ev$vcsa(&(0x7f0000000000), 0x56, 0x86100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x4, 0x10001, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0xe1, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0xe, [{@multicast1, 0x2162}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@private=0xa010101, 0x10000}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xc8, 0x0, 0xd, [0x3f]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x5}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891b, &(0x7f0000000100)={'tunl0\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000240)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000300)={0x80000001, 0x18, '\x00', 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) 05:49:40 executing program 5: prctl$PR_SET_MM(0xe, 0x0, &(0x7f0000ffa000/0x4000)=nil) [ 634.984867][T10024] loop1: detected capacity change from 0 to 8 [ 634.992200][T10024] ======================================================= [ 634.992200][T10024] WARNING: The mand mount option has been deprecated and [ 634.992200][T10024] and is ignored by this kernel. Remove the mand [ 634.992200][T10024] option from the mount to silence this warning. [ 634.992200][T10024] ======================================================= 05:49:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) [ 635.066930][T10024] ext4: Unknown parameter 'mask' 05:49:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 05:49:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='security.selinux\x00') [ 635.093825][ T145] usb 4-1: new high-speed USB device number 87 using dummy_hcd 05:49:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) [ 635.252430][ T27] audit: type=1804 audit(1658036980.790:553): pid=10039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/422/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 635.363831][ T145] usb 4-1: Using ep0 maxpacket: 8 [ 635.493905][ T145] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.604074][ T145] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 635.613271][ T145] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 635.621723][ T145] usb 4-1: Manufacturer: syz [ 635.629467][ T145] usb 4-1: config 0 descriptor?? [ 635.925172][ T145] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 635.932133][ T145] usb 4-1: Failed to create links for entity 231 [ 635.939156][ T145] usb 4-1: Failed to register entities (-22). [ 635.947649][ T145] usb 4-1: USB disconnect, device number 87 05:49:41 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831"], 0x0) 05:49:41 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 05:49:41 executing program 1: statx(0xffffffffffffffff, 0x0, 0xab00, 0x0, 0x0) 05:49:41 executing program 5: process_vm_readv(0x0, &(0x7f0000001980)=[{&(0x7f0000000400)=""/74, 0x4a}], 0x1, &(0x7f0000001c80)=[{&(0x7f0000001a40)=""/77, 0x4d}, {0x0}, {&(0x7f0000001b00)=""/85, 0x55}], 0x3, 0x0) 05:49:41 executing program 2: mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1f003000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) 05:49:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:42 executing program 0: io_setup(0xe0b, &(0x7f0000000080)=0x0) r1 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 05:49:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181582, 0x0) write$tun(r0, 0x0, 0x0) 05:49:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:42 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x44000, 0x0) 05:49:42 executing program 2: setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) [ 636.520877][ T27] audit: type=1804 audit(1658036982.060:554): pid=10056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/423/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:49:42 executing program 1: creat(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) creat(&(0x7f0000000740)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) [ 636.794198][ T4032] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 637.053918][ T4032] usb 4-1: Using ep0 maxpacket: 8 [ 637.183928][ T4032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.283931][ T4032] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 637.293018][ T4032] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 637.301311][ T4032] usb 4-1: Manufacturer: syz [ 637.307976][ T4032] usb 4-1: config 0 descriptor?? [ 637.623812][ T4032] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 637.630788][ T4032] usb 4-1: No valid video chain found. [ 637.642684][ T4032] usb 4-1: USB disconnect, device number 88 05:49:43 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831"], 0x0) 05:49:43 executing program 5: syz_clone(0x2001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)="90") 05:49:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x18}}, 0x0) 05:49:43 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:43 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) 05:49:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0xf, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:43 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x8935, 0x0) 05:49:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) 05:49:43 executing program 0: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002980)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) pipe2$9p(&(0x7f0000003980), 0x84000) 05:49:43 executing program 2: pipe2$9p(&(0x7f0000003980), 0x0) [ 638.190815][ T27] audit: type=1804 audit(1658036983.730:555): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/424/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:49:43 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 638.453864][ T4578] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 638.693955][ T4578] usb 4-1: Using ep0 maxpacket: 8 [ 638.813872][ T4578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.903986][ T4578] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 638.913046][ T4578] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 638.921530][ T4578] usb 4-1: Manufacturer: syz [ 638.931815][ T4578] usb 4-1: config 0 descriptor?? [ 639.253900][ T4578] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 639.262072][ T4578] usb 4-1: No valid video chain found. [ 639.278559][ T4578] usb 4-1: USB disconnect, device number 89 05:49:45 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:49:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x9, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_deladdr={0x48, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LABEL={0x14, 0x3, 'wlan1\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LABEL={0x14, 0x3, 'geneve1\x00'}]}, 0x48}}, 0x0) 05:49:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x0, 0x10}]}}, &(0x7f0000001240)=""/251, 0x2a, 0xfb, 0x1}, 0x20) 05:49:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:45 executing program 1: io_setup(0xe436, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r2, 0x0}]) 05:49:45 executing program 2: io_setup(0xe436, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="0080de0000000000", 0xfffffffffffffef6}]) 05:49:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000640)={0xff0, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xc24, 0x5, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x244, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x168, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x3b8, 0x5, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}]}, 0xff0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004340), r0) 05:49:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16}, 0x48) [ 639.838794][ T27] audit: type=1804 audit(1658036985.380:556): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/425/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 05:49:45 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x42a3e33bc881c7f6, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) [ 639.886027][T10115] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 05:49:45 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4002, &(0x7f0000000080)=@framed={{}, [@generic]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:45 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) [ 640.094078][ T4578] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 640.254080][ T145] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 640.343764][ T4578] usb 4-1: Using ep0 maxpacket: 8 [ 640.464104][ T4578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.533965][ T145] usb 1-1: Using ep0 maxpacket: 16 [ 640.554027][ T4578] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 640.563106][ T4578] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 640.583306][ T4578] usb 4-1: Manufacturer: syz [ 640.590324][ T4578] usb 4-1: config 0 descriptor?? [ 640.784063][ T145] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 640.792886][ T145] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 640.803100][ T145] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.873892][ T4578] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 640.880928][ T4578] usb 4-1: Failed to create links for entity 231 [ 640.887959][ T4578] usb 4-1: Failed to register entities (-22). [ 640.898586][ T4578] usb 4-1: USB disconnect, device number 90 [ 640.973877][ T145] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.982957][ T145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.991501][ T145] usb 1-1: Product: syz [ 640.995978][ T145] usb 1-1: Manufacturer: syz [ 641.000584][ T145] usb 1-1: SerialNumber: syz 05:49:46 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:49:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:46 executing program 1: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 05:49:46 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x33, 0x0}, 0x0) 05:49:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000640)={0xe84, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xc1c, 0x5, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x244, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa06}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}]}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}]}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x168, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x254, 0x5, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000) 05:49:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x4e}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:46 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) [ 641.384116][ T145] usb 1-1: 0:2 : does not exist [ 641.423663][ T145] usb 1-1: USB disconnect, device number 9 05:49:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) [ 641.485057][ T27] audit: type=1804 audit(1658036987.030:557): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/426/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 641.516131][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 05:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15}, 0x48) [ 641.684451][ T4573] usb 2-1: new high-speed USB device number 5 using dummy_hcd 05:49:47 executing program 0: syz_usb_connect(0x0, 0x1ec, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd4, 0xdf, 0x66, 0x10, 0x4e8, 0xa101, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1da, 0x2, 0x4, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x2, 0x2, 0x6, 0x0, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x9], 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x1, 0x5, [0x0, 0x5, 0x5, 0x1, 0x3], 0x4}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc6, 0x1, 0x20, 0x1, "13f7", ')'}]}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0xa7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x31ba}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x94, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x410, 0x3, 0x79, 0x6}}]}}, {{0x9, 0x4, 0xa, 0x4, 0x3, 0xa, 0xce, 0xaa, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x3}, @generic={0x4e, 0x4, "04c85c59028c0d14591ef618dcd4188d7241e5031cae07bfb78e91a57e03c32f01989c4fbc251eed0b1d130de306d8b087516537098f1aac2cc520fef8f397c6f35f5f0b89c5231a5df2153b"}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0x2, 0x5d, [@generic={0x7b, 0x1d, "89fe633a1427b23b657fe0d39cc7004b4946df92bef430cf286c67786eec795937a41a14284f7b96c053805d382160e76ec705ca391eb85245116c5588c3b374ee2cc4649c38fd70e8410e42d0d1fac7beb37bab68f01d5c951030919320b98c52a662da508fb8ded710cc84cbf01495da94c54f6a2e1ab8e1"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xc000}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x1, 0x8, 0x6, [@generic={0x71, 0x23, "f509c76ca2871e6dd15dc84f1fc78c97fb01b0edc7f2ed80b24f5733e723b9799b7484416e1fecfbce76d990e6b9bf3dddac558634b4379b8156ecc463fdbe1e4d9fc001f2007558089962335ab0ca504ba80ddff795151736e331b0675fd863a07dcc9135c7961ca8f8fdd96c6215"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x3, 0xb, 0x8b, [@generic={0x2, 0xc}, @generic={0xa, 0x9, "0d595ee14aea84bf"}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x0, 0x10, 0x0, 0x20, 0x99}, 0x97, &(0x7f0000000400)={0x5, 0xf, 0x97, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0xff, 0x40, 0x401, 0x7}, @generic={0x56, 0x10, 0x2, "1eb5e95e159a880d63a82e34cecbb55a17906baf2b865eefa96481902a2cf105a5c0f80f69d7b962a00d7f1ad4a0dc0ba8b9c60e495a2ea78083f0e37573d976d4237655138d9eeb06e6e1ca0973c8c3d387f6"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "057b88a1ef63d7ef5705df59346ff336"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x80, 0x1b, 0x1000, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x67, 0x7d, 0x2, 0xf1b}]}, 0x5, [{0xb4, &(0x7f00000004c0)=@string={0xb4, 0x3, "7f550d82b6ef1fa15c9b89f125382c6e3e49bd2592eeeb46417d74a1328f8f484b2399b5b9dd64ce7bdf9c774a7d326468359a2545c7e90af03a5de15bee06ea2287c25fda90fa984c4b929c038f597200fbba44087ec1bde7b44a3ee4e44f8b291a2674e95aa92fdb994b476a02a329ecbfa47c73932c0f805f9c49dcd5a7003aa8f5b84f9462edc60a44911016749ff18bff28618f4c51e5b7ac3ef96a951d68a7a0607dedd39c90dbf2eadcecdad90fb6"}}, {0x39, &(0x7f0000000580)=@string={0x39, 0x3, "457ad61269569ee0ecb7d2896bd3ec57efc7da4b5785ece8f562a57709ae047b02bd3de1c42e2c21ed1f2c610b835e8919048cc6794dad"}}, {0x59, &(0x7f00000005c0)=@string={0x59, 0x3, "da7f81f2b5c736b5f468ea4abdfdd6c58345af608a656a823a16b8804c1c385d5a41f2eec303e5fb123ace7714942dbbba8e29b25e0cf0549adb56ec1d144f301f03000af3827d6289ea6b22708cf8cfca5d5ebd6f4b34"}}, {0xf3, &(0x7f0000000640)=@string={0xf3, 0x3, "c725e222c072956fb218126e9275239539d92fb6ec4ac469beb1e365e30ba969ddc48405ee797e32ba6f186e061d03721c2a545395f212ddc71616b3cd362be7c1750059f97b5557e93b440a935b5cff992428d180199e4d677ce33dccf39db3547546b41ac34ed177d887cc730560f0622915e9e90739c582b492041045240cba3ff251bf3b35e0283396301e5bbc1cf582da8b25c65c50ef248ed02b67a015c53560b09f16d4260102f18b08827234332ec74044c886b77a023e2527eb6efd3f9901e1b14a643351038655cf26a713f59354261f1416a8e74c6cb4b95438d6a10a63c3b9bc7bde736161d6e42d73277b"}}, {0x0, 0x0}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 05:49:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x4, 0x12, r0, 0x0) 05:49:47 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) [ 641.783824][ T4032] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 641.816325][ T27] audit: type=1400 audit(1658036987.360:558): avc: denied { execute } for pid=10147 comm="syz-executor.2" path="/proc/bus/input/devices" dev="proc" ino=4026532008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 641.924105][ T4573] usb 2-1: Using ep0 maxpacket: 16 [ 642.043867][ T4573] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 642.054350][ T4573] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 642.064845][ T4573] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.103866][ T4032] usb 4-1: Using ep0 maxpacket: 8 [ 642.123828][ T9592] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 642.233931][ T4573] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.234068][ T4032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.243005][ T4573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.262540][ T4573] usb 2-1: Product: syz [ 642.267276][ T4573] usb 2-1: Manufacturer: syz [ 642.271879][ T4573] usb 2-1: SerialNumber: syz [ 642.334020][ T4032] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 642.343656][ T4032] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 642.351858][ T4032] usb 4-1: Manufacturer: syz [ 642.370787][ T4032] usb 4-1: config 0 descriptor?? [ 642.375868][ T9592] usb 1-1: Using ep0 maxpacket: 16 [ 642.523972][ T9592] usb 1-1: config 4 has an invalid interface number: 84 but max is 1 [ 642.532119][ T9592] usb 1-1: config 4 has an invalid interface number: 10 but max is 1 [ 642.540422][ T9592] usb 1-1: config 4 has an invalid interface number: 4 but max is 1 [ 642.548522][ T9592] usb 1-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 642.557526][ T9592] usb 1-1: config 4 has no interface number 0 [ 642.567654][ T9592] usb 1-1: config 4 has no interface number 1 [ 642.576257][ T9592] usb 1-1: config 4 has no interface number 2 [ 642.582400][ T9592] usb 1-1: config 4 interface 84 altsetting 0 endpoint 0x9 has invalid maxpacket 1040, setting to 64 [ 642.593540][ T9592] usb 1-1: config 4 interface 10 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.594009][ T4573] usb 2-1: 0:2 : does not exist [ 642.611495][ T9592] usb 1-1: too many endpoints for config 4 interface 4 altsetting 200: 92, using maximum allowed: 30 [ 642.627777][ T9592] usb 1-1: config 4 interface 4 altsetting 200 endpoint 0x6 has an invalid bInterval 127, changing to 10 [ 642.639235][ T9592] usb 1-1: config 4 interface 4 altsetting 200 has an invalid endpoint with address 0x80, skipping [ 642.650285][ T9592] usb 1-1: config 4 interface 4 altsetting 200 has 3 endpoint descriptors, different from the interface descriptor's value: 92 [ 642.656686][ T4573] usb 2-1: USB disconnect, device number 5 [ 642.672748][ T4032] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 642.680452][ T4032] usb 4-1: Failed to create links for entity 231 [ 642.687116][ T4032] usb 4-1: Failed to register entities (-22). [ 642.701393][ T9592] usb 1-1: config 4 interface 10 has no altsetting 0 [ 642.708773][ T9989] udevd[9989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.725388][ T9592] usb 1-1: config 4 interface 4 has no altsetting 0 [ 642.742394][ T4032] usb 4-1: USB disconnect, device number 91 [ 642.974171][ T9592] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=9e.39 [ 642.983287][ T9592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.991941][ T9592] usb 1-1: Product: 翚잵딶棴䫪ﶽ엖䖃悯斊艪ᘺ肸᱌崸䅚σﯥ㨒矎鐔묭躺눩౞哰ᐝく̟਀苳扽≫豰쿸巊뵞䭯 [ 643.006886][ T9592] usb 1-1: Manufacturer: 穅ዖ噩러角퍫埬쟯䯚蕗拵瞥급笄봂⻄ℬ῭愬茋襞Й욌䵹 [ 643.018460][ T9592] usb 1-1: SerialNumber: ◇⋢狀澕ᢲ渒疒锣똯䫬槄놾旣௣榩쓝ք秮㉾澺渘ᴆ爃⨜協ᛇ댖㛍痁夀篹坕㯩੄宓｜⒙턨ᦀ䶞籧㷣뎝畔둆쌚텎첇ճ⥢ߩ씹뒂Ғ䔐త㾺凲㮿㌨ゖ嬞᲼苵诚옥停⓯킎末ᖠ㗅끠᚟⛔ȁ诱興㑲⸳䃇졄랆ɺ┾ﵮ餿䪱㍤͑喆⛏Ꭷ鏵♔ᐟꠖ䳧둬咹호ડ썣벹慳홡ⷤ❳ 05:49:48 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:49:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:48 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000002a80), 0x200000, 0x0) 05:49:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:49:48 executing program 1: io_setup(0xe0b, &(0x7f0000000080)=0x0) r1 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 05:49:48 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x81, 0x81, {0x7}}}}}}}]}}, 0x0) 05:49:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 05:49:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0xbe77, 0x7, 0x8}, 0x48) 05:49:48 executing program 1: creat(&(0x7f0000000740)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 643.319918][ T27] audit: type=1804 audit(1658036988.860:559): pid=10159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/427/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 643.383831][ T9592] r8152 1-1:4.84: Unknown version 0x0000 [ 643.488731][ T9592] usb 1-1: USB disconnect, device number 10 [ 643.533802][ T4573] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 643.553988][ T4032] usb 3-1: new high-speed USB device number 8 using dummy_hcd 05:49:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)) 05:49:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 05:49:49 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x2, 0x0) [ 643.783792][ T4573] usb 4-1: Using ep0 maxpacket: 8 [ 643.793875][ T4032] usb 3-1: Using ep0 maxpacket: 8 [ 643.904039][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.914083][ T4032] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 643.922855][ T4032] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 643.949953][ T4032] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.023935][ T4573] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 644.033016][ T4573] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 644.041354][ T4573] usb 4-1: Manufacturer: syz [ 644.048869][ T4573] usb 4-1: config 0 descriptor?? [ 644.113923][ T4032] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.123020][ T4032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.135793][ T4032] usb 3-1: Product: syz [ 644.139981][ T4032] usb 3-1: Manufacturer: syz [ 644.147091][ T4032] usb 3-1: SerialNumber: syz [ 644.343842][ T4573] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 644.350934][ T4573] usb 4-1: Failed to create links for entity 231 [ 644.357904][ T4573] usb 4-1: Failed to register entities (-22). [ 644.367211][ T4573] usb 4-1: USB disconnect, device number 92 [ 644.473922][ T4032] usb 3-1: 0:2 : does not exist [ 644.500928][ T4032] usb 3-1: USB disconnect, device number 8 05:49:50 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b68"], 0x0) 05:49:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x6c, 0x6d, 0x0, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_CARRIER={0x5}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}]}, @IFLA_MTU={0x8}, @IFLA_PHYS_SWITCH_ID={0x1d, 0x24, "dd33fc1a4264da07ca0b38855df8c8d65989498e6dac827d48"}, @IFLA_NET_NS_PID={0x8}]}, 0x37fe0}}, 0x0) 05:49:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:50 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000440), 0x8, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 05:49:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x15}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:50 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, ' '}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 05:49:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', 0x0}) 05:49:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x64}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) 05:49:50 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x12, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:49:50 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) [ 644.963098][ T27] audit: type=1804 audit(1658036990.500:560): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/428/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:49:50 executing program 5: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) [ 645.057747][ T4032] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 645.102940][ T4032] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 645.234046][ T4573] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 645.473792][ T4573] usb 4-1: Using ep0 maxpacket: 8 [ 645.594043][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.684090][ T4573] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 645.693187][ T4573] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 645.701674][ T4573] usb 4-1: Manufacturer: syz [ 645.708584][ T4573] usb 4-1: config 0 descriptor?? [ 645.983986][ T4573] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 645.990925][ T4573] usb 4-1: No valid video chain found. [ 646.009633][ T4573] usb 4-1: USB disconnect, device number 93 05:49:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x1}) 05:49:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="d55fb7e468ba07f473978569c5"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc802, &(0x7f0000000080)=@framed={{}, [@generic]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:52 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) 05:49:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:52 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:49:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x9}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x8, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x6a}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 646.574516][ T27] audit: type=1804 audit(1658036992.110:561): pid=10215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/429/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 05:49:52 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 05:49:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000180)=ANY=[]}) 05:49:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x5f}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:52 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:49:52 executing program 2: syz_usb_connect(0x0, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd4, 0xdf, 0x66, 0x10, 0x4e8, 0xa101, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x2, 0x6, 0x0, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x0], 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0], 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}]}}, {{0x9, 0x4, 0xa, 0x4, 0x1, 0xa, 0xce, 0xaa, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x3}, @generic={0x2, 0x4}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0x2, 0x5d, [@generic={0x78, 0x1d, "89fe633a1427b23b657fe0d39cc7004b4946df92bef430cf286c67786eec795937a41a14284f7b96c053805d382160e76ec705ca391eb85245116c5588c3b374ee2cc4649c38fd70e8410e42d0d1fac7beb37bab68f01d5c951030919320b98c52a662da508fb8ded710cc84cbf01495da94c54f6a2e"}]}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x92, &(0x7f00000004c0)=@string={0x92, 0x3, "7f550d82b6ef1fa15c9b89f125382c6e3e49bd2592eeeb46417d74a1328f8f484b2399b5b9dd64ce7bdf9c774a7d326468359a2545c7e90af03a5de15bee06ea2287c25fda90fa984c4b929c038f597200fbba44087ec1bde7b44a3ee4e44f8b291a2674e95aa92fdb994b476a02a329ecbfa47c73932c0f805f9c49dcd5a7003aa8f5b84f9462edc60a44911016749f"}}, {0x0, 0x0}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "da7f81f2b5c736b5f468ea4abdfdd6c58345af608a656a823a16b8804c1c385d5a41f2eec303e5fb123ace7714942dbbba8e29b25e0cf054"}}, {0x0, 0x0}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 05:49:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x0, 0x18}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:52 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{{0x9, 0x5, 0x82, 0x2, 0x10}}]}}}]}}]}}, 0x0) [ 646.833861][ T4573] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 646.960429][ T27] audit: type=1804 audit(1658036992.500:562): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/430/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 647.103825][ T4573] usb 4-1: Using ep0 maxpacket: 8 [ 647.148571][ T3676] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 647.163885][ T4032] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 647.244096][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.353942][ T4573] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 647.363006][ T4573] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 647.375396][ T4573] usb 4-1: Manufacturer: syz [ 647.382110][ T4573] usb 4-1: config 0 descriptor?? [ 647.393819][ T3676] usb 3-1: Using ep0 maxpacket: 16 [ 647.413936][ T4032] usb 6-1: Using ep0 maxpacket: 8 [ 647.513925][ T3676] usb 3-1: config 4 has an invalid interface number: 84 but max is 1 [ 647.522205][ T3676] usb 3-1: config 4 has an invalid descriptor of length 223, skipping remainder of the config [ 647.532758][ T3676] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 647.542079][ T4032] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 647.555156][ T3676] usb 3-1: config 4 has no interface number 0 [ 647.561337][ T3676] usb 3-1: config 4 interface 84 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 647.664027][ T4573] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 647.670998][ T4573] usb 4-1: Failed to create links for entity 231 [ 647.677962][ T4573] usb 4-1: Failed to register entities (-22). [ 647.689172][ T4573] usb 4-1: USB disconnect, device number 94 [ 647.733918][ T4032] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 647.743176][ T4032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.751982][ T4032] usb 6-1: Product: syz [ 647.756600][ T4032] usb 6-1: Manufacturer: syz [ 647.761321][ T4032] usb 6-1: SerialNumber: syz [ 647.794240][T10237] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 648.019037][ T4573] usb 6-1: USB disconnect, device number 56 05:49:53 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:49:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff7fffffff) 05:49:53 executing program 1: clock_gettime(0x0, &(0x7f0000000680)) 05:49:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 648.133920][ T3676] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=9e.39 [ 648.147510][ T3676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 05:49:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0xf, 0x0, 0x0, 0x70}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 648.212886][ T3676] usb 3-1: Product: 翚잵딶棴䫪ﶽ엖䖃悯斊艪ᘺ肸᱌崸䅚σﯥ㨒矎鐔묭躺눩౞哰 05:49:53 executing program 1: execve(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) 05:49:53 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) [ 648.248572][ T27] audit: type=1804 audit(1658036993.790:563): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/431/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 [ 648.513804][ T4576] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 648.593840][ T3676] r8152 3-1:4.84: Unknown version 0x0000 [ 648.603056][ T3676] usb 3-1: USB disconnect, device number 9 [ 648.763897][ T4576] usb 4-1: Using ep0 maxpacket: 8 [ 648.883920][ T4576] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.975692][ T4576] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 648.984810][ T4576] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 648.992881][ T4576] usb 4-1: Manufacturer: syz [ 649.008123][ T4576] usb 4-1: config 0 descriptor?? 