ T28] ? collapse_pte_mapped_thp+0x1560/0x1560 [ 688.767309][ T28] kthread+0x344/0x440