05:49:54 executing program 2: syz_usb_connect(0x0, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd4, 0xdf, 0x66, 0x10, 0x4e8, 0xa101, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x2, 0x6, 0x0, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x0], 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0], 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}]}}, {{0x9, 0x4, 0xa, 0x4, 0x1, 0xa, 0xce, 0xaa, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x3}, @generic={0x2, 0x4}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0x2, 0x5d, [@generic={0x78, 0x1d, "89fe633a1427b23b657fe0d39cc7004b4946df92bef430cf286c67786eec795937a41a14284f7b96c053805d382160e76ec705ca391eb85245116c5588c3b374ee2cc4649c38fd70e8410e42d0d1fac7beb37bab68f01d5c951030919320b98c52a662da508fb8ded710cc84cbf01495da94c54f6a2e"}]}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x92, &(0x7f00000004c0)=@string={0x92, 0x3, "7f550d82b6ef1fa15c9b89f125382c6e3e49bd2592eeeb46417d74a1328f8f484b2399b5b9dd64ce7bdf9c774a7d326468359a2545c7e90af03a5de15bee06ea2287c25fda90fa984c4b929c038f597200fbba44087ec1bde7b44a3ee4e44f8b291a2674e95aa92fdb994b476a02a329ecbfa47c73932c0f805f9c49dcd5a7003aa8f5b84f9462edc60a44911016749f"}}, {0x0, 0x0}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "da7f81f2b5c736b5f468ea4abdfdd6c58345af608a656a823a16b8804c1c385d5a41f2eec303e5fb123ace7714942dbbba8e29b25e0cf054"}}, {0x0, 0x0}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 05:49:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x5e}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:54 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0xe, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:49:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 649.165228][ T27] audit: type=1804 audit(1658036994.710:564): pid=10258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/432/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 649.284251][ T4576] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 649.291256][ T4576] usb 4-1: Failed to create links for entity 231 [ 649.298049][ T4576] usb 4-1: Failed to register entities (-22). [ 649.309187][ T4576] usb 4-1: USB disconnect, device number 95 [ 649.403789][ T3676] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 649.663912][ T3676] usb 3-1: Using ep0 maxpacket: 16 05:49:55 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:49:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0xbe77, 0x7, 0x10}, 0x48) 05:49:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x63}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:55 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 05:49:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) 05:49:55 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) 05:49:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 649.803975][ T3676] usb 3-1: config 4 has an invalid interface number: 84 but max is 1 [ 649.818183][ T3676] usb 3-1: config 4 has an invalid descriptor of length 223, skipping remainder of the config [ 649.863849][ T3676] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 649.882041][ T27] audit: type=1804 audit(1658036995.420:565): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/433/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 649.894519][ T3676] usb 3-1: config 4 has no interface number 0 [ 649.978850][ T3676] usb 3-1: config 4 interface 84 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.133792][ T4578] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 650.373794][ T4578] usb 4-1: Using ep0 maxpacket: 8 [ 650.493862][ T4578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.583972][ T4578] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 650.593035][ T4578] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 650.601289][ T4578] usb 4-1: Manufacturer: syz [ 650.608994][ T4578] usb 4-1: config 0 descriptor?? [ 650.633872][ T3676] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=9e.39 [ 650.643016][ T3676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.653536][ T3676] usb 3-1: Product: 翚잵딶棴䫪ﶽ엖䖃悯斊艪ᘺ肸᱌崸䅚σﯥ㨒矎鐔묭躺눩౞哰 [ 650.913957][ T4578] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 650.920965][ T4578] usb 4-1: Failed to create links for entity 231 [ 650.927565][ T4578] usb 4-1: Failed to register entities (-22). [ 650.945687][ T4578] usb 4-1: USB disconnect, device number 96 [ 650.963949][ T3676] r8152 3-1:4.84: Unknown version 0x0000 [ 650.985741][ T3676] usb 3-1: USB disconnect, device number 10 05:49:56 executing program 2: syz_usb_connect(0x0, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd4, 0xdf, 0x66, 0x10, 0x4e8, 0xa101, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x2, 0x6, 0x0, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x0], 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0], 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}]}}, {{0x9, 0x4, 0xa, 0x4, 0x1, 0xa, 0xce, 0xaa, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x3}, @generic={0x2, 0x4}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0x2, 0x5d, [@generic={0x78, 0x1d, "89fe633a1427b23b657fe0d39cc7004b4946df92bef430cf286c67786eec795937a41a14284f7b96c053805d382160e76ec705ca391eb85245116c5588c3b374ee2cc4649c38fd70e8410e42d0d1fac7beb37bab68f01d5c951030919320b98c52a662da508fb8ded710cc84cbf01495da94c54f6a2e"}]}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x92, &(0x7f00000004c0)=@string={0x92, 0x3, "7f550d82b6ef1fa15c9b89f125382c6e3e49bd2592eeeb46417d74a1328f8f484b2399b5b9dd64ce7bdf9c774a7d326468359a2545c7e90af03a5de15bee06ea2287c25fda90fa984c4b929c038f597200fbba44087ec1bde7b44a3ee4e44f8b291a2674e95aa92fdb994b476a02a329ecbfa47c73932c0f805f9c49dcd5a7003aa8f5b84f9462edc60a44911016749f"}}, {0x0, 0x0}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "da7f81f2b5c736b5f468ea4abdfdd6c58345af608a656a823a16b8804c1c385d5a41f2eec303e5fb123ace7714942dbbba8e29b25e0cf054"}}, {0x0, 0x0}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 05:49:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x6c, 0x32, 0x0, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_CARRIER={0x5}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}]}, @IFLA_MTU={0x8}, @IFLA_PHYS_SWITCH_ID={0x1d, 0x24, "dd33fc1a4264da07ca0b38855df8c8d65989498e6dac827d48"}, @IFLA_NET_NS_PID={0x8}]}, 0x37fe0}}, 0x0) 05:49:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x858}, 0x48) 05:49:56 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x2f, &(0x7f0000000000), &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0) 05:49:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x20}, 0x20}}, 0x0) 05:49:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:49:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='\f@\x00\x00', @ANYRES32, @ANYBLOB='>'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:57 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) 05:49:57 executing program 5: socketpair(0x3d, 0x0, 0x0, &(0x7f0000001680)) [ 651.528960][ T27] audit: type=1804 audit(1658036997.070:566): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/434/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 05:49:57 executing program 5: syz_usb_connect$uac1(0x0, 0x83, &(0x7f0000000280)={{0x12, 0x1, 0x42a3e33bc881c7f6, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9, 0x24, 0x3, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7f, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) 05:49:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) [ 651.804067][ T4578] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 651.933811][ T4573] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 652.053944][ T4578] usb 3-1: Using ep0 maxpacket: 16 [ 652.193863][ T4578] usb 3-1: config 4 has an invalid interface number: 84 but max is 1 [ 652.202091][ T4578] usb 3-1: config 4 has an invalid descriptor of length 223, skipping remainder of the config [ 652.212587][ T4573] usb 6-1: Using ep0 maxpacket: 16 [ 652.222482][ T4578] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 652.231404][ T4578] usb 3-1: config 4 has no interface number 0 [ 652.242232][ T4578] usb 3-1: config 4 interface 84 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.393912][ T4573] usb 6-1: unable to get BOS descriptor or descriptor too short [ 652.484312][ T4573] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 652.493085][ T4573] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.503898][ T4573] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.673919][ T4573] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.683098][ T4573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.691286][ T4573] usb 6-1: Product: syz [ 652.695856][ T4573] usb 6-1: Manufacturer: syz [ 652.701437][ T4573] usb 6-1: SerialNumber: syz [ 652.893879][ T4578] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=9e.39 [ 652.908229][ T4578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.918613][ T4578] usb 3-1: Product: 翚잵딶棴䫪ﶽ엖䖃悯斊艪ᘺ肸᱌崸䅚σﯥ㨒矎鐔묭躺눩౞哰 [ 653.023938][ T4573] usb 6-1: 0:2 : does not exist [ 653.040113][ T4573] usb 6-1: USB disconnect, device number 57 [ 653.253955][ T4578] r8152 3-1:4.84: Unknown version 0x0000 [ 653.274856][ T4578] usb 3-1: USB disconnect, device number 11 05:49:59 executing program 2: syz_usb_connect(0x0, 0xdf, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xd4, 0xdf, 0x66, 0x10, 0x4e8, 0xa101, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x2, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x1, 0x2, 0x6, 0x0, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x0], 0x40}, @feature_unit={0xb, 0x24, 0x6, 0x0, 0x0, 0x2, [0x0, 0x0], 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}]}}, {{0x9, 0x4, 0xa, 0x4, 0x1, 0xa, 0xce, 0xaa, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x3}, @generic={0x2, 0x4}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0x2, 0x5d, [@generic={0x78, 0x1d, "89fe633a1427b23b657fe0d39cc7004b4946df92bef430cf286c67786eec795937a41a14284f7b96c053805d382160e76ec705ca391eb85245116c5588c3b374ee2cc4649c38fd70e8410e42d0d1fac7beb37bab68f01d5c951030919320b98c52a662da508fb8ded710cc84cbf01495da94c54f6a2e"}]}}]}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x92, &(0x7f00000004c0)=@string={0x92, 0x3, "7f550d82b6ef1fa15c9b89f125382c6e3e49bd2592eeeb46417d74a1328f8f484b2399b5b9dd64ce7bdf9c774a7d326468359a2545c7e90af03a5de15bee06ea2287c25fda90fa984c4b929c038f597200fbba44087ec1bde7b44a3ee4e44f8b291a2674e95aa92fdb994b476a02a329ecbfa47c73932c0f805f9c49dcd5a7003aa8f5b84f9462edc60a44911016749f"}}, {0x0, 0x0}, {0x3a, &(0x7f00000005c0)=@string={0x3a, 0x3, "da7f81f2b5c736b5f468ea4abdfdd6c58345af608a656a823a16b8804c1c385d5a41f2eec303e5fb123ace7714942dbbba8e29b25e0cf054"}}, {0x0, 0x0}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 05:49:59 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:49:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x8, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="5d300a22d3d70d1371"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:49:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:49:59 executing program 5: syz_clone(0x40808000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="02") socketpair(0x0, 0x0, 0x0, 0x0) 05:49:59 executing program 3: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000000040)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) 05:49:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:49:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000), 0x4) 05:49:59 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x20}, 0x20}, 0x300}, 0x0) [ 653.841135][ T27] audit: type=1804 audit(1658036999.380:567): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/435/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 05:49:59 executing program 1: openat$null(0xffffffffffffff9c, 0x0, 0x4cc800, 0x0) 05:49:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) [ 654.073844][ T3676] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 654.343944][ T3676] usb 3-1: Using ep0 maxpacket: 16 [ 654.473949][ T3676] usb 3-1: config 4 has an invalid interface number: 84 but max is 1 [ 654.482997][ T3676] usb 3-1: config 4 has an invalid descriptor of length 223, skipping remainder of the config [ 654.494816][ T3676] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 654.504206][ T3676] usb 3-1: config 4 has no interface number 0 [ 654.510325][ T3676] usb 3-1: config 4 interface 84 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.143976][ T3676] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=9e.39 [ 655.154758][ T3676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.173206][ T3676] usb 3-1: Product: 翚잵딶棴䫪ﶽ엖䖃悯斊艪ᘺ肸᱌崸䅚σﯥ㨒矎鐔묭躺눩౞哰 [ 655.543929][ T3676] r8152 3-1:4.84: Unknown version 0x0000 [ 655.553360][ T3676] usb 3-1: USB disconnect, device number 12 05:50:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x7}, 0x48) 05:50:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, [@generic={0x4, 0x7, 0x3, 0x1f, 0x7}, @generic={0x40, 0x0, 0x6, 0xfff, 0x101}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x2, 0x6) 05:50:01 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x1a2281) write$tcp_mem(r0, &(0x7f0000000040)={0x0, 0x20, 0x3f00000001000000}, 0xfffffdef) 05:50:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0xf, 0x0, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0x1ff, 0x1}], 0x0, &(0x7f0000001700)) 05:50:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LABEL={0x5, 0x3, 'geneve1\x00'}]}, 0x34}}, 0x0) 05:50:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0xf, 0x0, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 656.119312][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000640)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000004400)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x14}, 0x14}}, 0x0) [ 656.145484][ T27] audit: type=1804 audit(1658037001.690:568): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/436/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 656.200543][T10352] loop0: detected capacity change from 0 to 1 [ 656.267081][T10352] Dev loop0: unable to read RDB block 1 05:50:01 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x80108907, 0x0) 05:50:01 executing program 2: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x10) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) 05:50:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0xf, 0x0, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 656.309336][T10352] loop0: unable to read partition table [ 656.322296][T10352] loop0: partition table beyond EOD, truncated [ 656.364082][T10352] EXT4-fs (loop0): unable to read superblock 05:50:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@gettfilter={0x24}, 0x37fe0}}, 0x0) 05:50:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 656.634162][ T27] audit: type=1804 audit(1658037002.180:569): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/437/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 656.645431][T10366] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:25 executing program 3: syz_open_dev$vcsu(&(0x7f0000001400), 0x0, 0x0) 05:50:25 executing program 0: syz_usb_connect$uac1(0x0, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xc3, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310}, 0x45, &(0x7f0000000200)={0x5, 0xf, 0x45, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "cfddb5802bbd8e973a0f97f67408f25f"}]}}) 05:50:25 executing program 2: io_setup(0xe436, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2}]) 05:50:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0xf, 0x0, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x6c, 0x6d, 0x0, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_CARRIER={0x5}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}]}, @IFLA_MTU={0x8}, @IFLA_PHYS_SWITCH_ID={0x1d, 0x24, "dd33fc1a4264da07ca0b38855df8c8d65989498e6dac827d48"}, @IFLA_NET_NS_PID={0x8}]}, 0x200002ec}}, 0x0) 05:50:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:25 executing program 3: syz_usb_connect(0x0, 0x26c, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd4, 0xdf, 0x66, 0x10, 0x4e8, 0xa101, 0x9e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25a, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x2, 0x3, 0x2, 0x6, 0x0, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x9}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x9], 0x40}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x5, 0x5, 0x1, 0x0], 0x4}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc6, 0x1, 0x20, 0x1, "13f7", ')'}]}], [{{0x9, 0x5, 0x3, 0x0, 0x8, 0xa7, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x31ba}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x94, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x410, 0x3, 0x79, 0x6, [@generic={0x2}]}}, {{0x9, 0x5, 0x2, 0x1c, 0x200, 0x39, 0x4, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}, @generic={0xb4, 0xc, "fec96872a2616ceec5f4cf63daf8802b355823200a741cb702daa119917d0e155bb728172a3ca561cadad35013023ab3210b95c9dbf5e69ab61ab1a8632c454f4a4e36c677425670df0b50ef044beb9a7eab801306318447d050f3c72b81803898a336c444f1496887e35c5bd922fe07a7a1ac6952025106da295b799b1e55b498da20e9d4af4131e37507bbd44e348da1d7657ca07db8c95e3a7daf8a2a30671d8635ab0b36479a53b11baf257c36af8f48"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xce, 0xaa, 0x7, [@generic={0xc, 0x0, "04c85c59028c0d14591e"}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7f, 0x2, 0x5d, [@generic={0x65, 0x1d, "89fe633a1427b23b657fe0d39cc7004b4946df92bef430cf286c67786eec795937a41a14284f7b96c053805d382160e76ec705ca391eb85245116c5588c3b374ee2cc4649c38fd70e8410e42d0d1fac7beb37bab68f01d5c951030919320b98c52a662"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xc000}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x0, 0xb, 0x8b, [@generic={0xa1, 0x0, "d0f191805bb948fb453f208b901eb935098b78d287c21a624ea20fd6858aee240336bd9ae49572bf667c01dc766fe56d77b231b6587b3245794f9b8123b963a859b8c1967a3292562c7ed83adc06ece2671242bca4244832651fa183ab673e76c699ede125fdbc57e810cfd72b8e2d6bbc1c2373c3597d70190ac940d97d41d53988066ff614f37cefc9279d1d2573198962cfa3ed5bfc447cbb05a889dd60"}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x20, 0x99}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 05:50:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 05:50:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xf4240, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 679.705894][ T27] audit: type=1804 audit(1658037025.250:570): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/438/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 679.743172][T10371] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x57}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:25 executing program 2: mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) 05:50:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@RTM_NEWMDB={0x18, 0x54, 0xc13}, 0x18}}, 0x0) [ 679.894775][ T145] usb 1-1: new high-speed USB device number 11 using dummy_hcd 05:50:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 680.123811][ T3675] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 680.143755][ T145] usb 1-1: Using ep0 maxpacket: 8 [ 680.158881][ T27] audit: type=1804 audit(1658037025.700:571): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/439/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 680.162218][T10399] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.363848][ T145] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 680.382049][ T145] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 680.392573][ T145] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.404254][ T3675] usb 4-1: Using ep0 maxpacket: 16 [ 680.553840][ T3675] usb 4-1: config 0 has an invalid interface number: 84 but max is 1 [ 680.553850][ T145] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 680.562197][ T3675] usb 4-1: config 0 has no interface number 1 [ 680.578285][ T3675] usb 4-1: config 0 interface 84 altsetting 2 endpoint 0x9 has invalid maxpacket 1040, setting to 64 [ 680.579938][ T145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.589630][ T3675] usb 4-1: config 0 interface 84 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 680.608292][ T145] usb 1-1: Product: syz [ 680.612730][ T145] usb 1-1: Manufacturer: syz [ 680.614704][ T3675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 127, changing to 10 [ 680.617524][ T145] usb 1-1: SerialNumber: syz [ 680.636673][ T3675] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 680.651647][ T3675] usb 4-1: config 0 interface 84 has no altsetting 0 [ 680.895648][ T3675] usb 4-1: string descriptor 0 read error: -22 [ 680.901894][ T3675] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=9e.39 [ 680.911293][ T3675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.929279][ T3675] usb 4-1: config 0 descriptor?? [ 680.966397][ T145] usb 1-1: 0:2 : does not exist [ 680.990825][ T145] usb 1-1: USB disconnect, device number 11 [ 681.016439][T10381] udevd[10381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.193831][ T3675] r8152 4-1:0.84: Unknown version 0x0000 [ 681.215716][ T3675] usb 4-1: USB disconnect, device number 97 05:50:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x0, 0x0, 0x0, 0x860}, 0x48) 05:50:26 executing program 1: io_setup(0xe436, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 05:50:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f00000001c0), 0x5, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x0, 0x6d, 0x0, 0x0, 0x0, {}, [@IFLA_MAP, @IFLA_NUM_RX_QUEUES, @IFLA_CARRIER, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST]}, @IFLA_MTU, @IFLA_PHYS_SWITCH_ID={0x0, 0x24, "dd33fc1a4264da07ca0b38855df8c8d65989498e6dac827d48"}, @IFLA_NET_NS_PID]}, 0x14}}, 0x0) 05:50:26 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x122f81) write$cgroup_pressure(r0, &(0x7f0000000000)={'full'}, 0x2f) 05:50:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 681.422434][ T27] audit: type=1400 audit(1658037026.960:572): avc: denied { append } for pid=10403 comm="syz-executor.2" name="mouse0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 681.540007][ T27] audit: type=1804 audit(1658037027.080:573): pid=10407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/440/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 681.583400][T10407] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:27 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x40049409, 0x0) 05:50:27 executing program 2: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) 05:50:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@dellinkprop={0x20}, 0x20}, 0x300}, 0x0) 05:50:27 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) 05:50:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x5}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x48) 05:50:27 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x89a0, 0x0) 05:50:27 executing program 0: sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 05:50:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x7}, [@generic={0x4}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x28}]}}, &(0x7f0000000040)=""/184, 0x2a, 0xb8, 0x1}, 0x20) 05:50:27 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x8912, 0x0) 05:50:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x2, &(0x7f0000000080)=@framed={{}, [@generic]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 1: mlock2(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 05:50:27 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000000440), 0x8, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 05:50:27 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) [ 681.944213][ T27] audit: type=1804 audit(1658037027.490:574): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/441/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 681.994417][T10429] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:27 executing program 1: mlock2(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) 05:50:27 executing program 5: socket(0x0, 0xa, 0xffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_clone(0x40000200, &(0x7f0000001cc0)="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", 0xfb, 0x0, &(0x7f0000001e00), &(0x7f0000001e40)="9622f3da1fdebb8024f81eb6f9d2a472f0c8877f0f619dfb4693ae5031d8a68b4da3") 05:50:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) 05:50:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="040001006e451f0fcb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18209062", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc702, &(0x7f0000000080)=@framed={{}, [@generic]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x61}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:27 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 05:50:27 executing program 2: syz_open_dev$vcsn(&(0x7f0000000180), 0xffb, 0xf00) 05:50:28 executing program 2: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000200, 0x0, 0x0, 0x0, 0x0, 0x0) 05:50:28 executing program 1: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000680)='ns/net\x00') [ 682.411780][ T27] audit: type=1804 audit(1658037027.950:575): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/442/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 [ 682.431204][T10461] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000640)={0xe84, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xc24, 0x5, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x244, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}]}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}]}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x133}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x126f}]}]}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd76}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfdd6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x168, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5049}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x24c, 0x5, 0x0, 0x1, [{0x248, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x256}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}]}]}, 0xe84}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 05:50:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffff"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:28 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$UHID_CREATE2(r0, &(0x7f00000006c0)=ANY=[], 0x1e5) 05:50:28 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) 05:50:28 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x7, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:50:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001340)={'ip6tnl0\x00', &(0x7f00000012c0)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @private1}}) 05:50:28 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 682.774786][T10484] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 05:50:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x9, 0x7}, 0x48) 05:50:28 executing program 0: io_setup(0xe436, &(0x7f0000000280)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x2, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)="0080de0000000000", 0x7ffffffff000}]) [ 683.002020][ T27] audit: type=1804 audit(1658037028.540:576): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/443/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 05:50:28 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ad0) 05:50:28 executing program 5: socketpair(0x18, 0x0, 0x2, &(0x7f0000001480)) 05:50:28 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) 05:50:28 executing program 1: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) 05:50:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffff"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) 05:50:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x2, &(0x7f0000000680)=@raw=[@btf_id], &(0x7f0000000700)='syzkaller\x00', 0x7, 0xb9, &(0x7f0000000740)=""/185, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) 05:50:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@dellinkprop={0x20, 0x11}, 0x20}}, 0x0) 05:50:28 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, 0x0}) 05:50:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@generic={0x54}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:28 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000c00)='net/ip_mr_vif\x00') openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011700)="ed8100000a000000ddf4655fddf4655fddf4655f00000000000001", 0x1b, 0x2200}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}, {&(0x7f0000012e00)="02", 0x1, 0x10400}, {&(0x7f0000012f00)="03", 0x1, 0x10800}, {&(0x7f0000013000)="04", 0x1, 0x10c00}, {&(0x7f0000000240)="05", 0x1, 0x11000}, {&(0x7f00000001c0)="000000000000e3e58fbbdab8000000000036e52fbf00000000f66007c7528600000000000000000000000040000033000000000001000000000000000000000000c00100000000000000000000000000000000000000000000000000000001", 0x5f, 0x113fe}], 0x0, &(0x7f0000000380)=ANY=[]) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r0, &(0x7f0000000080)='./file1\x00', 0x0, r2, 0x0) getresgid(0x0, 0x0, 0x0) [ 683.248979][ T27] audit: type=1804 audit(1658037028.790:577): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/444/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 05:50:28 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ad0) 05:50:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/213, 0xd5}], 0x1, 0xffff, 0x0) 05:50:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) 05:50:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) 05:50:29 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a70) [ 683.440384][T10529] loop0: detected capacity change from 0 to 1024 [ 683.456836][ T2977] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 05:50:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffff"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:29 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000007c0)=""/160, 0x26, 0xa0, 0x1}, 0x20) 05:50:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ad0) [ 683.493741][ T2977] Buffer I/O error on dev loop0, logical block 0, async page read 05:50:29 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040)) [ 683.535876][ T2977] loop0: unable to read partition table 05:50:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 05:50:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) fsmount(0xffffffffffffffff, 0x1, 0x0) getgroups(0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0xee00, 0x0]) getuid() r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011700)="ed8100000a000000ddf4655fddf4655fddf4655f00000000000001", 0x1b, 0x2200}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}, {&(0x7f0000012e00)="02", 0x1, 0x10400}, {&(0x7f0000012f00)="03", 0x1, 0x10800}, {&(0x7f0000013000)="04", 0x1, 0x10c00}, {&(0x7f0000000240)="05", 0x1, 0x11000}, {&(0x7f00000001c0)="000000000000e3e58fbbdab8000000000036e52fbf00000000f66007c7528600000000000000000000000040000033000000000001000000000000000000000000c001000000000000000000000000000000000000000000000000000000016c8bdc", 0x62, 0x113fe}], 0x0, &(0x7f0000000380)=ANY=[]) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchownat(r1, &(0x7f0000000080)='./file1\x00', 0x0, r3, 0x0) getgroups(0x4, &(0x7f0000000380)=[0x0, 0xee00, 0x0, 0x0]) chown(0x0, 0x0, r3) [ 683.617701][T10529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 683.645129][T10546] loop1: detected capacity change from 0 to 1024 05:50:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000380), 0x8) 05:50:29 executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1ad0) 05:50:29 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a70) 05:50:29 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@size={'size', 0x3d, [0x33]}}]}) [ 683.705391][ T27] audit: type=1400 audit(1658037029.250:578): avc: denied { mount } for pid=10527 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 683.778747][ T27] audit: type=1400 audit(1658037029.320:579): avc: denied { unmount } for pid=3635 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 05:50:29 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a70) 05:50:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 683.820909][T10546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 683.852290][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 683.937076][ T3636] EXT4-fs (loop1): unmounting filesystem. 05:50:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 05:50:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x69, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) 05:50:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x9, &(0x7f0000000480)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f0000000000000100200000001000e8ffffff00000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000400)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000000380)=ANY=[]) 05:50:29 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1a70) 05:50:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) [ 684.266999][T10569] loop2: detected capacity change from 0 to 1024 05:50:29 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000fc0)) 05:50:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) [ 684.343235][T10569] EXT4-fs error (device loop2): ext4_quota_enable:6769: inode #4: comm syz-executor.2: casefold flag without casefold feature 05:50:29 executing program 5: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='3\x00', 0x2) 05:50:29 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x69, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) 05:50:30 executing program 2: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x839404, &(0x7f0000001500)={[{@fat=@dos1xfloppy}, {@nodots}, {@nodots}, {@fat=@errors_continue}], [{@uid_eq}]}) [ 684.417565][T10569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 05:50:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) [ 684.525034][ T3637] EXT4-fs (loop2): unmounting filesystem. 05:50:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x69, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) 05:50:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:50:30 executing program 5: syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001340)={[{}, {@utf8}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) 05:50:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 05:50:30 executing program 2: mq_open(&(0x7f0000000000)='.@\x00', 0x0, 0x0, 0x0) 05:50:30 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0xb03f8e6b33866e6d, 0x0) 05:50:30 executing program 3: syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)) 05:50:30 executing program 0: faccessat(0xffffffffffffffff, 0x0, 0x119) 05:50:30 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x69, 0x2}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2ad8) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) [ 685.223117][T10596] FAT-fs (loop5): Unrecognized mount option "uid=00000000000000060929" or missing value 05:50:30 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffc99a3b, 0x0) 05:50:30 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x801000, &(0x7f00000022c0)) [ 685.367855][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 685.367873][ T27] audit: type=1400 audit(1658037030.910:584): avc: denied { append } for pid=10605 comm="syz-executor.2" name="vfio" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 [ 685.455643][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.461982][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.481682][ T27] audit: type=1804 audit(1658037031.020:585): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/447/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 05:50:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:31 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[{0x0}, {&(0x7f00000011c0)="b2", 0x1}], 0x0, 0x0) 05:50:31 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) 05:50:31 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@huge_advise}, {@size={'size', 0x3d, [0x33]}}], [{@fsmagic}]}) 05:50:31 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 05:50:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000780)='./file1\x00', 0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001bc0)) [ 685.609946][ T27] audit: type=1400 audit(1658037031.150:586): avc: denied { unmount } for pid=3764 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 05:50:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x1262, 0xffffffffffffffff) 05:50:31 executing program 0: rt_sigqueueinfo(0x0, 0x16, &(0x7f0000001440)={0x0, 0x0, 0x8001}) [ 685.681335][T10624] tmpfs: Unknown parameter 'fsmagic' 05:50:31 executing program 5: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x1a1582) 05:50:31 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@huge_advise}, {@size={'size', 0x3d, [0x33]}}], [{@fsmagic}]}) [ 685.755403][T10628] FAT-fs (loop3): bogus number of reserved sectors [ 685.771773][T10628] FAT-fs (loop3): Can't find a valid FAT filesystem 05:50:31 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x90) write$FUSE_LK(r0, &(0x7f0000000200)={0x28}, 0x28) 05:50:31 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}}) [ 685.845732][ T27] audit: type=1804 audit(1658037031.390:587): pid=10629 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/448/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 685.885491][T10637] tmpfs: Unknown parameter 'fsmagic' [ 685.934190][T10641] fuse: Invalid rootmode 05:50:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:31 executing program 5: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x18) 05:50:31 executing program 3: syz_io_uring_setup(0x584f, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x196}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001140), &(0x7f0000001180)) 05:50:31 executing program 0: syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001340)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x31, 0x63, 0x32, 0xa]}}}]}) 05:50:31 executing program 2: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x24044090) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x44) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x2, &(0x7f0000001240)=[{&(0x7f00000010c0)="110b08a9b93ec2a1833539e3401c410e17c398847050195b55408bedcc42d056249bd4f06b631fe1b6933b3a67a33f4a0ce94ebf8af08b444dfe6f3c8c9856c08b846674a585", 0x46, 0x8}, {&(0x7f00000011c0)="b29c", 0x2}], 0x91083, &(0x7f0000001340)={[{}, {@utf8}, {@shortname_win95}, {@uni_xlateno}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_role={'subj_role', 0x3d, '%,d('}}]}) 05:50:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 05:50:31 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_LK(r0, &(0x7f0000000200)={0x28}, 0xfdef) [ 686.060421][T10647] FAT-fs (loop0): Unrecognized mount option "fsuuid=c11c2 [ 686.060421][T10647] " or missing value 05:50:31 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x40) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) 05:50:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x7fff, 0x9, &(0x7f00000006c0)=[{&(0x7f00000000c0)="c4d9c89edbc1e5822b45d368d371c93246271238b5b2151b31e5ec4700ccbb12f7a22b616bf374116442c1f6e528eedc9fd6d63b5f24fa8cada4f2ae9f64f42a3ea19421575cebb9b76e2a647046c9bc60da99cfd30480217c8c0e4eae2bb83fd17b71a9571a38dad1a41900b473a2780165245bb3", 0xffffff51, 0x81}, {&(0x7f0000000240)="f2276c1fd2fed00a71578e72902e9f5fbe711d00c36eed8f46bd78b82dc2387d71ed13704de25f40a7c35a329183101b26b3d2aae9952bf46f92bbdcc320a58c17915c5b00f260c4f00c72628a147e43dfcd8786511feb3489ab108e4bda1afd9acba4d49aaccfa541728cba6d0c93857a7a5d73d845e643726e2ce64d126f9dd060d035f417d945e316f321d025982c2de85f7be40760cf37b2832fbbe4689d0fa258b285c125092b501259a7f3db33", 0xb0, 0xb1e}, {&(0x7f0000000140)="788050ff414c971fbaa6fe320cb32c7ceb2af1d661bf08555258c99c79775a3ecd7acbe43854b354851dcc65a65b98b95404eb87af96a8e07c8229d579d9b7756849231329800dcc", 0x48, 0x8001}, {&(0x7f0000000300)="88cbe1a11276ac41867b861665a06de0a31a3c25f1368a339ce07071c0be4977cb833fd9acf988d87e2b12383d52b3bf5208bd42f6693822068d45ac067256ef9a77aa7bbbaf1d8cab9dc6b585790189ca21cba616b89e897f3b2a14ee20c10256e6398eba9a7a39aa99afd6c6879015896df8d0fe1672752e9400a02330b60568836afdb4792b0654d2242d5e09d42f39e5f4eb239078dc6c33fe46f43c174b111bbf4787b8dd560fcb7e93bc341b7323c8253ecdec6cfc72bbda96ba7a6fdae9b086aeffa269c1b3152102819200a7a89f", 0xd2, 0x8}, {&(0x7f0000000400)="f6a45e5ff98684a0e29e550286f97c97568217bb77c99e414bec", 0x1a, 0x9}, {&(0x7f0000000440)="95c9eeeb1cb82a3f093b185caca25d7bcd8e432399c6c5366b45963db54ed6a7d2e2021e57dc0b088a83efae9664cd6cb374f2e23ad6861a326b91ecca034927822d70172458d952bc31e46f6a9d4661414047633b7400ba455b6ee21b3d5fa96dd127dd077419f9c12b6488ba9f4ded29b95bab997930191eb600a7adea868df8f07d8ae2c3a70d7d13f7b2e91c5fc4bff510b6eb93c98928f71445d586064632e81e6a7c38ba4d6438cbf117fe2e8b2a32cfa04ca697eb35bce2535db1f0bc9a24d42fc1d6e12f5babb9474adfd4b8a21d0928a65627fc20237e5f729fb5caef66e697", 0xe4, 0x4}, {&(0x7f0000000540)="b294481322577495117db63f844a3c65a5dfac01597c8b430b8923463427", 0x1e, 0x1ff}, {&(0x7f0000000580)="6536649c08298055d2371753a18f8780babf0ec4b79b982a4deb900d187321493d40ecd1a8f041de364434b43133120f0dab363ec10dc9c81372684d2d1fa05ce4e6806d7bec7c3d3eb1f6ab0bb0aad92d6936c33fe15b58d11b24a2b8e5c0d27194beab8e561fb261efbc5680be5fe978a52365fd6ff2cbb0887f2c1599c53642314a34cc654f747c2fd4efaaa470c56766a6850b7404e4a632d28124ccfcb8611ff3475a86f47ad56a7a963a58a0185291a2a38cd07af0565d8d08", 0xbc, 0x2}, {&(0x7f0000000980)="4b43d9ff5aab2bbc7973d559c54abf2d4fd992fad49da966c771daf84d30bcc7bf086dba5ad4968e008812684cb0ac5d8ed1feccd2f542fcee5b0e25cb117b7780ec39c05f7faceb6b73f5701997ff7784d894f6d445d5958cb86e43df9b40b2441ee03496fac6209c2d8ea8e5871e72b6ab9056f015e6cdb5640100b892089eaf789fc3", 0x84, 0x6930}], 0x4, &(0x7f0000000b40)={[{@orlov}, {@journal_checksum}, {@nodiscard}, {@auto_da_alloc}], [{@subj_type}, {@obj_type={'obj_type', 0x3d, '/\xe5\xad\xbf#z\xb2\x97`\xd9\x9c\xd7\xf9\x9f\f\x88\xdb\xd0\xf8,\xdc\xe4\xeds\x17\xa5~i6\x15Fps\xd5\x1aE~qE\xf1\x13>\x82\xfe\t0\x81*\b^/\xde\xf3\xf95\x85\xabMKD\a\x02P\xaa\xbe\xc75N\xc3\x87\xe6\t\x9d\x7f\xecA6.\x1fV\xef\xe5\x8c\xe6\x19\'\x81\xd8\xb2\xd5\x01i(\xf7\xa7\x91,$\xe7\x91\xb9\xc8\xea\x91.\x8c\xd5\x947G\x94-$\x8b~\xfd\xe9oy\xa2\xa0\xaa\xc7wvuG\xa0\xd9\xe2\xbb\xe4\xee\xf5\xaa\x8c\xd0M\'8\x88v\xf3D\x1b\x12\x88\x8a\x17/\xa9\xac\xab\xae\xd3\xa4\xa4\xa4\"S\xbd\xd8\x01\xf1\x8fZ\x86\xb2\xff\xae\xc3\xbbC\r\x17\xc9]@\xbc\xd3M\xb6~\'1\x06\x81'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'obj_type'}}, {@fsname={'fsname', 0x3d, 'j%P?\xf3\x9cE\xd0#\x9b\xf0\xe7\a\xa5\x16\xc2?08\x01\x89\xca\xa8\xeb\xdd\xc4,Z\xed\xeb\xc2\xd4\xa8\x88\xe3\xea\x8d\rrz%%\xc3'}}, {@uid_eq}]}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:50:31 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 05:50:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}, 0x0) [ 686.144320][ T27] audit: type=1804 audit(1658037031.690:588): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/449/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 05:50:31 executing program 2: r0 = creat(&(0x7f00000015c0)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:50:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:31 executing program 3: r0 = socket$inet(0x2, 0x80801, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000600)) 05:50:31 executing program 1: clock_getres(0x28a40de98acfd37c, 0x0) 05:50:31 executing program 5: io_uring_setup(0x5cdb, &(0x7f0000000000)={0x0, 0x0, 0x4}) 05:50:31 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4002013, r0, 0x10000000) syz_io_uring_setup(0x9d2, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 05:50:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x12ed) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) 05:50:32 executing program 5: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20044800) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800), 0xc, 0x0}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000001040), 0x0, 0x400, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001340)={[{@utf8}, {@shortname_win95}, {@uni_xlateno}], [{@subj_role={'subj_role', 0x3d, '%,d('}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) 05:50:32 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}]}}) [ 686.599487][T10683] fuse: Unknown parameter 'smackfshat' [ 686.615413][T10684] loop5: detected capacity change from 0 to 2 [ 686.621595][ T27] audit: type=1804 audit(1658037032.160:589): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/450/cgroup.controllers" dev="sda1" ino=1156 res=1 errno=0 [ 686.705994][ T2977] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 686.719512][ T2977] Buffer I/O error on dev loop5, logical block 0, async page read [ 686.728141][ T2977] ldm_validate_partition_table(): Disk read failed. [ 686.735464][ T2977] Dev loop5: unable to read RDB block 0 [ 686.741154][ T2977] loop5: unable to read partition table [ 686.747280][ T2977] loop5: partition table beyond EOD, truncated 05:50:32 executing program 3: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001280), r0) 05:50:32 executing program 2: creat(&(0x7f00000015c0)='./file0\x00', 0x0) 05:50:32 executing program 0: readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000003200)=""/160, 0xa0) 05:50:32 executing program 1: mknodat(0xffffffffffffffff, 0x0, 0x99489972ae16a450, 0x0) 05:50:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x125f, 0xffffffffffffffff) 05:50:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 687.025425][T10661] loop0: detected capacity change from 0 to 32767 [ 687.044970][T10661] EXT4-fs: Ignoring removed orlov option [ 687.063848][T10661] ext4: Unknown parameter 'subj_type' 05:50:32 executing program 1: setfsuid(0xee00) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x541b, 0xffffffffffffffff) 05:50:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) [ 687.169025][ T27] audit: type=1804 audit(1658037032.710:590): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/451/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 05:50:32 executing program 3: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)={0xb8, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {0x0, 0x0, 0xc, 0x0, '+@{*[&$:+.+@'}}]}, 0xb8) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) 05:50:32 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000002ec0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f00000032c0)='./file2/file0\x00', 0x0) 05:50:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x401070ca, 0xffffffffffffffff) 05:50:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 05:50:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff0802110000015050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:32 executing program 2: futimesat(0xffffffffffffffff, 0x0, &(0x7f0000001980)={{}, {0x77359400}}) 05:50:32 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 05:50:33 executing program 0: futimesat(0xffffffffffffffff, &(0x7f0000001940)='./file0\x00', 0x0) [ 687.416549][ T27] audit: type=1400 audit(1658037032.960:591): avc: denied { setattr } for pid=10706 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 05:50:33 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 05:50:33 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000057c0)) 05:50:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001140)=0x7, 0x4) 05:50:33 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 05:50:33 executing program 2: rt_sigtimedwait(&(0x7f0000000680), 0x0, &(0x7f0000000740), 0x8) 05:50:33 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 05:50:33 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f00000012c0)={[{@huge_advise}, {@size={'size', 0x3d, [0x0]}}]}) 05:50:33 executing program 1: futex(&(0x7f0000000000), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) [ 687.665262][ T27] audit: type=1804 audit(1658037033.210:592): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/452/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 687.758006][T10734] tmpfs: Bad value for 'size' [ 687.798104][ T27] audit: type=1400 audit(1658037033.240:593): avc: denied { setopt } for pid=10725 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 05:50:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff0802110000015050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:33 executing program 5: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x14}, 0x14}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001280), r0) 05:50:33 executing program 2: syz_mount_image$msdos(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000028c0), 0x0, &(0x7f00000029c0)={[{@dots}], [{@smackfsfloor={'smackfsfloor', 0x3d, '^\\,}+\'\\'}}]}) 05:50:33 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000005200)={0x3, &(0x7f0000000000)=[{0x5}, {}, {0x8c83}]}, 0x10) 05:50:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 05:50:33 executing program 3: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) 05:50:33 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x401870cb, 0xffffffffffffffff) 05:50:33 executing program 0: r0 = io_uring_setup(0x671a, &(0x7f0000001040)) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x10000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 687.916501][T10741] FAT-fs (loop2): Unrecognized mount option "smackfsfloor=^\" or missing value 05:50:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f00000006c0)=[{&(0x7f00000000c0), 0x0, 0x81}, {&(0x7f0000000240)="f2276c1fd2fed00a71578e72902e9f5fbe711d00c36eed8f46bd78b82dc2387d71ed13704de25f40a7c35a329183101b26b3d2aae9952bf46f92bbdcc320a58c17915c5b00f260c4f00c72628a147e43dfcd8786511feb3489ab108e4bda1afd9acba4", 0x63, 0xb1e}, {&(0x7f0000000140)="788050ff414c971fbaa6fe320cb32c7ceb2af1d661bf08555258c99c79775a3ecd7acbe43854b354851dcc65a65b98b95404eb87af96a8e07c8229d579d9b7756849231329800dcc", 0x48, 0x8001}, {&(0x7f0000000300)}, {&(0x7f0000000400)="f6a45e5ff98684a0e29e550286f97c97568217bb77c99e414bec", 0x1a, 0x9}, {0x0}, {0x0}], 0x4, &(0x7f0000000b40)={[{@orlov}, {@journal_checksum}, {@nodiscard}], [{@subj_type}, {@obj_type={'obj_type', 0x3d, '/\xe5\xad\xbf#z\xb2\x97`\xd9\x9c\xd7\xf9\x9f\f\x88\xdb\xd0\xf8,\xdc\xe4\xeds\x17\xa5~i6\x15Fps\xd5\x1aE~qE\xf1\x13>\x82\xfe\t0\x81*\b^/\xde\xf3\xf95\x85\xabMKD\a\x02P\xaa\xbe\xc75N\xc3\x87\xe6\t\x9d\x7f\xecA6.\x1fV\xef\xe5\x8c\xe6\x19\'\x81\xd8\xb2\xd5\x01i(\xf7\xa7\x91,$\xe7\x91\xb9\xc8\xea\x91.\x8c\xd5\x947G\x94-$\x8b~\xfd\xe9oy\xa2\xa0\xaa\xc7wvuG\xa0\xd9\xe2\xbb\xe4\xee\xf5\xaa\x8c\xd0M\'8\x88v\xf3D\x1b\x12\x88\x8a\x17/\xa9\xac\xab\xae\xd3\xa4\xa4\xa4\"S\xbd\xd8\x01\xf1\x8fZ\x86\xb2\xff\xae\xc3\xbbC\r\x17\xc9]@\xbc\xd3M\xb6~\'1\x06\x81'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'obj_type'}}, {@uid_eq}]}) syz_mount_image$ext4(0x0, 0x0, 0xdc8e, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:33 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x1278, r0) 05:50:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@default_permissions}]}}) 05:50:33 executing program 0: clock_gettime(0x0, &(0x7f00000004c0)) [ 688.058551][T10753] loop5: detected capacity change from 0 to 128 [ 688.165669][T10761] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.199815][T10761] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.221987][T10761] ldm_validate_partition_table(): Disk read failed. [ 688.229698][T10761] Dev loop5: unable to read RDB block 0 [ 688.237314][T10761] loop5: unable to read partition table [ 688.243202][T10761] loop5: partition table beyond EOD, truncated [ 688.255405][T10761] loop5: detected capacity change from 0 to 110 05:50:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff0802110000015050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:33 executing program 3: futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x0) 05:50:33 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006a40)='./file0\x00', &(0x7f0000006a80), 0x0) 05:50:33 executing program 1: openat$incfs(0xffffffffffffffff, 0x0, 0x181340, 0x0) 05:50:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 688.265648][ T2977] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.275220][ T2977] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.296347][ T2977] loop5: unable to read partition table 05:50:33 executing program 3: syz_genetlink_get_family_id$devlink(0xfffffffffffffffd, 0xffffffffffffffff) 05:50:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB='dots,dots,fmask=0000000000\n']) 05:50:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f00000006c0)=[{&(0x7f00000000c0), 0x0, 0x81}, {&(0x7f0000000240)="f2276c1fd2fed00a71578e72902e9f5fbe711d00c36eed8f46bd78b82dc2387d71ed13704de25f40a7c35a329183101b26b3d2aae9952bf46f92bbdcc320a58c17915c5b00f260c4f00c72628a147e43dfcd8786511feb3489ab108e4bda1afd9acba4", 0x63, 0xb1e}, {&(0x7f0000000140)="788050ff414c971fbaa6fe320cb32c7ceb2af1d661bf08555258c99c79775a3ecd7acbe43854b354851dcc65a65b98b95404eb87af96a8e07c8229d579d9b7756849231329800dcc", 0x48, 0x8001}, {&(0x7f0000000300)}, {&(0x7f0000000400)="f6a45e5ff98684a0e29e550286f97c97568217bb77c99e414bec", 0x1a, 0x9}, {0x0}, {0x0}], 0x4, &(0x7f0000000b40)={[{@orlov}, {@journal_checksum}, {@nodiscard}], [{@subj_type}, {@obj_type={'obj_type', 0x3d, '/\xe5\xad\xbf#z\xb2\x97`\xd9\x9c\xd7\xf9\x9f\f\x88\xdb\xd0\xf8,\xdc\xe4\xeds\x17\xa5~i6\x15Fps\xd5\x1aE~qE\xf1\x13>\x82\xfe\t0\x81*\b^/\xde\xf3\xf95\x85\xabMKD\a\x02P\xaa\xbe\xc75N\xc3\x87\xe6\t\x9d\x7f\xecA6.\x1fV\xef\xe5\x8c\xe6\x19\'\x81\xd8\xb2\xd5\x01i(\xf7\xa7\x91,$\xe7\x91\xb9\xc8\xea\x91.\x8c\xd5\x947G\x94-$\x8b~\xfd\xe9oy\xa2\xa0\xaa\xc7wvuG\xa0\xd9\xe2\xbb\xe4\xee\xf5\xaa\x8c\xd0M\'8\x88v\xf3D\x1b\x12\x88\x8a\x17/\xa9\xac\xab\xae\xd3\xa4\xa4\xa4\"S\xbd\xd8\x01\xf1\x8fZ\x86\xb2\xff\xae\xc3\xbbC\r\x17\xc9]@\xbc\xd3M\xb6~\'1\x06\x81'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'obj_type'}}, {@uid_eq}]}) syz_mount_image$ext4(0x0, 0x0, 0xdc8e, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000002f00)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)=[{&(0x7f0000007580)=ANY=[], 0x13fc}, {&(0x7f0000001440)={0xac8, 0x0, 0x0, 0x0, 0x0, "", [@generic="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"]}, 0xac8}], 0x2, &(0x7f0000002ec0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) 05:50:33 executing program 0: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001340)={[{@uni_xlate}]}) 05:50:34 executing program 3: syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffffff, 0x513403) 05:50:34 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x842}, 0x18) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) [ 688.446915][T10776] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000 [ 688.446915][T10776] " or missing value [ 688.473993][T10781] FAT-fs (loop0): bogus number of reserved sectors [ 688.474255][T10780] loop5: detected capacity change from 0 to 128 [ 688.480518][T10781] FAT-fs (loop0): Can't find a valid FAT filesystem [ 688.566234][T10788] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 688.608928][T10788] Buffer I/O error on dev loop5, logical block 0, async page read [ 688.622373][T10788] ldm_validate_partition_table(): Disk read failed. [ 688.632906][T10788] Dev loop5: unable to read RDB block 0 [ 688.639022][T10788] loop5: unable to read partition table [ 688.647874][T10788] loop5: partition table beyond EOD, truncated [ 688.663859][T10788] loop5: detected capacity change from 0 to 110 05:50:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', 0x0, 0x0, 0x2, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x4, &(0x7f0000000b40)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:34 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x40) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14}, 0x14}}, 0x0) 05:50:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000010c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001140), &(0x7f0000001180)) 05:50:34 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_LK(r0, &(0x7f0000000140)={0x28}, 0x28) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_LK(r1, &(0x7f0000000200)={0x28}, 0x20000228) 05:50:34 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x41}) 05:50:34 executing program 1: syz_mount_image$vfat(&(0x7f0000001040), 0x0, 0x0, 0x0, &(0x7f0000001240), 0x0, &(0x7f0000001340)) 05:50:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x84}, 0xc) 05:50:34 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x48000000, &(0x7f0000000680), 0x0, 0x0) 05:50:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x9, &(0x7f00000006c0)=[{&(0x7f00000000c0)="c4d9c89edbc1e5822b45d368d371c93246271238b5b2151b31e5ec4700ccbb12f7a22b616bf374116442c1f6e528eedc9fd6d63b5f24fa8cada4f2ae9f64f42a3ea19421575cebb9b76e2a647046c9bc60da99cfd30480217c8c0e4eae2bb83fd17b71a9571a38dad1a41900b473a2780165245bb3", 0xffffff51, 0x81}, {&(0x7f0000000240)="f2276c1fd2fed00a71578e72902e9f5fbe711d00c36eed8f46bd78b82dc2387d71ed13704de25f40a7c35a329183101b26b3d2aae9952bf46f92bbdcc320a58c17915c5b00f260c4f00c72628a147e43dfcd8786511feb3489ab108e4bda1afd9acba4d49aaccfa541728cba6d0c93857a7a5d73d845e643726e2ce64d126f9dd060d035f417d945e316f321d025982c2de85f7be40760cf37b2832fbbe4689d0fa258b285c125092b501259a7f3db33", 0xb0, 0xb1e}, {&(0x7f0000000140)="788050ff414c971fbaa6fe320cb32c7ceb2af1d661bf08555258c99c79775a3ecd7acbe43854b354851dcc65a65b98b95404eb87af96a8e07c8229d579d9b7756849231329800dcc", 0x48, 0x8001}, {&(0x7f0000000300)="88cbe1a11276ac41867b861665a06de0a31a3c25f1368a339ce07071c0be4977cb833fd9acf988d87e2b12383d52b3bf5208bd42f6693822068d45ac067256ef9a77aa7bbbaf1d8cab9dc6b585790189ca21cba616b89e897f3b2a14ee20c10256e6398eba9a7a39aa99afd6c6879015896df8d0fe1672752e9400a02330b60568836afdb4792b0654d2242d5e09d42f39e5f4eb239078dc6c33fe46f43c174b111bbf4787b8dd560fcb7e93bc341b7323c8253ecdec6cfc72bbda96ba7a6fdae9b086aeffa269c1b3152102819200a7a89f", 0xd2, 0x8}, {&(0x7f0000000400)="f6a45e5ff98684a0e29e550286f97c97568217bb77c99e414bec", 0x1a, 0x9}, {&(0x7f0000000440)="95c9eeeb1cb82a3f093b185caca25d7bcd8e432399c6c5366b45963db54ed6a7d2e2021e57dc0b088a83efae9664cd6cb374f2e23ad6861a326b91ecca034927822d70172458d952bc31e46f6a9d4661414047633b7400ba455b6ee21b3d5fa96dd127dd077419f9c12b6488ba9f4ded29b95bab997930191eb600a7adea868df8f07d8ae2c3a70d7d13f7b2e91c5fc4bff510b6eb93c98928f71445d586064632e81e6a7c38ba4d6438cbf117fe2e8b2a32cfa04ca697eb35bce2535db1f0bc9a24d42fc1d6e12f5babb9474adfd4b8a21d0928a65627fc20237e5f729fb5caef66e697", 0xe4, 0x4}, {&(0x7f0000000540)="b294481322577495117db63f844a3c65a5dfac01597c8b430b8923463427", 0x1e, 0x1ff}, {&(0x7f0000000580)="6536649c08298055d2371753a18f8780babf0ec4b79b982a4deb900d187321493d40ecd1a8f041de364434b43133120f0dab363ec10dc9c81372684d2d1fa05ce4e6806d7bec7c3d3eb1f6ab0bb0aad92d6936c33fe15b58d11b24a2b8e5c0d27194beab8e561fb261efbc5680be5fe978a52365fd6ff2cbb0887f2c1599c53642314a34cc654f747c2fd4efaaa470c56766a6850b7404e4a632d28124ccfcb8611ff3475a86f47ad56a7a963a58a0185291a2a38cd07af0565d8d08", 0xbc, 0x2}, {&(0x7f0000000980)="4b43d9ff5aab2bbc7973d559c54abf2d4fd992fad49da966c771daf84d30bcc7bf086dba5ad4968e008812684cb0ac5d8ed1feccd2f542fcee5b0e25cb117b7780ec39c05f7faceb6b73f5701997ff7784d894f6d445d5958cb86e43df9b40b2441ee03496fac6209c2d8ea8e5871e72b6ab9056f015e6cdb5640100b892089eaf789fc3", 0x84, 0x6930}], 0x4, &(0x7f0000000b40)={[{@orlov}, {@journal_checksum}, {@nodiscard}, {@auto_da_alloc}], [{@subj_type}, {@obj_type={'obj_type', 0x3d, '/\xe5\xad\xbf#z\xb2\x97`\xd9\x9c\xd7\xf9\x9f\f\x88\xdb\xd0\xf8,\xdc\xe4\xeds\x17\xa5~i6\x15Fps\xd5\x1aE~qE\xf1\x13>\x82\xfe\t0\x81*\b^/\xde\xf3\xf95\x85\xabMKD\a\x02P\xaa\xbe\xc75N\xc3\x87\xe6\t\x9d\x7f\xecA6.\x1fV\xef\xe5\x8c\xe6\x19\'\x81\xd8\xb2\xd5\x01i(\xf7\xa7\x91,$\xe7\x91\xb9\xc8\xea\x91.\x8c\xd5\x947G\x94-$\x8b~\xfd\xe9oy\xa2\xa0\xaa\xc7wvuG\xa0\xd9\xe2\xbb\xe4\xee\xf5\xaa\x8c\xd0M\'8\x88v\xf3D\x1b\x12\x88\x8a\x17/\xa9\xac\xab\xae\xd3\xa4\xa4\xa4\"S\xbd\xd8\x01\xf1\x8fZ\x86\xb2\xff\xae\xc3\xbbC\r\x17\xc9]@\xbc\xd3M\xb6~\'1\x06\x81'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'obj_type'}}, {@fsname={'fsname', 0x3d, 'j%P?\xf3\x9cE\xd0#\x9b\xf0\xe7\a\xa5\x16\xc2?08\x01\x89\xca\xa8\xeb\xdd\xc4,Z\xed\xeb\xc2\xd4\xa8\x88\xe3\xea\x8d\rrz%%\xc3'}}, {@uid_eq}]}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:34 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 05:50:34 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) [ 688.938251][T10800] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:34 executing program 1: syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x0, 0x91083, &(0x7f0000001340)) 05:50:34 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 05:50:34 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000240)='1\x00', 0x2) [ 689.371742][T10820] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:35 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000f00), 0x14a00, 0x0) 05:50:35 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0x100000000}], 0x0, &(0x7f0000001440)={[{@subvol={'subvol', 0x3d, '('}}, {@subvolid={'subvolid', 0x3d, 0x100000000}}]}) 05:50:35 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000fc0)) 05:50:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:35 executing program 5: creat(&(0x7f0000000340)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), 0x0) 05:50:35 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='6\x00', 0x2) 05:50:35 executing program 1: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x521bf77a82c4ff9a) write$FUSE_LK(r0, &(0x7f0000000140)={0x28}, 0x28) 05:50:35 executing program 5: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{@fat=@usefree}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}], [{@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@dont_measure}]}) [ 690.225305][T10832] loop0: detected capacity change from 0 to 264192 05:50:35 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) 05:50:35 executing program 0: io_uring_setup(0x671a, &(0x7f0000001040)={0x0, 0x0, 0x2, 0x0, 0x19}) 05:50:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c06, 0xffffffffffffffff) 05:50:36 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) [ 690.524098][T10833] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x77, 0x7}, {0x6, 0x0, 0x0, 0x9}]}) 05:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) 05:50:36 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 05:50:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:36 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0xffffffffffffff4c}) 05:50:36 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0x100000000}], 0x2204040, &(0x7f0000001440)) 05:50:36 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000005200)={0x0, 0x0}, 0x10) 05:50:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r0) 05:50:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x127c, r0) [ 690.776533][T10859] loop3: detected capacity change from 0 to 264192 [ 690.813095][ T27] kauditd_printk_skb: 7 callbacks suppressed 05:50:36 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x400, 0x1, &(0x7f0000001240)=[{&(0x7f00000010c0)="11", 0x1, 0x8}], 0x0, 0x0) [ 690.813111][ T27] audit: type=1400 audit(1658037036.350:601): avc: denied { create } for pid=10861 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 05:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) 05:50:36 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize}, {@blksize}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{(\x9bZ'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '*,'}}]}}) [ 690.927163][ T27] audit: type=1400 audit(1658037036.360:602): avc: denied { write } for pid=10861 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 691.000064][T10873] loop5: detected capacity change from 0 to 2 [ 691.057819][T10876] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 691.059509][ T27] audit: type=1400 audit(1658037036.360:603): avc: denied { nlmsg_write } for pid=10861 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 691.067326][T10381] Dev loop5: unable to read RDB block 2 05:50:36 executing program 2: r0 = socket$inet(0x2, 0x80801, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) 05:50:36 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x671a, &(0x7f0000001040)={0x0, 0x0, 0x2, 0x0, 0x19}) 05:50:36 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@pcr}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}]}}) 05:50:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000540), 0x0, 0x1ff}, {0x0}], 0x0, &(0x7f0000000b40)={[{@journal_checksum}], [{@obj_type={'obj_type', 0x3d, '/\xe5\xad\xbf#z\xb2\x97`\xd9\x9c\xd7\xf9\x9f\f\x88\xdb\xd0\xf8,\xdc\xe4\xeds\x17\xa5~i6\x15Fps\xd5\x1aE~qE\xf1\x13>\x82\xfe\t0\x81*\b^/\xde\xf3\xf95\x85\xabMKD\a\x02P\xaa\xbe\xc75N\xc3\x87\xe6\t\x9d\x7f\xecA6.\x1fV\xef\xe5\x8c\xe6\x19\'\x81\xd8\xb2\xd5\x01i(\xf7\xa7\x91,$\xe7\x91\xb9\xc8\xea\x91.\x8c\xd5\x947G\x94-$\x8b~\xfd\xe9oy\xa2\xa0\xaa\xc7wvuG\xa0\xd9\xe2\xbb\xe4\xee\xf5\xaa\x8c\xd0M\'8\x88v\xf3D\x1b\x12\x88\x8a\x17/\xa9\xac\xab\xae\xd3\xa4\xa4\xa4\"S\xbd\xd8\x01\xf1\x8fZ\x86\xb2\xff\xae\xc3\xbbC\r\x17\xc9]@\xbc\xd3M\xb6~\'1\x06\x81'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'obj_type'}}]}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0xdc8e, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 691.142039][ T27] audit: type=1400 audit(1658037036.360:604): avc: denied { read } for pid=10861 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 691.179229][T10880] fuse: Unknown parameter 'pcr' 05:50:36 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x401070cd, 0xffffffffffffffff) [ 691.193200][T10381] loop5: unable to read partition table [ 691.222875][T10381] loop5: partition table beyond EOD, truncated 05:50:36 executing program 3: futex(&(0x7f0000000140), 0x6, 0x0, 0x0, 0x0, 0x0) 05:50:36 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x680142, 0x0) [ 691.267146][ T27] audit: type=1804 audit(1658037036.440:605): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/458/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 05:50:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x9a00, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 691.337731][T10890] loop5: detected capacity change from 0 to 1 [ 691.372848][T10890] ext4: Unknown parameter 'obj_type' 05:50:36 executing program 2: mknod(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 05:50:37 executing program 3: pselect6(0xffffff74, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) [ 691.431558][ T27] audit: type=1326 audit(1658037036.560:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa2e289199 code=0x0 [ 691.474444][T10897] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 691.483619][T10897] Buffer I/O error on dev loop5, logical block 0, async page read 05:50:37 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), 0xffffffffffffffff) 05:50:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 691.553023][ T27] audit: type=1804 audit(1658037036.810:607): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/459/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 691.593786][T10897] ldm_validate_partition_table(): Disk read failed. 05:50:37 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x6cfad9236582d87, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b66, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x4, 0x8, 0x7ff}, {0x1, 0x5, 0x77, 0x7}, {0x6, 0x80, 0x80, 0x9}]}) [ 691.600438][T10897] Dev loop5: unable to read RDB block 0 05:50:37 executing program 3: io_uring_setup(0x671a, &(0x7f0000001040)={0x0, 0x0, 0x2}) [ 691.678293][T10897] loop5: unable to read partition table [ 691.710742][T10897] loop5: partition table beyond EOD, truncated [ 691.713902][ T27] audit: type=1326 audit(1658037037.240:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10906 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa2e289199 code=0x0 [ 691.769540][T10897] loop5: detected capacity change from 0 to 110 [ 691.772029][ T2977] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 691.823737][ T27] audit: type=1804 audit(1658037037.300:609): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/460/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 691.852918][ T2977] Buffer I/O error on dev loop5, logical block 0, async page read [ 691.868282][ T2977] loop5: unable to read partition table 05:50:37 executing program 5: renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) 05:50:37 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) 05:50:37 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)=@v2, 0x14, 0x2) 05:50:37 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[{0x0, 0x0, 0x4}], 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0xaaaaaaaaaaaaca9, &(0x7f0000000680), 0x0, 0x0) 05:50:37 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 05:50:37 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) 05:50:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:37 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@dos1xfloppy}], [{@uid_eq}]}) 05:50:37 executing program 1: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000500)={0x0, 0x989680}) 05:50:37 executing program 5: syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x1a1582) [ 692.229025][ T27] audit: type=1804 audit(1658037037.770:610): pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/461/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 05:50:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0) 05:50:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, 0x0, 0x0) [ 692.293984][T10933] FAT-fs (loop3): bogus number of reserved sectors [ 692.305240][T10933] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code 05:50:37 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) [ 692.372147][T10933] FAT-fs (loop3): Can't find a valid FAT filesystem 05:50:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001280)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x42, 0x0, "c02b8fb55583b17be24f163765032d25f972d6c3fb21d0ee727d363ffc9cc40728c4bd0cf1f201733de6b7c277ef12dee261781131b3fbefb8e13584046bb4f71390c3aaa07dbd8dc35fa367547f322c"}, 0xd8) 05:50:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x40) 05:50:38 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x18) 05:50:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:38 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x842}, 0x18) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) 05:50:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000002680)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 05:50:38 executing program 5: syz_io_uring_setup(0x584f, &(0x7f00000010c0)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 05:50:38 executing program 0: sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x20000010) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000800) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x80a02) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x1a1582) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 05:50:38 executing program 3: mknod(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 05:50:38 executing program 0: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000cc0), 0x2, 0x0) [ 693.077469][T10951] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 05:50:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 05:50:38 executing program 1: futex(&(0x7f0000000040), 0xb, 0x0, 0x0, &(0x7f00000021c0), 0x0) 05:50:38 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0xee01) 05:50:38 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, 0xfffffffffffffffc) 05:50:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f00000006c0)=[{0x0}], 0x0, &(0x7f0000000b40)={[{@journal_checksum}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'j%P?\xf3\x9cE\xd0#\x9b\xf0\xe7\a\xa5\x16\xc2?08\x01\x89\xca\xa8\xeb\xdd\xc4,Z\xed\xeb\xc2\xd4\xa8\x88\xe3\xea\x8d\rrz%%\xc3'}}, {@uid_eq}]}) syz_mount_image$ext4(0x0, 0x0, 0xdc8e, 0x0, &(0x7f0000000680), 0x0, 0x0) 05:50:38 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x801000, &(0x7f00000022c0)) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00') 05:50:38 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0xee01) 05:50:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f00000006c0)=[{0x0}], 0x0, &(0x7f0000000b40)={[], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'j%P?\xf3\x9cE\xd0#\x9b\xf0\xe7\a\xa5\x16\xc2?08\x01\x89\xca\xa8\xeb\xdd\xc4,Z\xed\xeb\xc2\xd4\xa8\x88\xe3\xea\x8d\rrz%%\xc3'}}]}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000680), 0x0, 0x0) 05:50:39 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x801000, &(0x7f00000022c0)) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00') 05:50:39 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x839404, &(0x7f0000001500)) [ 693.486214][T10975] loop5: detected capacity change from 0 to 110 [ 693.517497][ T2977] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 693.560980][ T2977] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.589510][ T2977] loop5: unable to read partition table 05:50:39 executing program 5: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r2 = socket(0x10, 0x4, 0x7fffffff) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000300)=[{{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2}, {0x2, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}}], 0x30) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340)=[{{0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff740}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x20044800) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4001c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004014) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x44) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000a80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="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", 0xfe}, {&(0x7f0000000bc0)="f84ce9ac850d0dd14a07914eb1211898356a31327f469b8d71a0650f5083af081359fee7b1a0c76f00aaf2a16dcc0055c070610482457ba22c18eafaad22b1876286a6737633f236b150821c91", 0x4d}, {&(0x7f0000000c40)="a8b2d0a2c1a9258657d19fccd3d5c80262cd4deb964f70f4d19570f51bccbe07ba22a6e17675075a6e26e8de7d345665812affed34ee836d551ad46af8e6c31c8aa846a59dcacc1b8eda935996cc5fa2524a8318328f304c648bea905fc2d30eed9aa18f18", 0x65}, {&(0x7f0000000cc0)="b2d4e35ca2af841c532eb365b355e16de61f71bc272d49315cd9e5d2989113de8af1bc29f5f19bbb5a2d75c753fabbcefc80886964f6ebfae7a4d562cd0bb0b6a0d07dfbc79f54e1b412aa2fd223078916e099a188718dc81ed9c9d0a687b69738c2ae5752adb31368916b640a2d5e99", 0x70}, {&(0x7f0000000d40)="999e7b7cac722732d879f62daeedd0be2d8c3c51c5e113fba4b6cfc2a7b1c81439b22e", 0x23}, {&(0x7f0000000d80)="0f8f64a37d8726cee852c0658f0953a47683c2feb951b8c2b4e9b506a04cd9bb39fbd85673f1065d3294010c794ae1b1715c5a37c67efa5c6be01c3c1d355491ec292b2aad02ee673d9daa5c169f03da67988faad8a4a807872d431f63024de702f9dbbe9bd83823853a5f4264904c52de411a3113a5a7cafe04c7e534965c4147e2a6044a1565dff4cb2a47eb1f10f71d03b9681e556589e8774a64f53226cc0128c6103f8940573ff6", 0xaa}, {&(0x7f0000000e40)="03d0c290c80719ca8893bfe2a75c64326c5b3c2591f71d02566d2799995d3a3517cca0d9fa169f2669b79e3b4662c347eb365f9603dc0c6b05d8b7d2184f1571960d5c747d59303d98e4c1138cfa124ce675b59cbc8e723ecd41e6f17427995c7c0b2a93bb1472b04ed22e603603e27d283fbed5a902099a47c25928c43a39b5a95f32ba20ad791de3f2b150d401ce0dcf0a521275df9fb368ab1347668d3eeda598db3860a05e1ce4b43eea592fd58b7b47b5ab0a5a38d05ffb79a7530019e866641a35ed", 0xc5}], 0x7, &(0x7f0000000fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x96}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}], 0x30}, 0x20000000) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x400, 0x2, &(0x7f0000001240)=[{&(0x7f00000010c0)="110b08a9b93ec2a1833539e3401c410e17c398847050195b55408bedcc42d056249bd4f06b631fe1b6933b3a67a33f4a0ce94ebf8af08b444dfe6f3c8c9856c08b846674a585ab92a7b204f4a95b643c535f034663d45e57d6c73902583f3b7c45016c7db232d74b65e0f438b43f0e5499672e9b885fcc8eb279c7e3228093fd9827259ae5f364619c28478795ddb789b0969090d02a3ab43067343ebf7cc162b6b5621b8764939aa3a6ccd0c26f7e613e1fd2b11e4eb72baf615a1974278119bc50cb4f", 0xc4, 0x8}, {&(0x7f00000011c0)="b29c91aabebedfdf1fbe386e0914898922b0635c59a165c1219e160e44031c35eddc629587d075e31dbccb53f77e0e33cb80aece199f30912c04b06c5fc3977520a81d", 0x43}], 0x91083, &(0x7f0000001340)={[{}, {@utf8}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x31, 0x31, 0x63, 0x32, 0xa, 0x37, 0x36], 0x2d, [0x64, 0x35, 0x33, 0x4], 0x2d, [0x30, 0x34, 0x30, 0x38], 0x2d, [0x66, 0x35, 0x62, 0x63], 0x2d, [0x2, 0x50, 0x65, 0x62, 0x63, 0x65, 0x35, 0x33]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@subj_role={'subj_role', 0x3d, '%,d('}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_gt}]}) 05:50:39 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_LK(r0, &(0x7f0000000140)={0x28}, 0x28) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r0, &(0x7f00000044c0)={0x90}, 0x90) [ 693.750737][T10989] loop5: detected capacity change from 0 to 2 [ 693.814594][T10381] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 693.839956][T10381] Buffer I/O error on dev loop5, logical block 0, async page read [ 693.865126][T10381] ldm_validate_partition_table(): Disk read failed. [ 693.883224][T10381] Dev loop5: unable to read RDB block 0 [ 693.893923][T10381] loop5: unable to read partition table [ 693.905517][T10381] loop5: partition table beyond EOD, truncated 05:50:39 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3f000000, &(0x7f0000000680), 0x0, 0x0) 05:50:39 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000002ec0)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000031c0)='./file2\x00', &(0x7f0000003200)=""/160, 0xa0) 05:50:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:39 executing program 0: mount$cgroup2(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)) 05:50:39 executing program 5: symlinkat(&(0x7f0000003840)='./file1\x00', 0xffffffffffffffff, 0x0) 05:50:39 executing program 0: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)={[{@fat=@dos1xfloppy}]}) 05:50:39 executing program 2: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x0, 0x0, &(0x7f0000000080), 0x0) [ 694.270779][T11003] FAT-fs (loop0): bogus number of reserved sectors [ 694.293824][T11003] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 694.353694][T11003] FAT-fs (loop0): Can't find a valid FAT filesystem 05:50:39 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_LK(r0, &(0x7f0000000200)={0x28}, 0xfffffdef) 05:50:39 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001280), r0) 05:50:39 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001380), 0x2204040, &(0x7f0000001440)) 05:50:40 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[{&(0x7f00000010c0)="110b08a9b93ec2a183", 0x9}, {0x0}], 0x0, 0x0) 05:50:40 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x38, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:40 executing program 1: syz_clone(0x50000, &(0x7f0000000000)="d5650abb535486177b08bd50c96369fd92ea52e2beb4d077d2fd2d114baa84", 0x1f, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="992b81782e30511242cdb1789133ba449bbd605b3188ff7bfd4fd7c8d3131d59785df1924e9e9aca8adc7fd78174c1ff673c2d80317728f096dcfe0e6aaf302de7404ef43d6605502b47f29eda6f660b0a94c099e98aacf25be9637aacd0feb79c8b8bea43fb8c6ca3fc529d65f018d82e9c543333e7ef748d70747788a495ee3aedced1c75f8824d33076def44f91376c88170450fafbc11ec16de86c1b1f21d332f6089cf1c0891742b84047b80e072e7e18680302cc523806ea40f544d86d9455df54d7c17334ea3470e109c091a051d90817b48efc958132661f0c3f9dc58f38f8d42684b4e630265f00") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) syz_clone(0xc20c0000, &(0x7f00000001c0)="f97b4a2329b22967ce1ced43dc78263496185e610acc4cb8e80db37208cd27c97175afa0a7a9d1a39210dfcf6585fce5ef5beeb2d101c7627b7d64a9fa4247a8dc10cbfda5fec3a3e687753eb244a44adb9b50960b858bc511514708da684974f410f848041d61d7dbab34739e25808ad0558c49882e2aacf7c804cb75c16e95b9ed8604315427b1c3ee38e315022a46527cd2c54cfe2d6a2f1e8fae38c9c401cb8c12fc9153", 0xa6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="64b557eb3cd86008ec323dc505a99a68f6f3a34d652102122adf11557206391bf0e9c09bae1724ee94bc989532f75c9ff994555cd93a3fc8ee83a4de8dcda91f583a533b827375421084568f5754dab3364365008c25a30eff3984") 05:50:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000240001"], 0x50}}, 0x0) 05:50:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:40 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1c8, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp6={{}, {0x0, "54c4"}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@LED={0x0, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x433) 05:50:40 executing program 0: add_key(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 05:50:40 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f00000007c0)='syzkaller\x00', 0x51fd, 0xf4, &(0x7f0000000800)=""/244, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:40 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r0, 0x0) 05:50:40 executing program 3: socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 05:50:40 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) 05:50:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000186"], 0x50}}, 0x0) 05:50:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@un=@abs, 0x80) 05:50:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:41 executing program 1: keyctl$restrict_keyring(0x18, 0x0, &(0x7f0000000080)='cifs.idmap\x00', 0x0) 05:50:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x15, r0, 0x0, 0x0) 05:50:41 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98daa06d504f038e17e", 0x1001, 0x0) [ 695.465619][T11037] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000011000186ff94b237356cd1ec27cbbe1f02"], 0x50}}, 0x0) 05:50:41 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98d", 0x5, 0x0) 05:50:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 05:50:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x11, r0, r0, r0, 0x0) 05:50:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@bridge_getlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_PROMISCUITY={0x8}, @IFLA_VFINFO_LIST={0x0, 0x16, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{}, {}, {}, {}, {}, {}]}, @IFLA_VF_SPOOFCHK, @IFLA_VF_LINK_STATE]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{}, {}, {}]}, @IFLA_VF_TRUST, @IFLA_VF_MAC={0x0, 0x1, {0x0, @random="b6ffa22ffd4c"}}, @IFLA_VF_RATE]}, {}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID, @IFLA_VF_RSS_QUERY_EN, @IFLA_VF_RATE, @IFLA_VF_TX_RATE, @IFLA_VF_LINK_STATE, @IFLA_VF_MAC={0x0, 0x1, {0x0, @random="cbf6ba62e28e"}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN, @IFLA_VF_IB_NODE_GUID]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN, @IFLA_VF_SPOOFCHK]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID, @IFLA_VF_IB_NODE_GUID, @IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}]}, @IFLA_VF_IB_NODE_GUID, @IFLA_VF_MAC={0x0, 0x1, {0x0, @broadcast}}]}]}, @IFLA_NUM_TX_QUEUES, @IFLA_EVENT={0x8}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x4c}}, 0x0) 05:50:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}, 0x0) 05:50:41 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98daa06d504f038e17e", 0xd, 0x0) 05:50:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) 05:50:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:41 executing program 0: add_key(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0xffffffffffffffff) 05:50:41 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x25, 0x39]}}]}) 05:50:41 executing program 2: openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200000}, 0x18) 05:50:41 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xe, 0x0, 0x0, 0x0) 05:50:41 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@none}]}) [ 695.928818][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.946450][T11069] tmpfs: Bad value for 'size' 05:50:41 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, 0x0, 0x0) 05:50:41 executing program 3: request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)=',}^!}*&%,$}\x00', 0x0) 05:50:41 executing program 5: keyctl$restrict_keyring(0xf, 0xfffffffffffffffe, 0x0, 0x0) 05:50:41 executing program 1: execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=[&(0x7f0000000380)='esdfs\x00'], 0x0) [ 696.019472][T11076] cgroup: Need name or subsystem set [ 696.045852][ T27] kauditd_printk_skb: 6 callbacks suppressed 05:50:41 executing program 3: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0) [ 696.045868][ T27] audit: type=1804 audit(1658037041.590:617): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/467/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:50:41 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) 05:50:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:41 executing program 5: keyctl$restrict_keyring(0x5, 0x0, 0x0, 0x0) 05:50:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='o']) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000100)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000bc0)={&(0x7f0000000380)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:50:41 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:41 executing program 3: keyctl$restrict_keyring(0xc, 0xfffffffffffffffe, 0x0, 0x0) 05:50:41 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:41 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r0, &(0x7f00000003c0)={0x1f, @fixed}, 0x8) 05:50:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001002cbd70000000000007000000", @ANYBLOB="88"], 0x50}}, 0x0) 05:50:41 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 05:50:41 executing program 5: keyctl$restrict_keyring(0x9, 0x0, &(0x7f0000000080)='cifs.idmap\x00', 0x0) 05:50:41 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_clone(0x144000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x15, r0, 0x0, 0x0) 05:50:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000110001002cbd7000000000000700", @ANYBLOB="880002"], 0x50}}, 0x0) [ 696.455158][T11108] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 696.534403][ T27] audit: type=1804 audit(1658037042.080:618): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/468/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 696.681475][ T9592] usb 2-1: new high-speed USB device number 6 using dummy_hcd 05:50:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x1}, r0) 05:50:42 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) 05:50:42 executing program 5: openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x180c0}, 0x18) 05:50:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0) 05:50:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:42 executing program 0: keyctl$restrict_keyring(0x2, 0xfffffffffffffffe, 0x0, 0x0) 05:50:42 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000001e40)='./file0\x00', r0, 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) 05:50:42 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r0, 0x0) [ 696.963852][ T9592] usb 2-1: Using ep0 maxpacket: 8 [ 697.004137][ T27] audit: type=1804 audit(1658037042.550:619): pid=11134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/469/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 697.104149][ T9592] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 697.112913][ T9592] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 697.124837][ T9592] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.325978][ T9592] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.335117][ T9592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.343128][ T9592] usb 2-1: Product: syz [ 697.348655][ T9592] usb 2-1: Manufacturer: syz [ 697.353291][ T9592] usb 2-1: SerialNumber: syz [ 697.683954][ T9592] usb 2-1: 0:2 : does not exist [ 697.723968][ T9592] usb 2-1: USB disconnect, device number 6 05:50:43 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:43 executing program 2: socketpair(0x2c, 0x3, 0x8, &(0x7f0000000000)) 05:50:43 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98d", 0x5, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 05:50:43 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:43 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)="8416e077ec", 0x5, 0x0) 05:50:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:43 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@generic, @generic, @map_idx]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000240001"], 0x50}}, 0x0) 05:50:43 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1c, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:43 executing program 5: syz_clone(0x50923000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 698.233045][ T27] audit: type=1804 audit(1658037043.770:620): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/470/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 698.268532][T11140] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:43 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x15, 0x0, 0x0) 05:50:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@bridge_getlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) 05:50:43 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 05:50:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001e0001"], 0x50}}, 0x0) [ 698.286756][T11151] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 05:50:43 executing program 0: keyctl$restrict_keyring(0x5, 0x0, &(0x7f0000000080)='cifs.idmap\x00', 0x0) 05:50:43 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@stats}]}) 05:50:43 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 05:50:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:44 executing program 5: syz_clone(0xc20c0000, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) 05:50:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') 05:50:44 executing program 0: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001e40)=[{0x0}], 0x1, 0x0) syz_clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001280)) 05:50:44 executing program 1: socketpair(0x10, 0x3, 0x9, &(0x7f0000000140)) 05:50:44 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:44 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x1d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 05:50:44 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 05:50:44 executing program 1: keyctl$restrict_keyring(0xe, 0xfffffffffffffffe, 0x0, 0x0) [ 698.792597][ T27] audit: type=1804 audit(1658037044.330:621): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/471/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 698.815721][T11184] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:44 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:44 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x44000200) 05:50:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:44 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2c, 0x0, 0x0) [ 699.325136][ T27] audit: type=1804 audit(1658037044.870:622): pid=11204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/472/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 699.360186][T11204] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:45 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, 0x0, 0x0) 05:50:45 executing program 5: keyctl$restrict_keyring(0x4, 0xfffffffffffffffe, 0x0, 0x0) 05:50:45 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:45 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x19, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:50:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:45 executing program 5: getcwd(&(0x7f0000000080)=""/92, 0x5c) 05:50:45 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:50:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x6, r0, 0x0, 0x0) 05:50:45 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x2, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:45 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xe, 0x0, 0x0, 0x0) 05:50:45 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-'}, 0x16, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98d", 0x5, 0x0) 05:50:45 executing program 5: add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2, 0xc}, 0x0, 0x0, 0xfffffffffffffffc) 05:50:45 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x48, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 700.141173][ T27] audit: type=1804 audit(1658037045.680:623): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/473/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 700.172734][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:45 executing program 1: socketpair(0x0, 0xc36a3ad1adcc5c2b, 0x0, 0x0) 05:50:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x2068, 0x30, 0x0, 0x0, 0x0, {}, [{0x2054, 0x1, [@m_police={0x2050, 0x0, 0x0, 0x0, {{0xb}, {0x2024, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x2068}}, 0x0) 05:50:45 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.id\x00') 05:50:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@bridge_getlink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 05:50:46 executing program 5: socketpair(0x29, 0x0, 0x0, &(0x7f0000000080)) 05:50:46 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') 05:50:46 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x21, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:46 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:46 executing program 0: add_key(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setuid(0x0) 05:50:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xb, r0, 0x0, 0x0) 05:50:46 executing program 1: syz_usb_connect$uac1(0x0, 0xd4, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x7f, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x1, 0x4, 0x3f}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x6, 0x1, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7f, 0x8, "163371e10a7e1c6f01"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x4, 0x4, 0x5, "652457ae88fb21d0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x9, 0x80, 0x0, {0x7, 0x25, 0x1, 0x101, 0x9, 0x176}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x1, 0x3f, "d200"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x14, 0x91, 0x8, "26923a7dbc"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xfff, 0x3, 0xba, "0d9b07c0b6dd00e5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x6, 0x9, {0x7, 0x25, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0xc4, 0x1, 0xff, 0x81}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x2, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x4, 0xeb8f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1ce38cdc8ed65ca4d173985e049aaae3"}]}, 0x2, [{0x45, &(0x7f0000000180)=@string={0x45, 0x3, "7cf6087f188214095b973c8dbbe175750882556d42e9323b039febda7fb590dc8268d03f75c5f670fc40f29984e951abdc82823a7f9b4e0ebd457b868a2defcc9fe247"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}]}) 05:50:46 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x6, r0, 0x0, 0x0) 05:50:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0) 05:50:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) [ 700.754198][ T27] audit: type=1804 audit(1658037046.300:624): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/474/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 700.801200][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:46 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_clone(0x144000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) 05:50:46 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 05:50:46 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x5, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)="8416e077ec0e96aabb", 0x9, 0x0) 05:50:46 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101140}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 700.943948][ T4578] usb 2-1: new high-speed USB device number 7 using dummy_hcd 05:50:46 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:50:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001002cbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="880002000000000008002e"], 0x50}}, 0x0) 05:50:46 executing program 5: syz_mount_image$f2fs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='s']) [ 701.136287][ T27] audit: type=1804 audit(1658037046.680:625): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/475/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 701.176156][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 701.189413][T11283] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 701.197449][ T4578] usb 2-1: Using ep0 maxpacket: 8 [ 701.239009][T11284] binder: Unknown parameter 's' [ 701.413847][ T4578] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 701.422860][ T4578] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.433725][ T4578] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.593966][ T4578] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.607733][ T4578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.620601][ T4578] usb 2-1: Product: syz [ 701.629138][ T4578] usb 2-1: Manufacturer: ఉ [ 701.638051][ T4578] usb 2-1: SerialNumber: syz [ 702.023871][ T4578] usb 2-1: 0:2 : does not exist [ 702.038412][ T4578] usb 2-1: USB disconnect, device number 7 05:50:47 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x200005d0, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 05:50:47 executing program 3: lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x40}, 0x18) 05:50:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000012000102"], 0x20}}, 0x0) 05:50:47 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x7, 0x0, 0x0) 05:50:47 executing program 5: process_vm_readv(0x0, &(0x7f0000001cc0)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/173, 0xa0}, {0x0, 0xfffffffffffffeb4}], 0x3, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/125, 0x7d}, {&(0x7f0000000240)=""/110, 0x6e}], 0x2, 0x0) 05:50:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r2) 05:50:48 executing program 5: keyctl$restrict_keyring(0x6, 0xfffffffffffffffe, 0x0, 0x0) 05:50:48 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 05:50:48 executing program 3: setuid(0xee00) socket$igmp6(0xa, 0x3, 0x2) 05:50:48 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002142, 0x0) 05:50:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) 05:50:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x4, r0, &(0x7f0000000080)='cifs.idmap\x00', 0x0) [ 702.555486][ T27] audit: type=1804 audit(1658037048.100:626): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/476/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 05:50:48 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2f, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)=']{.\x00') [ 702.620977][T11294] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000250001"], 0x50}}, 0x0) 05:50:48 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:48 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, 0x0, 0x0) 05:50:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x0, 0x93) 05:50:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000240019cd90f15f10dcae2102fa65a02201"], 0x50}}, 0x0) 05:50:48 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 05:50:48 executing program 0: process_vm_readv(0x0, &(0x7f0000001cc0)=[{&(0x7f0000000000)=""/147, 0xffffff91}, {&(0x7f0000000180)=""/160, 0xad}, {0x0}], 0x3, &(0x7f0000001240), 0x2, 0x0) 05:50:48 executing program 5: keyctl$restrict_keyring(0x18, 0xfffffffffffffffe, 0x0, 0x0) 05:50:48 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 702.950237][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 05:50:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000080)="eb", 0x1, 0x0, 0x0, 0x0) 05:50:49 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0xb, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'batadv0\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_virt_wifi\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 05:50:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x0, 0x93) 05:50:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000200001"], 0x50}}, 0x0) [ 703.854592][ T27] audit: type=1804 audit(1658037049.380:627): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/477/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 703.927220][T11333] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 05:50:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) 05:50:49 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98d", 0x5, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 05:50:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x0, 0x93) 05:50:50 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 05:50:50 executing program 2: openat2$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x4041}, 0x18) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000340)="6590d4d98d", 0x5, 0x0) lchown(&(0x7f0000001e40)='./file0\x00', 0x0, 0xffffffffffffffff) 05:50:50 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 05:50:50 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x100000) 05:50:50 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 05:50:50 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0x17, 0x0, 0x0) 05:50:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001240)) [ 705.323933][ T27] audit: type=1804 audit(1658037050.790:628): pid=11371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/478/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 705.941700][T11360] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 05:50:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:51 executing program 2: syz_clone3(&(0x7f0000000300)={0x14224400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) 05:50:51 executing program 0: syz_clone3(&(0x7f0000001700)={0xc3210800, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:50:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 05:50:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x0, 0x93) 05:50:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:51 executing program 5: openat$vcsa(0xffffffffffffff9c, 0x0, 0x400001, 0x0) 05:50:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x6}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=@raw=[@cb_func, @kfunc], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 706.813775][ T27] audit: type=1804 audit(1658037052.280:629): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/479/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 05:50:52 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x81}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4a) 05:50:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x3}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:52 executing program 3: getgroups(0x1, &(0x7f0000000280)=[0xee00]) 05:50:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:52 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000001700)) 05:50:52 executing program 0: clock_gettime(0x3, &(0x7f0000000240)) 05:50:52 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1d, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000080)=@raw=[@btf_id, @cb_func, @kfunc, @generic, @kfunc], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000007c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x50, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}]}, 0x50}}, 0x0) 05:50:52 executing program 0: getgroups(0x2, &(0x7f0000000280)=[0xee00, 0x0]) 05:50:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000a00)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000780)=ANY=[], 0x258}, 0x0) 05:50:52 executing program 2: syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x6a401) 05:50:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@mcast2, @loopback, @private2}) 05:50:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380), 0x10}, 0x80) [ 707.401365][ T27] audit: type=1804 audit(1658037052.940:630): pid=11420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/480/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 05:50:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x1d, &(0x7f00000001c0)=""/29, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x17, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x258}, 0x0) 05:50:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 05:50:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 5: syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) 05:50:53 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 05:50:53 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x147202, 0x0) 05:50:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001280)='ns/cgroup\x00') [ 707.769649][ T27] audit: type=1804 audit(1658037053.310:631): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/481/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 05:50:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000080)=@raw=[@btf_id, @cb_func, @kfunc], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000140)=""/226, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0}}, 0x20000001) 05:50:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x23e, &(0x7f0000000080)=@framed={{}, [@exit, @jmp]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:53 executing program 0: syz_clone3(&(0x7f0000000380)={0xc8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:50:53 executing program 5: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) 05:50:53 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0x21, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 05:50:53 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) accept(r0, 0x0, 0x0) 05:50:53 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, 0x0, 0x0) 05:50:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 05:50:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) [ 708.056959][ T27] audit: type=1804 audit(1658037053.600:632): pid=11474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/482/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 708.200364][ T27] audit: type=1400 audit(1658037053.640:633): avc: denied { accept } for pid=11479 comm="syz-executor.2" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 05:50:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:53 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 05:50:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') 05:50:53 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xe3) 05:50:53 executing program 0: syz_clone3(&(0x7f0000000200)={0x218c8300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0xa0) 05:50:53 executing program 5: clock_getres(0xd4912a59b9a0286e, 0x0) 05:50:53 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 05:50:53 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={0xffffffffffffffff, 0x13, 0x0, 0x0, 0x0}, 0x20) 05:50:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:54 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000380)=@raw=[@initr0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 05:50:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f0000001280), {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) [ 708.594687][ T27] audit: type=1804 audit(1658037054.140:634): pid=11508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/483/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 708.603551][T11510] x_tables: duplicate underflow at hook 3 05:50:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 05:50:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 05:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001240)=0x40) 05:50:54 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) 05:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:50:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @multicast2, 0x0, 0x0, 'batadv_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "8b1c7737a77a88f7415493eb3039811975b402f0a517181a2dc72f9ed0e83e9b8626edc357fef9b27147a0cf186236085c3882d0d15118edaa0bd2250702b472"}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "101658776dae78f6f9b4328a7808131e100ce011d23cc1456a709eb7cea0"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 05:50:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 05:50:54 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 05:50:54 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/loop0', 0x60c301, 0x0) [ 708.797180][T11520] x_tables: ip_tables: ah match: only valid for protocol 51 05:50:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x8000000, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 05:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "3c37967b15a975c0", "8b460d0133e438cfdf2a4c672bdb0350adf79d15332f8ce4d8883170b76e8b67", "b42d33e9", "69096a8226f0dc64"}, 0x38) [ 709.000152][ T27] audit: type=1804 audit(1658037054.540:635): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/484/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 05:50:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, 0x0, 0x0) 05:50:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000140)) 05:50:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='GPL\x00', 0x100, 0x93, &(0x7f00000004c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:54 executing program 0: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$eventfd(r0, &(0x7f0000000000)=0x6, 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 05:50:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x8000000, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) 05:50:54 executing program 3: clock_getres(0x0, &(0x7f0000000540)) 05:50:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 709.378550][ T27] audit: type=1804 audit(1658037054.920:636): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/485/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 05:50:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, 0x0, 0x0) 05:50:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x1d8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 05:50:56 executing program 0: select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x200}, &(0x7f0000000340)) 05:50:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:50:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:50:56 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000d80), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000e00)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:50:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0xd0, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [], [], 'erspan0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'wg2\x00', 'vlan0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}}, @common=@ah={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'veth0_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc49be3c9c792d173ceb2e97286a2b2cb343891a6bdaa013a89393a996d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 05:50:56 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000001580), 0x2) [ 711.353938][ T27] audit: type=1804 audit(1658037056.900:637): pid=11583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/486/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 05:50:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x4}) 05:50:57 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x77a, 0x2, 0x58, 0x67}]}) [ 711.520231][T11591] x_tables: duplicate underflow at hook 2 05:50:57 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4280, 0x0) 05:50:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x71, r2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6f886c92a077ce0a, 0x188) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 05:50:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, "b1aba4e74fdcf14bcd8bc3b5d7665bbece724a"}) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 05:50:57 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001c40), 0xffffffffffffffff) [ 711.788573][ T27] audit: type=1804 audit(1658037057.330:638): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/487/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 05:50:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:50:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x71, r2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6f886c92a077ce0a, 0x188) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 05:50:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x8dffffff00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 05:50:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8b365d46bf56c206c187217a8400bbe5d4c44c9ee6ed2d655ce121f3a423fff876a43bf73135872ccbaf8899211ed91dd7f991adeeebc7af3f795a65f0fbf4033aace9c52928872bd169ab15fedb79d324b1629ecdc1db"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:50:57 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x4000000, &(0x7f0000000680)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}], 0x38}}], 0x2, 0x0) 05:50:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x658}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20}, 0x0) 05:50:57 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/5, 0x5) 05:50:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x71, r2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6f886c92a077ce0a, 0x188) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 05:50:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x71, r2}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6f886c92a077ce0a, 0x188) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) 05:50:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 05:50:57 executing program 5: syz_genetlink_get_family_id$team(&(0x7f0000001c40), 0xffffffffffffffff) [ 712.177779][ T27] audit: type=1804 audit(1658037057.720:639): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/488/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 05:50:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 05:50:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/210) 05:50:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x16}) 05:50:57 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x191543, 0x0) 05:50:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@in={0x2, 0x0, @broadcast}, 0x80) 05:50:58 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200401, 0x0) 05:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x7}) 05:50:58 executing program 3: init_module(&(0x7f0000000100)='\xc6F\xfc\xd7\xa8-\xeb`\xacU\xb6\xc0N)Cg_\xef\xdb\x9d\\\x1e\xce\x06\xbc|\x0f', 0xffe9a, &(0x7f0000000240)='\x19S\x1e\xbd\\\x8aW\x8a(\xfbv\xb1_ns\x8e\xc8\xb4\xe3\x84\x97k{\xe3\x0f$;9\xac2\xf3\x93\x15\xfb\xbb\xc5\xf3\xc3\x87\x85\xd9R\x90\xf8I\x84&\xa9\xc3\xae\xaad&l\x1aA%>\'\xda\xcbo\xb5\x03>~\f;5\xfb$\xbe\xaay\xcbG\xaf\xbf\xfb\x12Ei\xd5\xb2\xf1\x02\x94k\x06\xf6\xe0\xf70\xbbA\xd1/\xb3\"\x89N\xc2\x99j\x1fi\xbd/3p\xa9\xa8>\x93\xe2m\x84\xca\x11\xd8\x16G0\xa7f^W\x82>\xf7\xab3\x86\x89\x9c{\xadW\xc2M\xf1/\x80m^\x85\xa1\xd6\x884\xd4\x95\xd2\xef\xab\xb0\x0f\xc3\x14\x85\x87\xea\x86.\xfb!\x11\xac:\xa8\xbb\x9b\xcf\xc0k\x8d8\x99-\xf0\xf1\xac\x9a\x1cAH.\xea\xe2\x90f\x85/\xe4\xa8y\xd8X\x9e\xc4CqtN\xc6*F\xb3\xcd\x17tq~]\xdd\xdc\xbf\xf6\xbb\xc6\xc20FH\xba\x0f>}7\x0e\xcd\xec\x1ct\x82r\x8eD6\xc5\xd7\xe1\xd8\xc6\xad\xf2\xb8\xd1&b\xdf1\xfd\xa9\xf1\xca\x1d\x98\xd49G\f\xcdEI\xcd`\x02\x02\t:\xbd;\x14s*\xdd\xf4\x86\x1b') 05:50:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r2}) 05:50:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x7f}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:50:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 05:50:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002000)={0x14}, 0x14}}, 0x0) 05:50:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x9}) [ 712.627306][ T27] audit: type=1804 audit(1658037058.170:640): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/489/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 712.641949][T11658] Invalid ELF header magic: != ELF 05:50:58 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 05:50:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x5a}, 0xe) 05:50:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:58 executing program 1: pselect6(0x90, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f00000000c0), 0x8}) 05:50:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000040)) 05:50:58 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) 05:50:58 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 05:50:58 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000000400), 0x0, &(0x7f0000000480)={0x9}, &(0x7f00000004c0)={0x0, 0x989680}, 0x0) 05:50:58 executing program 0: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="c5", 0x1, 0xfffffffffffffffc) 05:50:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={0x0, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 05:50:58 executing program 2: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002680), 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000026c0), 0x2) geteuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b80)) geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) geteuid() getegid() syz_clone(0x41020100, &(0x7f0000004180)="9e924ce5b49f5b2b3fccc7b727bf7edc2ce7a9d784416f16bba923b2fb7023323b7a7c77ca49cd46c62db77b63861e01384a51233e15ca7fbf0ddf072331fefe40167f21b7b907f5b20a3240f57892ab8da397c049b8984562d713af3db628752d09614ba5b81649a8c0758d5377054e252a8b74a5af7de84169e3f2599df039def634ecc1b889d60ba6ae4f1fb52e430a1b445a3d3f8921b04c9baa68ad56c0c7fb71bd43eebcd53641f76aea35e683aa731e7cc7f055cd53f8925e075334c6f8c1e5c4699df2d45ef4758c0c5b04d9f509237783a132993226cf7505cb6d", 0xdf, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)="285c1d724349c82b525de5cf09dffd684b967ec962baf6a1719059bcc382bb26d5add9809f425c93a4d51894fea20e380224b3488a131e927efde8240d4e55c65670ebbdcb00736eec8a78f50e3eb0333887f53b62b46373c413013d653244f80bd6563e40480683e887b26f397f830061250e9edb2c067caf7cdf3ebe4b3679f6e688d44cdbe0cf91058fcf3c78f2359f383a7b5d2a0778a79c8fac22115c69b38a968ee907b58eabf6d8a69b87c7ae9ee95db5f89de0c229d7d0e590fd8fb3d5d24a7ec8c4c6b01b18729e0662") getpgrp(0xffffffffffffffff) geteuid() [ 712.954988][ T27] audit: type=1400 audit(1658037058.500:641): avc: denied { ioctl } for pid=11673 comm="syz-executor.2" path="socket:[59718]" dev="sockfs" ino=59718 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 05:50:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002000)=ANY=[], 0x14}}, 0x0) 05:50:58 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x77a}]}) 05:50:58 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x10}, 0x10}}, 0x0) [ 713.130261][ T27] audit: type=1804 audit(1658037058.670:642): pid=11691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/490/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 713.210788][ T27] audit: type=1400 audit(1658037058.700:643): avc: denied { audit_write } for pid=11693 comm="syz-executor.0" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 05:50:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc) 05:50:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc}, {0x9}]}]}}, &(0x7f0000000200)=""/248, 0x36, 0xf8, 0x1}, 0x20) 05:50:59 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x40, 0x0) 05:50:59 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x2, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff}}) 05:50:59 executing program 2: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002680), 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000026c0), 0x2) geteuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b80)) geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) geteuid() getegid() syz_clone(0x41020100, &(0x7f0000004180)="9e924ce5b49f5b2b3fccc7b727bf7edc2ce7a9d784416f16bba923b2fb7023323b7a7c77ca49cd46c62db77b63861e01384a51233e15ca7fbf0ddf072331fefe40167f21b7b907f5b20a3240f57892ab8da397c049b8984562d713af3db628752d09614ba5b81649a8c0758d5377054e252a8b74a5af7de84169e3f2599df039def634ecc1b889d60ba6ae4f1fb52e430a1b445a3d3f8921b04c9baa68ad56c0c7fb71bd43eebcd53641f76aea35e683aa731e7cc7f055cd53f8925e075334c6f8c1e5c4699df2d45ef4758c0c5b04d9f509237783a132993226cf7505cb6d", 0xdf, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)="285c1d724349c82b525de5cf09dffd684b967ec962baf6a1719059bcc382bb26d5add9809f425c93a4d51894fea20e380224b3488a131e927efde8240d4e55c65670ebbdcb00736eec8a78f50e3eb0333887f53b62b46373c413013d653244f80bd6563e40480683e887b26f397f830061250e9edb2c067caf7cdf3ebe4b3679f6e688d44cdbe0cf91058fcf3c78f2359f383a7b5d2a0778a79c8fac22115c69b38a968ee907b58eabf6d8a69b87c7ae9ee95db5f89de0c229d7d0e590fd8fb3d5d24a7ec8c4c6b01b18729e0662") getpgrp(0xffffffffffffffff) geteuid() 05:50:59 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) 05:50:59 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f0000002680), 0x2) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000026c0), 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b80)) syz_clone(0x41020100, &(0x7f0000004180), 0x0, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)="285c1d724349c82b525de5cf09dffd684b967ec962baf6a1719059bcc382bb26d5add9809f425c93a4d51894fea20e380224b3488a131e927efde8240d4e55c65670ebbdcb00736eec8a78f50e3eb0333887f53b62b46373c413013d653244f80bd6563e40480683e887b26f397f830061250e9edb2c067caf7cdf3ebe4b3679f6e688d44cdbe0cf91058fcf3c78f2359f383a7b5d2a0778a79c8fac22115c69b38a968ee907b58eabf6d8a69b87c7ae9ee95db5f89de0c229d7d0e590fd8fb3d5d24a7ec8c4c6b01b18729e0662") 05:50:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x48c}}) [ 713.497563][ T27] audit: type=1400 audit(1658037059.040:644): avc: denied { bind } for pid=11699 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 05:50:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x12}) 05:50:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x9, 0x1, &(0x7f0000000440)=@raw=[@call], &(0x7f00000004c0)='GPL\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 713.618043][ T27] audit: type=1400 audit(1658037059.160:645): avc: denied { write } for pid=11711 comm="syz-executor.1" name="nvram" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 05:50:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 713.737439][ T27] audit: type=1804 audit(1658037059.200:646): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/491/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 05:50:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:59 executing program 3: pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)={0x80}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) 05:50:59 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}], [{@subj_role={'subj_role', 0x3d, '-^,.(^),#'}}]}}) 05:50:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x13}) 05:50:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 05:50:59 executing program 2: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002680), 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000026c0), 0x2) geteuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b80)) geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) geteuid() getegid() syz_clone(0x41020100, &(0x7f0000004180)="9e924ce5b49f5b2b3fccc7b727bf7edc2ce7a9d784416f16bba923b2fb7023323b7a7c77ca49cd46c62db77b63861e01384a51233e15ca7fbf0ddf072331fefe40167f21b7b907f5b20a3240f57892ab8da397c049b8984562d713af3db628752d09614ba5b81649a8c0758d5377054e252a8b74a5af7de84169e3f2599df039def634ecc1b889d60ba6ae4f1fb52e430a1b445a3d3f8921b04c9baa68ad56c0c7fb71bd43eebcd53641f76aea35e683aa731e7cc7f055cd53f8925e075334c6f8c1e5c4699df2d45ef4758c0c5b04d9f509237783a132993226cf7505cb6d", 0xdf, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)="285c1d724349c82b525de5cf09dffd684b967ec962baf6a1719059bcc382bb26d5add9809f425c93a4d51894fea20e380224b3488a131e927efde8240d4e55c65670ebbdcb00736eec8a78f50e3eb0333887f53b62b46373c413013d653244f80bd6563e40480683e887b26f397f830061250e9edb2c067caf7cdf3ebe4b3679f6e688d44cdbe0cf91058fcf3c78f2359f383a7b5d2a0778a79c8fac22115c69b38a968ee907b58eabf6d8a69b87c7ae9ee95db5f89de0c229d7d0e590fd8fb3d5d24a7ec8c4c6b01b18729e0662") getpgrp(0xffffffffffffffff) geteuid() 05:50:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x77a}]}) 05:50:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)) 05:50:59 executing program 1: add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) 05:50:59 executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@btf_id], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 05:50:59 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) 05:50:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x3}}) [ 714.142489][ T27] audit: type=1804 audit(1658037059.680:647): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/492/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 05:50:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:50:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0xf0}) 05:50:59 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 05:50:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xa}) 05:50:59 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 05:51:00 executing program 2: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002680), 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000026c0), 0x2) geteuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b80)) geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) geteuid() getegid() syz_clone(0x41020100, &(0x7f0000004180)="9e924ce5b49f5b2b3fccc7b727bf7edc2ce7a9d784416f16bba923b2fb7023323b7a7c77ca49cd46c62db77b63861e01384a51233e15ca7fbf0ddf072331fefe40167f21b7b907f5b20a3240f57892ab8da397c049b8984562d713af3db628752d09614ba5b81649a8c0758d5377054e252a8b74a5af7de84169e3f2599df039def634ecc1b889d60ba6ae4f1fb52e430a1b445a3d3f8921b04c9baa68ad56c0c7fb71bd43eebcd53641f76aea35e683aa731e7cc7f055cd53f8925e075334c6f8c1e5c4699df2d45ef4758c0c5b04d9f509237783a132993226cf7505cb6d", 0xdf, &(0x7f0000004280), &(0x7f00000042c0), &(0x7f0000004300)="285c1d724349c82b525de5cf09dffd684b967ec962baf6a1719059bcc382bb26d5add9809f425c93a4d51894fea20e380224b3488a131e927efde8240d4e55c65670ebbdcb00736eec8a78f50e3eb0333887f53b62b46373c413013d653244f80bd6563e40480683e887b26f397f830061250e9edb2c067caf7cdf3ebe4b3679f6e688d44cdbe0cf91058fcf3c78f2359f383a7b5d2a0778a79c8fac22115c69b38a968ee907b58eabf6d8a69b87c7ae9ee95db5f89de0c229d7d0e590fd8fb3d5d24a7ec8c4c6b01b18729e0662") getpgrp(0xffffffffffffffff) geteuid() 05:51:00 executing program 5: openat$fuse(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 05:51:00 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) 05:51:00 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x2000000, 0x104002) 05:51:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f00000000c0)='GPL\x00', 0x4, 0xdc, &(0x7f0000000100)=""/220, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:00 executing program 5: r0 = epoll_create(0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 05:51:00 executing program 0: pselect6(0x90, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f00000000c0), 0x8}) [ 714.642291][ T27] audit: type=1804 audit(1658037060.180:648): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/493/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 05:51:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541c, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2}) 05:51:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r2}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 05:51:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}) 05:51:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x48) 05:51:00 executing program 3: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002680), 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) geteuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) getpgrp(0xffffffffffffffff) geteuid() getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_clone(0x41020100, 0x0, 0x0, 0x0, &(0x7f00000042c0), &(0x7f0000004300)="285c1d724349c82b525de5cf09dffd684b967ec962baf6a1719059bcc382bb26d5add9809f425c93a4d51894fea20e380224b348") 05:51:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x3, 0x0, 0x0) 05:51:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x7}}) 05:51:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x658}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x40}, 0x0) 05:51:00 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 05:51:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:00 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0}, 0x48) 05:51:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 05:51:00 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x8}}, &(0x7f0000000140)=""/164, 0x1a, 0xa4, 0x1}, 0x20) 05:51:00 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000), 0xffffffffffffff93) 05:51:00 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:00 executing program 5: unshare(0x400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 05:51:01 executing program 3: socketpair(0x2, 0xa, 0xfdaa, &(0x7f0000000400)) 05:51:01 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @local=0x3}, 0x10) 05:51:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f00000005c0)="f6b85975", 0x4) 05:51:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}}, 0x0) 05:51:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) 05:51:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000340)="81b27c4bfa9727eda576b041de549280656c84a41899cd0aae1f87ef0a6af28b84d7dd227c94bae1cece3766d3510a6596892edcc76b50d372f57a9718766bc3729d2dfc2ebcc443ffd6bb7a0123367c3ba75026e3413a3146b108003b984e0b2518484617c98f74602c10efbd5298e77746de5d386f5d4b3794fe85970f3fbd1a0798275833fa9d20de59b38b2efa4764d428c271400d50e299dd65cc28e3832864c19affaabebb1453bd5f08d1cad821bec1d32188dfd82a574ea37d3aa0c032827e18831fdad2be7085472dcfdbd6eeadefd5d1", 0xd5}, {&(0x7f0000000280)="a172e51069532d1f2d271e3fa0465daddb966fbf17cf928f024606a2bb3f01cf5ddd990e1227a0007d786f4794cf05494e04006d870b81362f660dd8", 0x3c}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003340)=[{0x0}, {&(0x7f0000003040)=""/134, 0x86}], 0x2}, 0x0) 05:51:01 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x30, 0x0, 0x0) 05:51:01 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x7}, [@initr0]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:01 executing program 5: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140), 0xfffffffffffffd96) 05:51:01 executing program 3: socketpair(0x2, 0xa, 0xfdaa, &(0x7f0000000400)) 05:51:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, &(0x7f0000000300)) 05:51:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x2, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @remote}}}}) 05:51:01 executing program 3: socketpair(0x2, 0xa, 0xfdaa, &(0x7f0000000400)) 05:51:01 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 05:51:01 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 05:51:01 executing program 0: unshare(0x400) unshare(0x2040600) 05:51:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:01 executing program 3: socketpair(0x2, 0xa, 0xfdaa, &(0x7f0000000400)) 05:51:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, 0x0, 0x0) 05:51:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000280)="a172e51069532d1f2d271e3fa0465daddb966fbf17cf928f024606a2bb3f01cf5ddd990e1227a0007d786f4794cf05494e04006d870b81362f660dd8e0070cc1e48ea758e4620c8a35a3154516a3117f1e05ad9942587d8b9ace3ba87f552879f10d1ffa", 0x64}, {&(0x7f0000000200)="dbaff5c3e59e8caf839f49253d1a75c70afd0c39a3", 0x15}, {&(0x7f0000001440)="5b69d201f4002dda205a5e974a04bc9c844ba61f3e62bc560f3606414a0d7fc22a133afef76241d81c58f9be3a7a9980e87caadf81532fb9986e430b0c35043e263a8355183ff7b0da942e8c1e53aed37d0eb0710583175a4eb4728c42abd58cfa2febef53e95191a4f76afc4504c47e2f3e71954f7bf1b301da9cac2fa736b663dcd62186ecb3d0e15ca9025e271149ae3276239ca82e133a0c3ac86ec4b6422857a8f06bc6e37a24f2249f1f2c8598cfc5291afe0544d15406f873cc60fc1c806e0b6a8ce2574835c6f3650dde0d66", 0xd0}, {&(0x7f0000002540)="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", 0x189}], 0x4}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000080)=""/234, 0xea}, {&(0x7f0000003040)=""/134, 0x86}, {&(0x7f0000003100)=""/139, 0x8b}, {&(0x7f00000031c0)=""/69, 0x45}, {&(0x7f0000003240)=""/77, 0x4d}, {&(0x7f00000032c0)=""/69, 0x45}], 0x6}, 0x0) 05:51:01 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0x12}]}, {0x0, [0x5f]}}, &(0x7f0000000140)=""/164, 0x2b, 0xa4, 0x1}, 0x20) 05:51:01 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1d, 0x0, 0x0) 05:51:01 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000340)="81b27c4bfa9727eda576b041de549280656c84a41899cd0aae1f87ef0a6af28b84d7dd227c94bae1cece3766d3510a6596892edcc76b50d372f57a9718766bc3729d2dfc2ebcc443ffd6bb7a0123367c3ba75026e3413a3146b108003b984e0b2518484617c98f74602c10efbd5298e77746de5d386f5d4b3794fe85970f3fbd1a0798275833fa9d20de59b38b2efa4764d428c271400d50e299dd65cc28e3832864c19affaabebb1453bd5f08d1cad821bec1d32188dfd82a574ea37d3aa0c032827e18831fdad2be7085472dcfdbd6eeadefd5d1", 0xd5}, {&(0x7f0000000440)="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", 0xc2c}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000003340)=[{0x0}, {&(0x7f0000003040)=""/134, 0x86}, {&(0x7f0000003100)=""/139, 0x8b}], 0x3, &(0x7f00000033c0)=""/235, 0xeb}, 0x100) 05:51:01 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 05:51:01 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) 05:51:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x5, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 05:51:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 05:51:01 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 05:51:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd74, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:01 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) 05:51:01 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x8, 0x4) 05:51:01 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x24, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8946, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 05:51:02 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'team_slave_0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 05:51:02 executing program 0: socketpair(0x26, 0x5, 0x3f, &(0x7f0000000080)) 05:51:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x7}, 0x80, 0x0}, 0x0) 05:51:02 executing program 2: socketpair(0x3000, 0x0, 0x0, &(0x7f0000000000)) 05:51:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, &(0x7f0000000200)="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", 0x5dd, 0x0, &(0x7f0000000040), 0x7ffff) 05:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14, r1, 0xb31}, 0x14}}, 0x0) 05:51:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 05:51:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x7}, 0x80, 0x0}, 0x0) 05:51:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 05:51:02 executing program 5: socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={[0xffffffffffff0001]}, 0x8) bind$packet(r0, &(0x7f0000000000)={0x11, 0x18, 0x0, 0x1, 0x19, 0x6, @multicast}, 0x14) 05:51:02 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1c, 0x0, 0x0) 05:51:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x12, &(0x7f0000000000)="9fe563e8", 0x4) 05:51:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000340)="81b27c4bfa9727eda576b041de549280656c84a41899cd0aae1f87ef0a6af28b84d7dd227c94bae1cece3766d3510a6596892edcc76b50d372f57a9718766bc3729d2dfc2ebcc443ffd6bb7a0123367c3ba75026e3413a3146b108003b984e0b2518484617c98f74602c10efbd5298e77746de5d386f5d4b3794fe85970f3fbd1a0798275833fa9d20de59b38b2efa4764d428c271400d50e299dd65cc28e383", 0xa0}, {&(0x7f0000000280)="a172e51069532d1f2d271e3fa0465daddb966fbf17cf928f024606a2bb3f01cf5ddd990e1227a0007d786f4794cf05494e04006d870b81362f660dd8e0070cc1e48ea758e4620c8a35a315", 0x4b}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003340)=[{0x0}, {0x0}, {&(0x7f0000003100)=""/139, 0x8b}], 0x3}, 0x0) [ 717.238487][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 717.238505][ T27] audit: type=1804 audit(1658037062.780:656): pid=11911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/499/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:51:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x7}, 0x80, 0x0}, 0x0) 05:51:02 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 05:51:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 05:51:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000240)) 05:51:02 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) 05:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000340)="f4", 0x1) 05:51:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x7}, 0x80, 0x0}, 0x0) 05:51:03 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'dvmrp1\x00', {0x2, 0x0, @loopback}}) 05:51:03 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@frag={{0x23}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 05:51:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001440)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) [ 717.531945][ T27] audit: type=1804 audit(1658037063.070:657): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/500/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:51:03 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={0x0, 0x0, 0x18}, 0x10) 05:51:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 05:51:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x7, 0x4) 05:51:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) 05:51:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f00000005c0)="f6", 0x1) 05:51:03 executing program 3: pipe(&(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 05:51:03 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x2}, 0x7}, 0x80, 0x0}, 0x0) 05:51:03 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:03 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0xd}, 0x14) 05:51:03 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1c, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req={0x1000, 0x9, 0x8fc}, 0x10) 05:51:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x48) 05:51:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7d, 0x4, 0x3ff, 0x0, 0x1}, 0x48) 05:51:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 05:51:03 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x24, 0x0, 0x0) [ 717.915791][ T27] audit: type=1804 audit(1658037063.460:658): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/501/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 05:51:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x0, 0x0, 0x3ff, 0x0, 0x1}, 0x48) 05:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xe896894d1ebf3b69}, 0x14}}, 0x0) 05:51:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x6, &(0x7f0000000480)=@raw=[@exit, @cb_func, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000500)='GPL\x00', 0x3, 0xee, &(0x7f0000000540)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000080)) 05:51:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3001}, 0x4) 05:51:03 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0xb, &(0x7f00000000c0)=@framed={{}, [@func, @cb_func, @generic, @call, @cb_func, @func]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1004, &(0x7f00000012c0)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 05:51:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 05:51:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1c, 0x4) 05:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, r1, 0x405, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x5}]}]}, 0x20}}, 0x0) [ 718.193452][ T27] audit: type=1804 audit(1658037063.730:659): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/502/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 05:51:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:51:03 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x700, 0x4) 05:51:03 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2b, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x10, 0x4, 0x0, 0x40}, 0x48) 05:51:03 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) [ 718.299191][T11999] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 718.319636][ T27] audit: type=1400 audit(1658037063.860:660): avc: denied { setopt } for pid=12000 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 05:51:03 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x41, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:04 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x21, 0x0, 0x0) 05:51:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}}) 05:51:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0x11}]}, {0x0, [0x5f]}}, &(0x7f0000000140)=""/164, 0x2b, 0xa4, 0x1}, 0x20) 05:51:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="7b6fc7371687010000000684a8b75c8046de6c7674d3", 0x16) 05:51:04 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc000, &(0x7f0000000240)=@framed={{}, [@jmp]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 718.580791][ T27] audit: type=1804 audit(1658037064.120:661): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/503/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 05:51:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:51:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x8, &(0x7f0000000040)=0x40800011, 0x4) 05:51:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x4, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:04 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3c, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:04 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x20001618, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@frag={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 05:51:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0x8}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:04 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, &(0x7f00000012c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) 05:51:04 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000001180), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) 05:51:04 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, 0xffffffffffffffff, 0x1, 0x0) 05:51:04 executing program 1: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 05:51:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000600000003000000b3176b10ce4cbf3391dca8b962ba00001c000000000000000100000002"], 0x1268}, 0x0) 05:51:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) [ 718.954289][ T27] audit: type=1804 audit(1658037064.500:662): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/504/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 05:51:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:51:04 executing program 3: socketpair(0x11, 0xa, 0x6, &(0x7f0000000000)) 05:51:04 executing program 2: r0 = socket(0x11, 0x2, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000001880)) 05:51:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @dev}, 0x80) 05:51:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) write$P9_RSTAT(r1, 0x0, 0x0) 05:51:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) 05:51:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @broadcast}, 0x80) 05:51:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RSTAT(r1, 0x0, 0x0) write$P9_RSETATTR(r1, 0x0, 0x0) 05:51:04 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:51:04 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = dup(r0) write$P9_RLOPEN(r1, 0x0, 0x0) 05:51:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) write$P9_RUNLINKAT(r1, 0x0, 0x0) 05:51:04 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 719.236621][ T27] audit: type=1804 audit(1658037064.780:663): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/505/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 05:51:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) write$P9_RRENAME(r1, 0x0, 0x0) 05:51:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) write$P9_RWALK(r1, 0x0, 0x0) 05:51:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 05:51:04 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$P9_RCREATE(r1, 0x0, 0x0) 05:51:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) write$P9_RWRITE(r0, 0x0, 0x0) 05:51:04 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000004240), 0x2001, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 05:51:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) write$P9_ROPEN(r1, 0x0, 0x0) 05:51:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$tcp_congestion(r1, 0x0, 0x0) 05:51:04 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$P9_RWALK(r1, 0x0, 0x0) 05:51:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) 05:51:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}, 0x0) 05:51:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RSTAT(r1, 0x0, 0x0) 05:51:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffff11}, 0x0) 05:51:05 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) write$P9_RATTACH(r1, 0x0, 0x35) 05:51:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) r2 = dup(r0) write$P9_RUNLINKAT(r2, 0x0, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 05:51:05 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$P9_ROPEN(r1, 0x0, 0x0) 05:51:05 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x602, 0x0) r1 = dup(r0) write$P9_RGETATTR(r1, 0x0, 0x0) 05:51:05 executing program 5: r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:51:05 executing program 3: memfd_create(&(0x7f0000000000)='/.}{\x00', 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 05:51:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RRENAME(r1, 0x0, 0x0) write$P9_RMKNOD(r1, 0x0, 0x0) 05:51:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) 05:51:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) 05:51:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) write$P9_RSTATu(r1, 0x0, 0x0) 05:51:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:51:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 05:51:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 05:51:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) r2 = dup(r0) write$P9_RRENAMEAT(r2, 0x0, 0x0) 05:51:05 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$P9_RGETATTR(r1, 0x0, 0x0) 05:51:05 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) 05:51:05 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$P9_RWSTAT(r1, 0x0, 0x0) 05:51:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) r2 = dup(r0) write$P9_RLOPEN(r2, 0x0, 0x0) 05:51:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_RMKNOD(r1, 0x0, 0x0) r2 = dup(r0) write$P9_RUNLINKAT(r2, 0x0, 0x0) 05:51:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0xc0045878, 0x0) 05:51:05 executing program 3: bpf$PROG_LOAD_XDP(0x15, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x4}, {0x0, 0x5}]}]}}, &(0x7f0000000240)=""/166, 0x3e, 0xa6, 0x1}, 0x20) 05:51:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) 05:51:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETTXFILTER(r0, 0x541b, 0x0) 05:51:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect(r1, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80) write$P9_ROPEN(r1, 0x0, 0x0) 05:51:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) accept4$packet(r0, 0x0, 0x0, 0x100800) 05:51:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x401c5820, &(0x7f0000000040)={'netpci0\x00'}) 05:51:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0xc020660b, 0x0) 05:51:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x5411, 0x0) 05:51:05 executing program 5: mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0/file0\x00'}, 0x10) 05:51:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x4}, {0x0, 0x5}]}, @var={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000240)=""/166, 0x50, 0xa6, 0x1}, 0x20) 05:51:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x801c581f, 0x0) 05:51:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000240)=""/166, 0x26, 0xa6, 0x1}, 0x20) 05:51:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x89e0, 0x0) 05:51:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x40086602, 0x0) 05:51:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x411}) 05:51:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 05:51:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x48) 05:51:05 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:05 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:05 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 720.348837][ T27] audit: type=1400 audit(1658037065.890:664): avc: denied { setattr } for pid=12177 comm="syz-executor.3" path="/dev/net/tun" dev="devtmpfs" ino=688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 05:51:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xfd3, 0x0, 0x995}, 0x48) 05:51:05 executing program 5: syz_clone(0x1b006400, 0x0, 0x0, 0x0, 0x0, 0x0) 05:51:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 05:51:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 05:51:06 executing program 0: socketpair$nbd(0xf, 0x1, 0x0, &(0x7f0000000140)) 05:51:06 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x903bfae197866894}, 0x20) 05:51:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x8905, 0x0) [ 720.513958][ T27] audit: type=1400 audit(1658037066.050:665): avc: denied { relabelfrom } for pid=12192 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 05:51:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 05:51:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="1000000001000100000000000100000020000000000000000100000001000000", @ANYBLOB="9bb0b4c38be73430c2537be985a9cf0a57e6a85e60b66abb77a7bd19bfb8e7abb254eca89f57aa1aa2cfba441d4d5621b230ef9fcdccc6bb8fe46f0dbb267d7c58adb555cc29b082473637b87f823f357d4180c16826a4dfdde93fb2200f9a79f34c5cbef486f495ceb89748a4102ca2918536b24200c22e49b5d8f022b819b7c1852d00f1b6c4c1c04153a52f8626ddf6da3eaebcc52ed607fac818add7d433b33f9baddd063400f0a80043ae23ba61a48d0b22e26f6d8cdd861892137b32cfbf64a241dba9693f30d5aa135c800d6289fd6852647bb1ed8e37e3f95f8ffae033", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000900dc0f0f3e3b939260fd590a355967f", @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYRES64], 0x80}, 0x0) 05:51:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x4, 0x25) 05:51:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffc67, 0x0, 0x0, &(0x7f0000002540)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}], 0x20}, 0x0) 05:51:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x7) 05:51:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 05:51:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x80}, 0x0) 05:51:06 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000002600)='./file0/../file0\x00', 0x2) 05:51:06 executing program 4: r0 = socket(0x2, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 05:51:06 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'veth1_to_bridge'}, 0xfffffeb3) 05:51:06 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000002600)='./file0/../file0\x00', 0x0) 05:51:06 executing program 2: select(0x3b, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x2710}) 05:51:07 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x9999999999999999}, {0x0}, {0x0}, {0x0}, {0xfffffffffffffffe}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 05:51:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0xd97d5f4ad382ec0c) 05:51:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="a8"], 0xa8}, 0x0) recvmsg(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) 05:51:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="a8"], 0xa8}, 0x0) 05:51:07 executing program 2: socketpair(0x2, 0xa, 0x50000041, &(0x7f0000000100)) 05:51:07 executing program 5: socketpair$unix(0x10, 0x2, 0x0, &(0x7f0000002640)) 05:51:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="a8"], 0xa8}, 0x0) recvmsg(r1, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x62) 05:51:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(r0, 0x89a0, 0x0) 05:51:07 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000100)=@raw=[@jmp, @call], &(0x7f0000000140)='GPL\x00', 0x3, 0xee, &(0x7f0000000180)=""/238, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:51:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wg1\x00', 0x2}) 05:51:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x1, 0x800, 0x0, 0x1}, 0x48) 05:51:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x1, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 05:51:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:51:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 05:51:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 722.255606][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 722.255624][ T27] audit: type=1804 audit(1658037067.800:670): pid=12259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/521/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 05:51:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 722.442778][ T27] audit: type=1804 audit(1658037067.860:671): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/687/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 05:51:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 722.561746][ T27] audit: type=1804 audit(1658037067.920:672): pid=12274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/681/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0 05:51:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 722.689180][ T27] audit: type=1804 audit(1658037068.040:673): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/565/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 05:51:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 722.862096][ T27] audit: type=1804 audit(1658037068.320:674): pid=12286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1789386244/syzkaller.3oSslL/677/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 722.874779][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 722.892315][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 722.968083][ T27] audit: type=1804 audit(1658037068.390:675): pid=12291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2765272540/syzkaller.FAdQMC/606/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 723.098345][ T27] audit: type=1804 audit(1658037068.460:676): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/682/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 05:51:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffff"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffff"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 723.245210][ T27] audit: type=1804 audit(1658037068.470:677): pid=12294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/688/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 05:51:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:08 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:51:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 723.412084][ T27] audit: type=1804 audit(1658037068.570:678): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/566/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0 05:51:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 723.575174][ T27] audit: type=1804 audit(1658037068.950:679): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/523/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 05:51:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 723.824043][ T9592] usb 3-1: new high-speed USB device number 13 using dummy_hcd 05:51:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:09 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:51:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 724.112252][ T9592] usb 3-1: Using ep0 maxpacket: 8 [ 724.244822][ T9592] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:51:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 724.363973][T12035] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 724.382163][ T9592] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 724.416948][ T9592] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 724.442866][ T9592] usb 3-1: Manufacturer: syz [ 724.485438][ T9592] usb 3-1: config 0 descriptor?? 05:51:10 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 724.613747][T12035] usb 1-1: Using ep0 maxpacket: 8 05:51:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 724.733965][T12035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.797639][ T9592] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 724.809513][ T9592] usb 3-1: Failed to create links for entity 231 [ 724.826415][ T9592] usb 3-1: Failed to register entities (-22). [ 724.833987][T12035] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 724.855465][T12035] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 724.857581][ T9592] usb 3-1: USB disconnect, device number 13 [ 724.892542][T12035] usb 1-1: Manufacturer: syz [ 724.927358][T12035] usb 1-1: config 0 descriptor?? [ 724.963862][ T4032] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 725.224018][T12035] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 725.231190][T12035] usb 1-1: Failed to create links for entity 231 [ 725.240101][T12035] usb 1-1: Failed to register entities (-22). [ 725.243841][ T4032] usb 5-1: Using ep0 maxpacket: 8 [ 725.254548][T12035] usb 1-1: USB disconnect, device number 12 05:51:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) 05:51:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:10 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 725.384154][ T4032] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:51:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) [ 725.514286][ T4032] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 725.523381][ T4032] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 725.552366][ T4032] usb 5-1: Manufacturer: syz [ 725.583007][ T4032] usb 5-1: config 0 descriptor?? [ 725.653952][T12038] usb 3-1: new high-speed USB device number 14 using dummy_hcd 05:51:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) 05:51:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:11 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 725.893921][ T4032] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 725.895332][T12038] usb 3-1: Using ep0 maxpacket: 8 [ 725.900907][ T4032] usb 5-1: Failed to create links for entity 231 [ 725.918060][ T4032] usb 5-1: Failed to register entities (-22). [ 725.972859][ T4032] usb 5-1: USB disconnect, device number 5 [ 726.033949][T12038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.108345][ T9592] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 726.134102][T12038] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 726.147115][T12038] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 726.155455][T12038] usb 3-1: Manufacturer: syz [ 726.161995][T12038] usb 3-1: config 0 descriptor?? [ 726.363781][ T9592] usb 1-1: Using ep0 maxpacket: 8 05:51:11 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) 05:51:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 726.443851][T12038] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 726.453341][T12038] usb 3-1: Failed to create links for entity 231 [ 726.473403][T12038] usb 3-1: Failed to register entities (-22). [ 726.485373][ T9592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.538709][T12038] usb 3-1: USB disconnect, device number 14 [ 726.574050][ T9592] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a 05:51:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) sendfile(r2, r1, 0x0, 0x100000002) [ 726.595416][ T9592] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 726.618924][ T9592] usb 1-1: Manufacturer: syz [ 726.661918][ T9592] usb 1-1: config 0 descriptor?? 05:51:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 726.814060][ T4032] usb 5-1: new high-speed USB device number 6 using dummy_hcd 05:51:12 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:51:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 726.964044][ T9592] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 727.000869][ T9592] usb 1-1: Failed to create links for entity 231 [ 727.042352][ T9592] usb 1-1: Failed to register entities (-22). [ 727.093769][ T4032] usb 5-1: Using ep0 maxpacket: 8 [ 727.099093][ T9592] usb 1-1: USB disconnect, device number 13 05:51:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) [ 727.243965][ T4032] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:51:12 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12"], 0x0) [ 727.333965][ T145] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 727.371494][ T4032] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 727.386171][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 727.386189][ T27] audit: type=1804 audit(1658037072.930:704): pid=12387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/697/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 [ 727.443710][ T4032] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 727.452693][ T4032] usb 5-1: Manufacturer: syz 05:51:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 727.498348][ T4032] usb 5-1: config 0 descriptor?? 05:51:13 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 727.614007][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 727.693722][T12038] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 727.693739][ T27] audit: type=1804 audit(1658037073.230:705): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/690/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 727.774090][ T145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.793946][ T4032] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 727.803485][ T4032] usb 5-1: Failed to create links for entity 231 [ 727.818249][ T4032] usb 5-1: Failed to register entities (-22). [ 727.839725][ T4032] usb 5-1: USB disconnect, device number 6 [ 727.874220][ T145] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 727.887841][ T145] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 727.896283][ T9592] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 727.934270][ T145] usb 3-1: Manufacturer: syz [ 727.943829][T12038] usb 4-1: Using ep0 maxpacket: 8 [ 727.956833][ T145] usb 3-1: config 0 descriptor?? [ 728.063967][T12038] usb 4-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 728.174078][ T9592] usb 1-1: Using ep0 maxpacket: 8 [ 728.184037][T12038] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 728.200065][T12038] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 728.217250][T12038] usb 4-1: Manufacturer: syz [ 728.246802][T12038] usb 4-1: config 0 descriptor?? 05:51:13 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 728.283881][ T145] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 728.293455][ T145] usb 3-1: Failed to create links for entity 231 [ 728.304108][ T9592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.320173][ T145] usb 3-1: Failed to register entities (-22). [ 728.365609][ T145] usb 3-1: USB disconnect, device number 15 [ 728.414257][ T9592] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 728.423438][ T27] audit: type=1804 audit(1658037073.960:706): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/691/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 728.461116][ T9592] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 728.463299][ T27] audit: type=1804 audit(1658037074.000:707): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/698/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 728.479272][ T9592] usb 1-1: Manufacturer: syz [ 728.523224][ T9592] usb 1-1: config 0 descriptor?? 05:51:14 executing program 5: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:51:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) [ 728.603995][T12038] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 728.610930][T12038] usb 4-1: No valid video chain found. [ 728.660019][T12038] usb 4-1: USB disconnect, device number 98 [ 728.673878][ T3676] usb 5-1: new high-speed USB device number 7 using dummy_hcd 05:51:14 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:51:14 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 728.808054][ T27] audit: type=1804 audit(1658037074.350:708): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/699/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 728.836707][ T9592] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 728.846046][ T9592] usb 1-1: Failed to create links for entity 231 [ 728.856417][ T9592] usb 1-1: Failed to register entities (-22). [ 728.874945][ T9592] usb 1-1: USB disconnect, device number 14 05:51:14 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:51:14 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 728.963899][ T4573] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 728.984048][ T3676] usb 5-1: Using ep0 maxpacket: 8 05:51:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 729.127611][ T3676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:51:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) [ 729.206092][ T4573] usb 6-1: Using ep0 maxpacket: 8 [ 729.224173][ T3676] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 729.244275][ T3676] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 729.260758][ T3676] usb 5-1: Manufacturer: syz [ 729.285679][ T3676] usb 5-1: config 0 descriptor?? 05:51:14 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 729.313842][T12038] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 729.344155][ T4573] usb 6-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 729.364773][ T27] audit: type=1804 audit(1658037074.910:709): pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/700/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 729.452206][ T4573] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 729.469904][ T4573] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 729.479165][ T4573] usb 6-1: Manufacturer: syz [ 729.491329][ T4573] usb 6-1: config 0 descriptor?? [ 729.574055][ T3676] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 729.581021][ T3676] usb 5-1: Failed to create links for entity 231 [ 729.583796][T12038] usb 3-1: Using ep0 maxpacket: 8 [ 729.587672][ T3676] usb 5-1: Failed to register entities (-22). [ 729.604600][ T3676] usb 5-1: USB disconnect, device number 7 [ 729.713845][T12038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.803844][T12038] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 729.814146][ T4573] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 729.821180][ T4573] usb 6-1: No valid video chain found. [ 729.826830][T12038] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 729.836948][ T4573] usb 6-1: USB disconnect, device number 58 [ 729.853752][T12038] usb 3-1: Manufacturer: syz [ 729.866960][T12038] usb 3-1: config 0 descriptor?? 05:51:15 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:51:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:15 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) [ 730.143936][T12038] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 730.154002][T12038] usb 3-1: Failed to create links for entity 231 [ 730.176442][T12038] usb 3-1: Failed to register entities (-22). [ 730.193470][ T27] audit: type=1804 audit(1658037075.730:710): pid=12430 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/576/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 730.200706][T12038] usb 3-1: USB disconnect, device number 16 05:51:15 executing program 5: write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:51:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) 05:51:15 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:51:15 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:51:15 executing program 0: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 730.366707][ T27] audit: type=1804 audit(1658037075.910:711): pid=12442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/701/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 05:51:16 executing program 2: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) 05:51:16 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 05:51:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:16 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 730.643840][ T4573] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 730.663715][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 730.726538][ T27] audit: type=1804 audit(1658037076.260:712): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/577/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 730.759400][ T27] audit: type=1804 audit(1658037076.300:713): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/702/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 05:51:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:16 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 730.903795][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 730.917966][ T4573] usb 6-1: Using ep0 maxpacket: 8 [ 731.027140][ T3676] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 731.027978][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.053710][ T4573] usb 6-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 731.064199][T12038] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 731.153918][ T4573] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 731.163385][ T6] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 731.172686][ T4573] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 731.181031][ T6] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 731.189800][ T4573] usb 6-1: Manufacturer: syz [ 731.194686][ T6] usb 1-1: Manufacturer: syz [ 731.211987][ T6] usb 1-1: config 0 descriptor?? [ 731.218752][ T4573] usb 6-1: config 0 descriptor?? [ 731.257940][ T9592] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 731.294120][ T3676] usb 3-1: Using ep0 maxpacket: 8 [ 731.303848][T12038] usb 5-1: Using ep0 maxpacket: 8 [ 731.423893][ T3676] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.425482][T12038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.504067][ T6] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 731.511042][ T6] usb 1-1: Failed to create links for entity 231 [ 731.518187][ T6] usb 1-1: Failed to register entities (-22). [ 731.527818][T12038] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 731.534840][ T3676] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 731.538344][T12038] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 731.546989][ T9592] usb 4-1: Using ep0 maxpacket: 8 [ 731.555414][ T4573] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 731.567979][ T3676] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 731.572683][ T6] usb 1-1: USB disconnect, device number 15 [ 731.583233][ T4573] usb 6-1: No valid video chain found. [ 731.590085][T12038] usb 5-1: Manufacturer: syz [ 731.597478][ T3676] usb 3-1: Manufacturer: syz [ 731.609688][ T4573] usb 6-1: USB disconnect, device number 59 [ 731.617861][ T3676] usb 3-1: config 0 descriptor?? [ 731.642452][T12038] usb 5-1: config 0 descriptor?? [ 731.714023][ T9592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.804082][ T9592] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 731.818114][ T9592] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 731.826977][ T9592] usb 4-1: Manufacturer: syz [ 731.833225][ T9592] usb 4-1: config 0 descriptor?? [ 731.893931][ T3676] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 731.902795][ T3676] usb 3-1: Failed to create links for entity 231 [ 731.909988][ T3676] usb 3-1: Failed to register entities (-22). [ 731.922257][ T3676] usb 3-1: USB disconnect, device number 17 [ 731.943932][T12038] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 731.952050][T12038] usb 5-1: Failed to create links for entity 231 [ 731.963168][T12038] usb 5-1: Failed to register entities (-22). 05:51:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:51:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:17 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 732.013076][T12038] usb 5-1: USB disconnect, device number 8 [ 732.133967][ T9592] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 732.144907][ T9592] usb 4-1: Failed to create links for entity 231 [ 732.159426][ T9592] usb 4-1: Failed to register entities (-22). [ 732.186260][ T9592] usb 4-1: USB disconnect, device number 99 05:51:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:17 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b"], 0x0) [ 732.334047][ T3676] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 732.363854][ T145] usb 6-1: new high-speed USB device number 60 using dummy_hcd 05:51:17 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 732.623951][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 732.654154][ T145] usb 6-1: Using ep0 maxpacket: 8 [ 732.683750][ T4573] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 732.762028][ T4032] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 732.823011][ T145] usb 6-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 732.825348][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 732.825364][ T27] audit: type=1804 audit(1658037078.360:717): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/706/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 732.833407][ T3676] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.933922][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 732.983899][ T145] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 732.993008][ T145] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 733.001260][ T3676] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 733.016557][ T3676] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 733.029324][ T145] usb 6-1: Manufacturer: syz [ 733.042167][ T3676] usb 1-1: Manufacturer: syz [ 733.061395][ T4573] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.064958][ T145] usb 6-1: config 0 descriptor?? [ 733.078066][ T3676] usb 1-1: config 0 descriptor?? [ 733.087515][ T4032] usb 5-1: Using ep0 maxpacket: 8 [ 733.154069][ T4573] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 733.170353][ T4573] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 05:51:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 733.199164][ T4573] usb 3-1: Manufacturer: syz [ 733.214021][ T4032] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.220302][ T4573] usb 3-1: config 0 descriptor?? [ 733.334139][ T4032] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 733.365400][ T4032] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 733.380677][ T27] audit: type=1804 audit(1658037078.920:718): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/707/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 733.387449][ T4032] usb 5-1: Manufacturer: syz [ 733.414690][ T3676] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 733.421683][ T3676] usb 1-1: Failed to create links for entity 231 [ 733.439956][ T3676] usb 1-1: Failed to register entities (-22). [ 733.453797][ T3676] usb 1-1: USB disconnect, device number 16 [ 733.459877][ T145] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 733.473710][ T145] usb 6-1: No valid video chain found. [ 733.496940][ T4032] usb 5-1: config 0 descriptor?? [ 733.503904][ T4573] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 733.515961][ T4573] usb 3-1: Failed to create links for entity 231 [ 733.525957][ T145] usb 6-1: USB disconnect, device number 60 [ 733.550648][ T4573] usb 3-1: Failed to register entities (-22). [ 733.612241][ T4573] usb 3-1: USB disconnect, device number 18 [ 733.630934][ T27] audit: type=1804 audit(1658037079.170:719): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/579/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 733.670564][ T27] audit: type=1800 audit(1658037079.170:720): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1162 res=0 errno=0 05:51:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:51:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 733.803872][ T4032] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 733.817481][ T4032] usb 5-1: Failed to create links for entity 231 [ 733.835590][ T4032] usb 5-1: Failed to register entities (-22). 05:51:19 executing program 0: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 733.854623][ T4032] usb 5-1: USB disconnect, device number 9 05:51:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:19 executing program 2: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 733.951210][ T27] audit: type=1804 audit(1658037079.490:721): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/708/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 734.098956][ T27] audit: type=1804 audit(1658037079.640:722): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/695/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:51:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:19 executing program 4: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 734.303468][ T27] audit: type=1804 audit(1658037079.840:723): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/709/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 734.354319][ T145] usb 4-1: new high-speed USB device number 100 using dummy_hcd 05:51:20 executing program 0: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:20 executing program 2: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 734.603852][ T4573] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 734.613745][ T145] usb 4-1: Using ep0 maxpacket: 8 05:51:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 734.733842][ T145] usb 4-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 734.744556][ T4032] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 734.838231][ T27] audit: type=1804 audit(1658037080.380:724): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/710/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 734.866036][ T145] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 734.877045][ T145] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 734.883862][ T4573] usb 5-1: Using ep0 maxpacket: 8 [ 734.886030][ T145] usb 4-1: Manufacturer: syz [ 734.913558][ T145] usb 4-1: config 0 descriptor?? [ 735.003821][ T4032] usb 6-1: Using ep0 maxpacket: 8 [ 735.013949][ T4573] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.104294][ T4573] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 735.113926][ T4573] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 735.122238][ T4573] usb 5-1: Manufacturer: syz [ 735.136586][ T4573] usb 5-1: config 0 descriptor?? [ 735.137054][ T4032] usb 6-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 735.254704][ T4032] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 735.264101][ T145] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 735.275102][ T145] usb 4-1: No valid video chain found. [ 735.286323][ T4032] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 735.305675][ T145] usb 4-1: USB disconnect, device number 100 [ 735.311746][ T4032] usb 6-1: Manufacturer: syz [ 735.328628][ T4032] usb 6-1: config 0 descriptor?? [ 735.413861][ T4573] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 735.420948][ T4573] usb 5-1: Failed to create links for entity 231 [ 735.427602][ T4573] usb 5-1: Failed to register entities (-22). [ 735.443159][ T4573] usb 5-1: USB disconnect, device number 10 05:51:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:21 executing program 0: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:21 executing program 2: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 735.698364][ T4032] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 735.732130][ T4032] usb 6-1: No valid video chain found. [ 735.753969][ T4032] usb 6-1: USB disconnect, device number 61 05:51:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 735.802887][ T27] audit: type=1804 audit(1658037081.340:725): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/711/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:51:21 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 735.900595][ T27] audit: type=1804 audit(1658037081.430:726): pid=12525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/581/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 05:51:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 05:51:21 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 736.183867][ T9931] usb 5-1: new high-speed USB device number 11 using dummy_hcd 05:51:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 05:51:21 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:21 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 736.454943][ T9931] usb 5-1: Using ep0 maxpacket: 8 05:51:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 736.543815][ T3676] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 736.551604][ T9592] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 736.604212][ T9931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.614373][ T145] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 736.684520][ T4032] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 736.724428][ T9931] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 736.743519][ T9931] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 736.771353][ T9931] usb 5-1: Manufacturer: syz 05:51:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 736.803197][ T9931] usb 5-1: config 0 descriptor?? [ 736.834118][ T145] usb 3-1: device descriptor read/64, error 18 [ 736.873928][ T3676] usb 4-1: Using ep0 maxpacket: 8 [ 736.879062][ T9592] usb 6-1: Using ep0 maxpacket: 8 [ 736.904119][ T4032] usb 1-1: device descriptor read/64, error 18 [ 737.014838][ T9592] usb 6-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 737.025593][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.114891][ T9931] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 737.129548][ T9931] usb 5-1: Failed to create links for entity 231 [ 737.136747][ T3676] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 737.145861][ T9592] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 737.155181][ T145] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 737.173747][ T3676] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 737.182991][ T9592] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 737.191564][ T4032] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 737.206493][ T9931] usb 5-1: Failed to register entities (-22). [ 737.212787][ T9592] usb 6-1: Manufacturer: syz [ 737.218367][ T3676] usb 4-1: Manufacturer: syz [ 737.233257][ T9931] usb 5-1: USB disconnect, device number 11 [ 737.253905][ T3676] usb 4-1: config 0 descriptor?? [ 737.260389][ T9592] usb 6-1: config 0 descriptor?? [ 737.363947][ T145] usb 3-1: device descriptor read/64, error 18 [ 737.423792][ T4032] usb 1-1: device descriptor read/64, error 18 [ 737.484087][ T145] usb usb3-port1: attempt power cycle 05:51:23 executing program 4: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 737.553990][ T3676] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 737.561192][ T4032] usb usb1-port1: attempt power cycle [ 737.574217][ T3676] usb 4-1: Failed to create links for entity 231 [ 737.597280][ T3676] usb 4-1: Failed to register entities (-22). [ 737.678077][ T3676] usb 4-1: USB disconnect, device number 101 05:51:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 737.903799][ T145] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 737.993954][ T4032] usb 1-1: new high-speed USB device number 19 using dummy_hcd 05:51:23 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 738.095877][ T145] usb 3-1: device descriptor read/8, error -61 05:51:23 executing program 4: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 738.214210][ T4032] usb 1-1: device descriptor read/8, error -61 [ 738.395210][ T145] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 738.424863][ T3676] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 738.503842][ T4032] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 738.584964][ T145] usb 3-1: device descriptor read/8, error -61 [ 738.693830][ T3676] usb 4-1: Using ep0 maxpacket: 8 05:51:24 executing program 4: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 738.725189][ T4032] usb 1-1: device descriptor read/8, error -61 [ 738.731765][ T145] usb usb3-port1: unable to enumerate USB device [ 738.789578][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 738.789594][ T27] audit: type=1800 audit(1658037084.330:730): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1159 res=0 errno=0 [ 738.844022][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.874121][ T4032] usb usb1-port1: unable to enumerate USB device [ 738.954058][ T3676] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 738.963157][ T3676] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 738.973672][ T3676] usb 4-1: Manufacturer: syz [ 738.983851][ T9592] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 738.991852][ T3676] usb 4-1: config 0 descriptor?? [ 738.997240][ T9592] usb 6-1: No valid video chain found. [ 739.006847][ T9592] usb 6-1: USB disconnect, device number 62 [ 739.274958][ T3676] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 739.281960][ T3676] usb 4-1: Failed to create links for entity 231 [ 739.288461][ T3676] usb 4-1: Failed to register entities (-22). [ 739.304631][ T3676] usb 4-1: USB disconnect, device number 102 05:51:24 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:24 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:24 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:24 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 739.713902][ T4573] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 739.753774][ T4032] usb 6-1: new high-speed USB device number 63 using dummy_hcd 05:51:25 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 739.762258][ T9592] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 739.864607][T12038] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 739.914120][ T4573] usb 5-1: device descriptor read/64, error 18 [ 740.013956][ T4032] usb 6-1: Using ep0 maxpacket: 8 [ 740.019087][ T9592] usb 3-1: device descriptor read/64, error 18 [ 740.034323][ T27] audit: type=1804 audit(1658037085.580:731): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/719/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 05:51:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 740.065990][T12038] usb 1-1: device descriptor read/64, error 18 [ 740.143837][ T6] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 740.154060][ T4032] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:51:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 740.233744][ T4573] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 740.263987][ T4032] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 740.273433][ T4032] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 05:51:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:25 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 740.291875][ T4032] usb 6-1: Manufacturer: syz [ 740.296992][ T9592] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 740.312550][ T4032] usb 6-1: config 0 descriptor?? [ 740.333819][T12038] usb 1-1: new high-speed USB device number 22 using dummy_hcd 05:51:25 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 740.387713][ T6] usb 4-1: Using ep0 maxpacket: 8 05:51:26 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 740.423784][ T4573] usb 5-1: device descriptor read/64, error 18 [ 740.513878][ T9592] usb 3-1: device descriptor read/64, error 18 [ 740.514562][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.533803][T12038] usb 1-1: device descriptor read/64, error 18 [ 740.544129][ T4573] usb usb5-port1: attempt power cycle [ 740.594076][ T4032] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 740.601060][ T4032] usb 6-1: Failed to create links for entity 231 [ 740.607738][ T4032] usb 6-1: Failed to register entities (-22). [ 740.613956][ T6] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 740.625326][ T6] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 740.635105][ T4032] usb 6-1: USB disconnect, device number 63 [ 740.642912][ T6] usb 4-1: Manufacturer: syz [ 740.653078][ T6] usb 4-1: config 0 descriptor?? [ 740.653977][ T9592] usb usb3-port1: attempt power cycle [ 740.664321][T12038] usb usb1-port1: attempt power cycle [ 740.954020][ T6] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 740.960998][ T6] usb 4-1: Failed to create links for entity 231 [ 740.968498][ T4573] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 740.976250][ T6] usb 4-1: Failed to register entities (-22). [ 740.996621][ T6] usb 4-1: USB disconnect, device number 103 05:51:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 741.083851][T12038] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 741.103888][ T9592] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 741.149729][ T4573] usb 5-1: device descriptor read/8, error -61 [ 741.274811][T12038] usb 1-1: device descriptor read/8, error -61 [ 741.303849][ T9592] usb 3-1: device descriptor read/8, error -61 [ 741.423857][ T4573] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 741.543747][T12038] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 741.576979][ T9592] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 741.593950][ T4573] usb 5-1: device descriptor read/8, error -61 [ 741.713839][T12038] usb 1-1: device descriptor read/8, error -61 [ 741.720227][ T4573] usb usb5-port1: unable to enumerate USB device [ 741.774936][ T9592] usb 3-1: device descriptor read/8, error -61 [ 741.845089][T12038] usb usb1-port1: unable to enumerate USB device [ 741.904012][ T9592] usb usb3-port1: unable to enumerate USB device 05:51:27 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:27 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:28 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:28 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:28 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 05:51:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:28 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 05:51:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:28 executing program 3: write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 05:51:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:28 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 742.733957][T12038] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 742.943753][ T9592] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 742.951441][T12549] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 742.973911][ T4032] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 742.983997][T12038] usb 6-1: Using ep0 maxpacket: 8 [ 743.043940][ T4578] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 743.105956][T12038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.153845][T12549] usb 5-1: device descriptor read/64, error 18 [ 743.160124][ T9592] usb 3-1: device descriptor read/64, error 18 [ 743.166417][ T4032] usb 1-1: device descriptor read/64, error 18 [ 743.193863][T12038] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 743.203036][T12038] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 743.211547][T12038] usb 6-1: Manufacturer: syz [ 743.227471][T12038] usb 6-1: config 0 descriptor?? [ 743.283828][ T4578] usb 4-1: Using ep0 maxpacket: 8 [ 743.403887][ T4578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.443772][ T9592] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 743.453441][ T4032] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 743.461222][T12549] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 743.493844][ T4578] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 743.503105][ T4578] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 743.511639][T12038] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 743.519006][ T4578] usb 4-1: Manufacturer: syz [ 743.524645][T12038] usb 6-1: Failed to create links for entity 231 [ 743.535652][ T4578] usb 4-1: config 0 descriptor?? [ 743.540755][T12038] usb 6-1: Failed to register entities (-22). [ 743.554947][T12038] usb 6-1: USB disconnect, device number 64 [ 743.653800][ T9592] usb 3-1: device descriptor read/64, error 18 [ 743.693736][T12549] usb 5-1: device descriptor read/64, error 18 [ 743.700099][ T4032] usb 1-1: device descriptor read/64, error 18 [ 743.773910][ T9592] usb usb3-port1: attempt power cycle [ 743.824893][ T4032] usb usb1-port1: attempt power cycle [ 743.825035][ T4578] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 743.830440][T12549] usb usb5-port1: attempt power cycle [ 743.846023][ T4578] usb 4-1: Failed to create links for entity 231 [ 743.852377][ T4578] usb 4-1: Failed to register entities (-22). [ 743.876667][ T4578] usb 4-1: USB disconnect, device number 104 [ 744.223730][ T9592] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 744.263731][T12549] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 744.271405][ T4032] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 744.403983][ T9592] usb 3-1: device descriptor read/8, error -61 [ 744.464020][T12549] usb 5-1: device descriptor read/8, error -61 [ 744.470361][ T4032] usb 1-1: device descriptor read/8, error -61 [ 744.683749][ T9592] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 744.753869][ T4032] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 744.762197][T12549] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 744.853989][ T9592] usb 3-1: device descriptor read/8, error -61 [ 744.933846][T12549] usb 5-1: device descriptor read/8, error -61 [ 744.940136][ T4032] usb 1-1: device descriptor read/8, error -61 [ 744.974100][ T9592] usb usb3-port1: unable to enumerate USB device [ 745.055645][T12549] usb usb5-port1: unable to enumerate USB device [ 745.073908][ T4032] usb usb1-port1: unable to enumerate USB device 05:51:31 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:31 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:31 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:31 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:51:31 executing program 3: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 745.820212][ T6] usb 6-1: new high-speed USB device number 65 using dummy_hcd 05:51:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 745.953902][ T4032] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 745.993929][T12038] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 746.004085][ T4578] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 746.069145][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 746.183698][ T4032] usb 3-1: device descriptor read/64, error 18 [ 746.184907][T12038] usb 5-1: device descriptor read/64, error 18 [ 746.197654][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.207877][ T4578] usb 1-1: device descriptor read/64, error 18 [ 746.293922][ T6] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 746.303139][ T6] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 746.311453][ T6] usb 6-1: Manufacturer: syz [ 746.319153][ T6] usb 6-1: config 0 descriptor?? [ 746.473725][ T4032] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 746.483912][T12038] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 746.491646][ T4578] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 746.604065][ T6] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 746.611104][ T6] usb 6-1: Failed to create links for entity 231 [ 746.618511][ T6] usb 6-1: Failed to register entities (-22). [ 746.632333][ T6] usb 6-1: USB disconnect, device number 65 [ 746.684055][T12038] usb 5-1: device descriptor read/64, error 18 [ 746.690310][ T4578] usb 1-1: device descriptor read/64, error 18 [ 746.693714][ T4032] usb 3-1: device descriptor read/64, error 18 [ 746.804643][T12038] usb usb5-port1: attempt power cycle [ 746.813915][ T4032] usb usb3-port1: attempt power cycle [ 746.814114][ T4578] usb usb1-port1: attempt power cycle [ 746.886724][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.893063][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.214795][T12038] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 747.223791][ T4032] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 747.233851][ T4578] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 747.383869][T12038] usb 5-1: device descriptor read/8, error -61 [ 747.403880][ T4578] usb 1-1: device descriptor read/8, error -61 [ 747.443964][ T4032] usb 3-1: device descriptor read/8, error -61 [ 747.653904][T12038] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 747.673813][ T4578] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 747.723739][ T4032] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 747.823868][T12038] usb 5-1: device descriptor read/8, error -61 [ 747.844002][ T4578] usb 1-1: device descriptor read/8, error -61 [ 747.903771][ T4032] usb 3-1: device descriptor read/8, error -61 [ 747.943798][T12038] usb usb5-port1: unable to enumerate USB device [ 747.963909][ T4578] usb usb1-port1: unable to enumerate USB device [ 748.023811][ T4032] usb usb3-port1: unable to enumerate USB device 05:51:34 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:34 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:34 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:34 executing program 3: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:34 executing program 5: 05:51:34 executing program 5: 05:51:34 executing program 5: 05:51:34 executing program 5: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 749.003888][T12549] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 749.033770][T12038] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 749.053914][ T4578] usb 1-1: new high-speed USB device number 33 using dummy_hcd 05:51:34 executing program 3: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 749.188322][ T27] audit: type=1804 audit(1658037094.730:732): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/738/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 749.224871][T12549] usb 3-1: device descriptor read/64, error 18 05:51:34 executing program 5: syz_usb_connect(0x0, 0x58, 0x0, 0x0) [ 749.233745][T12038] usb 5-1: device descriptor read/64, error 18 [ 749.243756][ T4578] usb 1-1: device descriptor read/64, error 18 [ 749.503749][T12038] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 749.503808][T12549] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 749.520495][ T4578] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 749.694015][T12038] usb 5-1: device descriptor read/64, error 18 [ 749.713781][ T4578] usb 1-1: device descriptor read/64, error 18 [ 749.713941][T12549] usb 3-1: device descriptor read/64, error 18 [ 749.814099][T12038] usb usb5-port1: attempt power cycle [ 749.844775][ T4578] usb usb1-port1: attempt power cycle [ 749.858256][T12549] usb usb3-port1: attempt power cycle [ 749.946779][ T27] audit: type=1804 audit(1658037095.490:733): pid=12675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/739/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 750.263745][T12038] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 750.271518][ T4578] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 750.332284][T12549] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 750.433823][T12038] usb 5-1: device descriptor read/8, error -61 [ 750.453876][ T4578] usb 1-1: device descriptor read/8, error -61 [ 750.533810][T12549] usb 3-1: device descriptor read/8, error -61 [ 750.703708][T12038] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 750.724138][ T4578] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 750.813837][T12549] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 750.883899][T12038] usb 5-1: device descriptor read/8, error -61 [ 750.893916][ T4578] usb 1-1: device descriptor read/8, error -61 [ 750.993957][T12549] usb 3-1: device descriptor read/8, error -61 [ 751.008649][T12038] usb usb5-port1: unable to enumerate USB device [ 751.023980][ T4578] usb usb1-port1: unable to enumerate USB device [ 751.115212][T12549] usb usb3-port1: unable to enumerate USB device 05:51:37 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:37 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:37 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:37 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:37 executing program 5: syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:51:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 751.853842][ T4578] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 752.023714][T12038] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 752.044095][ T4578] usb 4-1: device descriptor read/64, error 18 [ 752.123724][T12549] usb 5-1: new high-speed USB device number 28 using dummy_hcd 05:51:37 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 752.174360][ T4032] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 752.213878][T12038] usb 3-1: device descriptor read/64, error 18 [ 752.313781][ T4578] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 752.343703][T12549] usb 5-1: device descriptor read/64, error 18 05:51:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 752.360360][ T27] audit: type=1804 audit(1658037097.900:734): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/740/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 752.391878][ T4032] usb 1-1: device descriptor read/64, error 18 [ 752.483912][T12038] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 752.504054][ T4578] usb 4-1: device descriptor read/64, error 18 [ 752.573759][ T9931] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 752.623801][T12549] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 752.623874][ T4578] usb usb4-port1: attempt power cycle [ 752.683831][ T4032] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 752.684114][T12038] usb 3-1: device descriptor read/64, error 18 [ 752.773707][ T9931] usb 6-1: device descriptor read/64, error 18 [ 752.814036][T12549] usb 5-1: device descriptor read/64, error 18 [ 752.844037][T12038] usb usb3-port1: attempt power cycle [ 752.883830][ T4032] usb 1-1: device descriptor read/64, error 18 [ 752.954144][T12549] usb usb5-port1: attempt power cycle [ 753.004204][ T4032] usb usb1-port1: attempt power cycle [ 753.063903][ T9931] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 753.074156][ T4578] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 753.254007][ T4578] usb 4-1: device descriptor read/8, error -61 [ 753.273936][T12038] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 753.283855][ T9931] usb 6-1: device descriptor read/64, error 18 05:51:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 753.322600][ T27] audit: type=1804 audit(1658037098.860:735): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/741/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 753.383984][T12549] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 753.404212][ T9931] usb usb6-port1: attempt power cycle [ 753.444106][ T4032] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 753.464121][T12038] usb 3-1: device descriptor read/8, error -61 [ 753.533758][ T4578] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 753.583922][T12549] usb 5-1: device descriptor read/8, error -61 [ 753.653820][ T4032] usb 1-1: device descriptor read/8, error -61 [ 753.703906][ T4578] usb 4-1: device descriptor read/8, error -61 [ 753.733847][T12038] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 753.824112][ T4578] usb usb4-port1: unable to enumerate USB device [ 753.843780][ T9931] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 753.863745][T12549] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 753.913930][T12038] usb 3-1: device descriptor read/8, error -61 [ 753.943952][ T4032] usb 1-1: new high-speed USB device number 40 using dummy_hcd 05:51:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 754.014054][ T27] audit: type=1804 audit(1658037099.560:736): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/742/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 754.044639][T12038] usb usb3-port1: unable to enumerate USB device [ 754.074039][ T9931] usb 6-1: device descriptor read/8, error -61 [ 754.113922][T12549] usb 5-1: device descriptor read/8, error -61 [ 754.164021][ T4032] usb 1-1: device descriptor read/8, error -61 [ 754.233961][T12549] usb usb5-port1: unable to enumerate USB device [ 754.293962][ T4032] usb usb1-port1: unable to enumerate USB device [ 754.358986][ T9931] usb 6-1: new high-speed USB device number 69 using dummy_hcd 05:51:40 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:40 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a69400000010902460001000000"], 0x0) [ 754.574232][ T9931] usb 6-1: device descriptor read/8, error -61 05:51:40 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:40 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a69400000010902460001000000"], 0x0) [ 754.715486][ T9931] usb usb6-port1: unable to enumerate USB device 05:51:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 754.802610][ T27] audit: type=1804 audit(1658037100.340:737): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/743/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 05:51:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 755.043859][T12038] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 755.103863][ T4032] usb 3-1: new high-speed USB device number 43 using dummy_hcd 05:51:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 755.163746][ T145] usb 5-1: new high-speed USB device number 32 using dummy_hcd 05:51:40 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 755.243863][T12038] usb 4-1: device descriptor read/64, error 18 [ 755.244928][ T9931] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 755.363779][ T145] usb 5-1: device descriptor read/64, error 18 [ 755.383809][ T4032] usb 3-1: Using ep0 maxpacket: 8 [ 755.393334][ T27] audit: type=1804 audit(1658037100.930:738): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/747/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 755.524120][T12038] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 755.534005][ T4032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.544647][ T9931] usb 1-1: Using ep0 maxpacket: 8 [ 755.559575][ T4032] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 755.634200][ T145] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 755.656453][ T4032] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 755.670140][ T4032] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 755.680343][ T9931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.695693][ T4032] usb 3-1: Manufacturer: syz [ 755.700676][ T9931] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 755.716470][T12038] usb 4-1: device descriptor read/64, error 18 [ 755.723714][ T4578] usb 6-1: new high-speed USB device number 70 using dummy_hcd 05:51:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 755.724077][ T4032] usb 3-1: config 0 descriptor?? [ 755.804102][ T9931] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 755.816927][ T9931] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 755.827360][ T9931] usb 1-1: Manufacturer: syz [ 755.841077][ T9931] usb 1-1: config 0 descriptor?? [ 755.846554][ T145] usb 5-1: device descriptor read/64, error 18 [ 755.854924][T12038] usb usb4-port1: attempt power cycle [ 755.875114][ T27] audit: type=1804 audit(1658037101.420:739): pid=12729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/748/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 755.923943][ T4578] usb 6-1: device descriptor read/64, error 18 [ 755.972158][ T145] usb usb5-port1: attempt power cycle [ 755.981543][ T9931] usb 3-1: USB disconnect, device number 43 05:51:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 756.112418][ T6] usb 1-1: USB disconnect, device number 41 [ 756.147250][ T27] audit: type=1804 audit(1658037101.690:740): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/749/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 756.193789][ T4578] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 756.273899][T12038] usb 4-1: new high-speed USB device number 111 using dummy_hcd 05:51:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 756.384019][ T4578] usb 6-1: device descriptor read/64, error 18 [ 756.404246][ T145] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 756.453929][T12038] usb 4-1: device descriptor read/8, error -61 [ 756.470403][ T27] audit: type=1804 audit(1658037102.010:741): pid=12734 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/750/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 756.514996][ T4578] usb usb6-port1: attempt power cycle [ 756.634810][ T145] usb 5-1: device descriptor read/8, error -61 [ 756.723913][T12038] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 756.903908][T12038] usb 4-1: device descriptor read/8, error -61 [ 756.923826][ T145] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 756.933777][ T4578] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 757.023994][T12038] usb usb4-port1: unable to enumerate USB device [ 757.103967][ T4578] usb 6-1: device descriptor read/8, error -61 [ 757.125947][ T145] usb 5-1: device descriptor read/8, error -61 [ 757.243858][ T145] usb usb5-port1: unable to enumerate USB device [ 757.373818][ T4578] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 757.554329][ T4578] usb 6-1: device descriptor read/8, error -61 05:51:43 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 05:51:43 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a69400000010902460001000000"], 0x0) 05:51:43 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) 05:51:43 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a69400000010902460001000000"], 0x0) 05:51:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 757.674229][ T4578] usb usb6-port1: unable to enumerate USB device [ 757.805046][ T27] audit: type=1804 audit(1658037103.350:742): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/751/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 757.904199][ T9931] usb 3-1: new high-speed USB device number 44 using dummy_hcd 05:51:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 758.004734][ T4032] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 758.103767][ T145] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 758.129358][ T27] audit: type=1804 audit(1658037103.670:743): pid=12748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/752/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 758.167400][ T9931] usb 3-1: Using ep0 maxpacket: 8 [ 758.183902][ T4578] usb 5-1: new high-speed USB device number 36 using dummy_hcd 05:51:43 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 758.303789][ T4032] usb 1-1: Using ep0 maxpacket: 8 [ 758.309103][ T9931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.330842][ T9931] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.350923][ T145] usb 4-1: device descriptor read/64, error 18 05:51:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 758.424010][ T4578] usb 5-1: Using ep0 maxpacket: 8 [ 758.440928][ T4032] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.451316][ T9931] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 758.468819][ T9931] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 758.481316][ T4032] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.499222][ T9931] usb 3-1: Manufacturer: syz [ 758.505164][ T27] audit: type=1804 audit(1658037104.050:744): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/753/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 758.515637][ T9931] usb 3-1: config 0 descriptor?? [ 758.543929][ T4578] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.554543][ T4578] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.622886][ T4032] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 758.632286][ T4032] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 758.643943][ T145] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 758.643980][ T4578] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 758.661333][ T4032] usb 1-1: Manufacturer: syz [ 758.661719][ T4578] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 758.675093][ T4578] usb 5-1: Manufacturer: syz [ 758.680657][ T4032] usb 1-1: config 0 descriptor?? [ 758.691548][ T4578] usb 5-1: config 0 descriptor?? 05:51:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 758.812193][ T4578] usb 3-1: USB disconnect, device number 44 [ 758.818599][ T9592] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 758.843971][ T145] usb 4-1: device descriptor read/64, error 18 [ 758.919547][ T27] audit: type=1804 audit(1658037104.460:745): pid=12757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/754/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 758.959222][T12038] usb 1-1: USB disconnect, device number 42 [ 758.974417][ T145] usb usb4-port1: attempt power cycle [ 758.976172][T12035] usb 5-1: USB disconnect, device number 36 [ 759.043823][ T9592] usb 6-1: device descriptor read/64, error 18 05:51:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:44 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a69400000010902460001000000"], 0x0) [ 759.333758][ T9592] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 759.386104][ T27] audit: type=1804 audit(1658037104.930:746): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/755/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 759.420667][ T145] usb 4-1: new high-speed USB device number 115 using dummy_hcd 05:51:45 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) [ 759.545952][ T9592] usb 6-1: device descriptor read/64, error 18 [ 759.635219][T12035] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 759.648028][ T145] usb 4-1: device descriptor read/8, error -61 [ 759.664297][ T9592] usb usb6-port1: attempt power cycle [ 759.823812][ T9931] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 759.873746][T12035] usb 3-1: Using ep0 maxpacket: 8 [ 759.943784][ T145] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 759.993809][T12035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.008630][T12035] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.093899][ T9931] usb 5-1: Using ep0 maxpacket: 8 [ 760.093903][T12035] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 760.093938][T12035] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 760.099112][ T9592] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 760.117062][T12035] usb 3-1: Manufacturer: syz [ 760.136917][T12035] usb 3-1: config 0 descriptor?? [ 760.163892][ T145] usb 4-1: device descriptor read/8, error -61 [ 760.243988][ T9931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.257875][ T9931] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.294072][ T145] usb usb4-port1: unable to enumerate USB device [ 760.314017][ T9592] usb 6-1: device descriptor read/8, error -61 [ 760.356205][ T9931] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 760.365430][ T9931] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 760.373609][ T9931] usb 5-1: Manufacturer: syz [ 760.393907][ T145] usb 3-1: USB disconnect, device number 45 [ 760.400703][ T9931] usb 5-1: config 0 descriptor?? [ 760.583721][ T9592] usb 6-1: new high-speed USB device number 77 using dummy_hcd 05:51:46 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:46 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a69400000010902460001000000"], 0x0) 05:51:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 760.661202][T12035] usb 5-1: USB disconnect, device number 37 [ 760.726478][ T27] audit: type=1804 audit(1658037106.270:747): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/756/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 05:51:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 760.788637][ T9592] usb 6-1: device descriptor read/8, error -61 05:51:46 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) [ 760.913831][ T9592] usb usb6-port1: unable to enumerate USB device [ 760.950770][ T27] audit: type=1804 audit(1658037106.490:748): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/757/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 760.983892][ T3676] usb 1-1: new high-speed USB device number 43 using dummy_hcd 05:51:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 761.154104][ T145] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 761.223880][ T9592] usb 3-1: new high-speed USB device number 46 using dummy_hcd 05:51:46 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:46 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) [ 761.248834][ T27] audit: type=1804 audit(1658037106.790:749): pid=12778 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/758/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 761.276626][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 761.364012][ T145] usb 4-1: device descriptor read/64, error 18 [ 761.413881][ T3676] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.429454][ T3676] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 05:51:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 761.531758][ T9592] usb 3-1: Using ep0 maxpacket: 8 [ 761.537004][ T3676] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 761.556122][ T3676] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 761.569989][ T3676] usb 1-1: Manufacturer: syz [ 761.582052][ T3676] usb 1-1: config 0 descriptor?? [ 761.604120][T12038] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 761.653978][ T145] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 761.668502][ T27] audit: type=1804 audit(1658037107.210:750): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/759/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 761.702642][ T9592] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.783741][T12035] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 761.804002][ T9592] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 761.815394][ T9592] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 761.824988][ T9592] usb 3-1: Manufacturer: syz [ 761.845211][T12038] usb 5-1: Using ep0 maxpacket: 8 [ 761.848743][ T9592] usb 3-1: config 0 descriptor?? [ 761.879487][ T4032] usb 1-1: USB disconnect, device number 43 [ 761.885825][ T145] usb 4-1: device descriptor read/64, error 18 05:51:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 761.963916][T12038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.974486][T12035] usb 6-1: device descriptor read/64, error 18 [ 761.986320][T12038] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.004456][ T145] usb usb4-port1: attempt power cycle [ 762.073246][ T27] audit: type=1804 audit(1658037107.610:751): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/760/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 762.073911][T12038] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 762.114147][T12038] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 762.119581][ T9931] usb 3-1: USB disconnect, device number 46 [ 762.124056][T12038] usb 5-1: Manufacturer: syz [ 762.160350][T12038] usb 5-1: config 0 descriptor?? [ 762.263744][T12035] usb 6-1: new high-speed USB device number 79 using dummy_hcd 05:51:47 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) [ 762.410808][ T9931] usb 5-1: USB disconnect, device number 38 [ 762.423882][ T145] usb 4-1: new high-speed USB device number 119 using dummy_hcd 05:51:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 762.453759][T12035] usb 6-1: device descriptor read/64, error 18 [ 762.567854][ T27] audit: type=1804 audit(1658037108.110:752): pid=12793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/761/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 762.577313][T12035] usb usb6-port1: attempt power cycle [ 762.661681][ T145] usb 4-1: device descriptor read/8, error -61 [ 762.669384][T12038] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 762.913790][T12038] usb 1-1: Using ep0 maxpacket: 8 [ 762.933933][ T145] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 763.013842][T12035] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 763.033890][T12038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.123801][ T145] usb 4-1: device descriptor read/8, error -61 [ 763.123965][T12038] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 763.139378][T12038] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 763.147547][T12038] usb 1-1: Manufacturer: syz [ 763.155374][T12038] usb 1-1: config 0 descriptor?? [ 763.193864][T12035] usb 6-1: device descriptor read/8, error -61 [ 763.243965][ T145] usb usb4-port1: unable to enumerate USB device [ 763.401778][T12038] usb 1-1: USB disconnect, device number 44 [ 763.463834][T12035] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 763.633824][T12035] usb 6-1: device descriptor read/8, error -61 05:51:49 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:49 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) 05:51:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:49 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 763.753877][T12035] usb usb6-port1: unable to enumerate USB device [ 763.787884][ T27] audit: type=1804 audit(1658037109.330:753): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/762/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 05:51:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:49 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) [ 763.964373][ T27] audit: type=1804 audit(1658037109.510:754): pid=12808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/763/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 764.003778][T12038] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 764.018774][ T4032] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 764.203737][ T145] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 764.223845][T12035] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 764.244001][T12038] usb 5-1: Using ep0 maxpacket: 8 [ 764.273786][ T4032] usb 3-1: Using ep0 maxpacket: 8 05:51:49 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 764.371812][T12038] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.404621][ T145] usb 4-1: device descriptor read/64, error 18 [ 764.413698][ T4032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.463794][T12035] usb 1-1: Using ep0 maxpacket: 8 [ 764.470650][ T27] audit: type=1804 audit(1658037110.010:755): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/764/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 764.498729][T12038] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 764.511345][T12038] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 764.521577][T12038] usb 5-1: Manufacturer: syz [ 764.538930][ T4032] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 764.541759][T12038] usb 5-1: config 0 descriptor?? [ 764.550499][ T4032] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 764.562630][ T4032] usb 3-1: Manufacturer: syz [ 764.579387][ T4032] usb 3-1: config 0 descriptor?? [ 764.594157][T12035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.606703][T12038] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 764.617548][T12038] usb 5-1: No valid video chain found. [ 764.703955][T12035] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 764.713030][T12035] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 764.721873][T12035] usb 1-1: Manufacturer: syz [ 764.724360][ T145] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 764.746975][T12035] usb 1-1: config 0 descriptor?? 05:51:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 764.811916][T12038] usb 5-1: USB disconnect, device number 39 [ 764.851975][ T9931] usb 3-1: USB disconnect, device number 47 [ 764.893961][ T9592] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 764.908765][ T27] audit: type=1804 audit(1658037110.450:756): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/765/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 [ 764.943728][ T145] usb 4-1: device descriptor read/64, error 18 [ 764.989892][T12035] usb 1-1: USB disconnect, device number 45 05:51:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 765.064135][ T145] usb usb4-port1: attempt power cycle [ 765.134312][ T9592] usb 6-1: device descriptor read/64, error 18 05:51:50 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) 05:51:50 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) [ 765.417511][ T9592] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 765.494001][ T145] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 765.633926][ T9592] usb 6-1: device descriptor read/64, error 18 [ 765.653767][ T9931] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 765.673997][ T145] usb 4-1: device descriptor read/8, error -61 [ 765.683736][T12038] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 765.755439][ T9592] usb usb6-port1: attempt power cycle [ 765.893864][ T9931] usb 5-1: Using ep0 maxpacket: 8 [ 765.923863][T12038] usb 3-1: Using ep0 maxpacket: 8 [ 765.963838][ T145] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 766.033832][ T9931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.043781][T12038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.123864][ T9931] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 766.132954][ T9931] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 766.134106][T12038] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 766.148575][ T9931] usb 5-1: Manufacturer: syz [ 766.150313][T12038] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 766.155216][ T145] usb 4-1: device descriptor read/8, error -61 [ 766.163843][T12038] usb 3-1: Manufacturer: syz [ 766.180955][ T9931] usb 5-1: config 0 descriptor?? [ 766.181390][T12038] usb 3-1: config 0 descriptor?? [ 766.188598][ T9592] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 766.245564][ T9931] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 766.252449][ T9931] usb 5-1: No valid video chain found. [ 766.294102][ T145] usb usb4-port1: unable to enumerate USB device [ 766.383821][ T9592] usb 6-1: device descriptor read/8, error -61 [ 766.432236][ T145] usb 3-1: USB disconnect, device number 48 [ 766.448782][ T9931] usb 5-1: USB disconnect, device number 40 [ 766.654076][ T9592] usb 6-1: new high-speed USB device number 85 using dummy_hcd 05:51:52 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 05:51:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:52 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) [ 766.833870][ T9592] usb 6-1: device descriptor read/8, error -61 [ 766.852067][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 766.852083][ T27] audit: type=1804 audit(1658037112.390:758): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/767/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 05:51:52 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) 05:51:52 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 766.974000][ T9592] usb usb6-port1: unable to enumerate USB device 05:51:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 767.063781][T12038] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 767.216745][ T27] audit: type=1804 audit(1658037112.760:759): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/768/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 767.253747][ T4578] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 767.263807][ T9931] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 767.273907][T12035] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 767.314023][T12038] usb 1-1: Using ep0 maxpacket: 8 05:51:52 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 767.434188][T12038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.468573][ T9931] usb 4-1: device descriptor read/64, error 18 [ 767.493721][ T4578] usb 3-1: Using ep0 maxpacket: 8 [ 767.513869][T12035] usb 5-1: Using ep0 maxpacket: 8 [ 767.524685][T12038] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 767.534446][T12038] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 05:51:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 767.542806][T12038] usb 1-1: Manufacturer: syz [ 767.559255][T12038] usb 1-1: config 0 descriptor?? [ 767.614033][ T4578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.634175][T12035] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.724124][ T4578] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 767.730014][ T27] audit: type=1804 audit(1658037113.270:760): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/769/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 767.733791][T12035] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 767.763777][ T9931] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 767.769940][ T4578] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 767.787082][ T4578] usb 3-1: Manufacturer: syz [ 767.798167][ T4578] usb 3-1: config 0 descriptor?? [ 767.803421][T12035] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 767.821224][T12035] usb 5-1: Manufacturer: syz [ 767.830096][T12035] usb 5-1: config 0 descriptor?? [ 767.840307][T12038] usb 1-1: USB disconnect, device number 46 [ 767.863745][ T9592] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 767.876286][T12035] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 767.883177][T12035] usb 5-1: No valid video chain found. [ 767.988588][ T9931] usb 4-1: device descriptor read/64, error 18 [ 768.063761][ T9592] usb 6-1: device descriptor read/64, error 18 [ 768.074154][ T4578] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 768.094319][ T4578] usb 3-1: No valid video chain found. 05:51:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 768.113945][ T9931] usb usb4-port1: attempt power cycle [ 768.120055][ T4578] usb 3-1: USB disconnect, device number 49 [ 768.141300][T12038] usb 5-1: USB disconnect, device number 41 05:51:53 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) [ 768.282794][ T27] audit: type=1804 audit(1658037113.820:761): pid=12845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/770/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 768.353985][ T9592] usb 6-1: new high-speed USB device number 87 using dummy_hcd 05:51:54 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) [ 768.538682][ T9931] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 768.546535][ T9592] usb 6-1: device descriptor read/64, error 18 05:51:54 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 768.655863][ T4032] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 768.684221][ T9592] usb usb6-port1: attempt power cycle [ 768.743994][ T9931] usb 4-1: device descriptor read/8, error -61 [ 768.853751][ T145] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 768.928566][ T4032] usb 1-1: Using ep0 maxpacket: 8 [ 768.943897][ T3676] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 769.013738][ T9931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 769.076047][ T4032] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.103878][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 769.109017][ T9592] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 769.164243][ T4032] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 769.173316][ T4032] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 769.182008][ T4032] usb 1-1: Manufacturer: syz [ 769.193855][ T4032] usb 1-1: config 0 descriptor?? [ 769.204901][ T9931] usb 4-1: device descriptor read/8, error -61 [ 769.211128][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 769.223780][ T145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.294072][ T9592] usb 6-1: device descriptor read/8, error -61 [ 769.313876][ T145] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 769.322940][ T145] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 769.331335][ T9931] usb usb4-port1: unable to enumerate USB device [ 769.338381][ T3676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.349586][ T145] usb 3-1: Manufacturer: syz [ 769.360510][ T145] usb 3-1: config 0 descriptor?? [ 769.444236][ T3676] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 769.453321][ T3676] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 769.461553][ T3676] usb 5-1: Manufacturer: syz [ 769.466433][ T4032] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 769.473386][ T4032] usb 1-1: No valid video chain found. [ 769.482892][ T3676] usb 5-1: config 0 descriptor?? [ 769.490092][ T4032] usb 1-1: USB disconnect, device number 47 [ 769.563788][ T9592] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 769.654103][ T145] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 769.661061][ T145] usb 3-1: No valid video chain found. [ 769.673152][ T145] usb 3-1: USB disconnect, device number 50 [ 769.738467][ T4578] usb 5-1: USB disconnect, device number 42 [ 769.773944][ T9592] usb 6-1: device descriptor read/8, error -61 05:51:55 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) 05:51:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:55 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) [ 769.891290][ T27] audit: type=1804 audit(1658037115.430:762): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/771/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 769.924539][ T9592] usb usb6-port1: unable to enumerate USB device 05:51:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:51:55 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) 05:51:55 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 770.202000][ T27] audit: type=1804 audit(1658037115.740:763): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/772/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 770.293889][ T4578] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 770.301613][T12038] usb 4-1: new high-speed USB device number 3 using dummy_hcd 05:51:55 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) 05:51:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 770.453785][T12035] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 770.505932][ T27] audit: type=1804 audit(1658037116.050:764): pid=12867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/773/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 770.553780][ T145] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 770.564175][ T4578] usb 1-1: Using ep0 maxpacket: 8 [ 770.569394][T12038] usb 4-1: Using ep0 maxpacket: 8 05:51:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 770.694143][T12038] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.704534][ T4578] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.716483][T12035] usb 3-1: Using ep0 maxpacket: 8 [ 770.728460][T12038] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.775694][ T27] audit: type=1804 audit(1658037116.320:765): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/774/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 770.814036][T12038] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 770.823219][ T4578] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 770.832662][T12038] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 770.843513][ T4578] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 770.844271][ T145] usb 5-1: Using ep0 maxpacket: 8 [ 770.852265][T12035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.867443][T12038] usb 4-1: Manufacturer: syz [ 770.877806][ T4578] usb 1-1: Manufacturer: syz [ 770.890216][T12038] usb 4-1: config 0 descriptor?? [ 770.895660][ T4578] usb 1-1: config 0 descriptor?? [ 770.931014][ T9592] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 770.973938][T12035] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 770.984001][T12035] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 770.992286][T12035] usb 3-1: Manufacturer: syz [ 771.005859][T12035] usb 3-1: config 0 descriptor?? [ 771.023865][ T145] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:51:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 771.123952][ T145] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 771.133039][ T145] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 771.164225][ T145] usb 5-1: Manufacturer: syz [ 771.173074][ T3676] usb 4-1: USB disconnect, device number 3 [ 771.173951][ T4578] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 771.182501][ T145] usb 5-1: config 0 descriptor?? [ 771.187705][ T4578] usb 1-1: No valid video chain found. [ 771.212379][ T4578] usb 1-1: USB disconnect, device number 48 [ 771.218812][ T9592] usb 6-1: Using ep0 maxpacket: 8 [ 771.238613][ T27] audit: type=1804 audit(1658037116.780:766): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/775/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 771.303845][T12035] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 771.319179][T12035] usb 3-1: No valid video chain found. [ 771.344694][T12035] usb 3-1: USB disconnect, device number 51 05:51:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 771.390448][ T9592] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.402183][ T9592] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.485292][ T4573] usb 5-1: USB disconnect, device number 43 [ 771.511459][ T9592] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 771.520763][ T9592] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 771.540919][ T27] audit: type=1804 audit(1658037117.080:767): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/776/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 771.543685][ T9592] usb 6-1: Manufacturer: syz [ 771.577249][ T9592] usb 6-1: config 0 descriptor?? 05:51:57 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) 05:51:57 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) 05:51:57 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e7"], 0x0) 05:51:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 771.822916][ T4578] usb 6-1: USB disconnect, device number 90 05:51:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 771.946125][ T27] audit: type=1804 audit(1658037117.490:768): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/777/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 771.993761][ T4573] usb 4-1: new high-speed USB device number 4 using dummy_hcd 05:51:57 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 772.025357][ T9592] usb 1-1: new high-speed USB device number 49 using dummy_hcd 05:51:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 772.073711][T12035] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 772.089686][ T27] audit: type=1804 audit(1658037117.630:769): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/778/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 772.235565][ T27] audit: type=1804 audit(1658037117.780:770): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/779/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 772.263078][ T4573] usb 4-1: Using ep0 maxpacket: 8 [ 772.293855][ T9592] usb 1-1: Using ep0 maxpacket: 8 05:51:57 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) 05:51:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 772.353703][T12035] usb 3-1: Using ep0 maxpacket: 8 [ 772.361598][ T145] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 772.404368][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.417578][ T4573] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 05:51:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 772.430935][ T27] audit: type=1804 audit(1658037117.970:771): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/780/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 772.494020][T12035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.502622][ T9592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.513920][ T4573] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 772.527853][ T4573] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 772.536471][ T27] audit: type=1804 audit(1658037118.080:772): pid=12904 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/781/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 772.567906][ T4573] usb 4-1: Manufacturer: syz 05:51:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 772.590942][ T4573] usb 4-1: config 0 descriptor?? [ 772.603997][T12035] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 772.623946][ T9592] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 772.637669][ T9592] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 772.639638][T12035] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 772.646484][ T145] usb 5-1: Using ep0 maxpacket: 8 [ 772.654771][T12038] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 772.669889][ T9592] usb 1-1: Manufacturer: syz [ 772.682840][T12035] usb 3-1: Manufacturer: syz [ 772.693450][ T9592] usb 1-1: config 0 descriptor?? [ 772.707267][T12035] usb 3-1: config 0 descriptor?? 05:51:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 772.722643][ T27] audit: type=1804 audit(1658037118.260:773): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/782/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 772.794032][ T145] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.854144][ T27] audit: type=1804 audit(1658037118.400:774): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/783/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 772.884832][ T3676] usb 4-1: USB disconnect, device number 4 [ 772.923919][T12038] usb 6-1: Using ep0 maxpacket: 8 [ 772.924153][ T145] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 772.939673][ T145] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 772.948694][ T145] usb 5-1: Manufacturer: syz [ 772.955803][ T145] usb 5-1: config 0 descriptor?? [ 772.993924][T12035] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 773.001764][T12035] usb 3-1: No valid video chain found. [ 773.011678][T12035] usb 3-1: USB disconnect, device number 52 [ 773.024007][ T9592] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 773.038077][ T9592] usb 1-1: No valid video chain found. [ 773.044146][T12038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.056942][ T9592] usb 1-1: USB disconnect, device number 49 [ 773.068217][T12038] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 773.154120][T12038] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 773.163270][T12038] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 773.171535][T12038] usb 6-1: Manufacturer: syz [ 773.177940][T12038] usb 6-1: config 0 descriptor?? [ 773.202236][ T4573] usb 5-1: USB disconnect, device number 44 05:51:58 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) [ 773.420016][ T4573] usb 6-1: USB disconnect, device number 91 05:51:59 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e7"], 0x0) 05:51:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:51:59 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e7"], 0x0) 05:51:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 773.579680][ T27] audit: type=1804 audit(1658037119.120:775): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/784/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 05:51:59 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 773.727828][ T27] audit: type=1804 audit(1658037119.270:776): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/785/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 773.731063][ T4032] usb 4-1: new high-speed USB device number 5 using dummy_hcd 05:51:59 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) [ 773.773784][T12035] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 773.833911][ T9592] usb 1-1: new high-speed USB device number 50 using dummy_hcd 05:51:59 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) [ 774.013885][T12035] usb 3-1: Using ep0 maxpacket: 8 [ 774.043847][ T4032] usb 4-1: Using ep0 maxpacket: 8 [ 774.063926][ T3676] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 774.083872][ T9592] usb 1-1: Using ep0 maxpacket: 8 [ 774.113773][ T4573] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 774.133958][T12035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.173919][ T4032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.184665][ T4032] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 774.223957][T12035] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 774.233021][T12035] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 774.233714][ T145] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 774.242066][T12035] usb 3-1: Manufacturer: syz [ 774.249674][ T9592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.275993][T12035] usb 3-1: config 0 descriptor?? [ 774.303971][ T4032] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 774.313276][ T4032] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 774.321646][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 774.327001][ T4032] usb 4-1: Manufacturer: syz [ 774.333807][ T4032] usb 4-1: config 0 descriptor?? [ 774.353862][ T4573] usb 2-1: Using ep0 maxpacket: 8 [ 774.353900][ T9592] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 774.368112][ T9592] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 774.377989][ T9592] usb 1-1: Manufacturer: syz [ 774.385504][ T9592] usb 1-1: config 0 descriptor?? [ 774.463905][ T3676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.473875][ T4573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.523730][ T145] usb 6-1: Using ep0 maxpacket: 8 [ 774.543940][T12035] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 774.551235][T12035] usb 3-1: No valid video chain found. [ 774.560046][T12035] usb 3-1: USB disconnect, device number 53 [ 774.563801][ T3676] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 774.566459][ T4573] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 774.586929][ T4573] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 774.591535][ T3676] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 774.603794][ T3676] usb 5-1: Manufacturer: syz [ 774.609929][ T4032] usb 4-1: USB disconnect, device number 5 [ 774.621831][ T3676] usb 5-1: config 0 descriptor?? [ 774.640882][ T4573] usb 2-1: Manufacturer: syz [ 774.654243][ T9592] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 774.659645][ T4573] usb 2-1: config 0 descriptor?? [ 774.662135][ T145] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.679732][ T9592] usb 1-1: No valid video chain found. [ 774.690666][ T145] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 774.702194][ T9592] usb 1-1: USB disconnect, device number 50 [ 774.804043][ T145] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 774.813281][ T145] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 774.821753][ T145] usb 6-1: Manufacturer: syz [ 774.828707][ T145] usb 6-1: config 0 descriptor?? [ 774.923845][ T3676] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 774.931284][ T3676] usb 5-1: No valid video chain found. [ 774.943869][ T4573] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 774.950294][ T3676] usb 5-1: USB disconnect, device number 45 [ 774.950782][ T4573] usb 2-1: No valid video chain found. 05:52:00 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e7"], 0x0) [ 774.977905][ T4573] usb 2-1: USB disconnect, device number 8 05:52:00 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) 05:52:00 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e7"], 0x0) [ 775.080261][ T145] usb 6-1: USB disconnect, device number 92 [ 775.323899][ T9592] usb 3-1: new high-speed USB device number 54 using dummy_hcd 05:52:00 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) 05:52:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 775.393803][ T4032] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 775.464225][ T3676] usb 1-1: new high-speed USB device number 51 using dummy_hcd 05:52:01 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 775.539432][ T27] audit: type=1804 audit(1658037121.080:777): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/787/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 775.614086][ T9592] usb 3-1: Using ep0 maxpacket: 8 [ 775.653791][ T4032] usb 4-1: Using ep0 maxpacket: 8 [ 775.683960][ T145] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 775.734236][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 775.770902][ T9592] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 775.816124][ T4032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.877180][ T9592] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 775.886975][ T3676] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.898499][ T9931] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 775.906680][ T9592] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 775.915546][ T9592] usb 3-1: Manufacturer: syz [ 775.922117][ T9592] usb 3-1: config 0 descriptor?? [ 775.933896][ T4032] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 775.942922][ T4032] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 775.952027][ T4032] usb 4-1: Manufacturer: syz [ 775.956911][ T145] usb 5-1: Using ep0 maxpacket: 8 [ 775.971715][ T4032] usb 4-1: config 0 descriptor?? [ 776.004206][ T3676] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 776.013270][ T3676] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 776.021778][ T3676] usb 1-1: Manufacturer: syz [ 776.029231][ T4032] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 776.041114][ T3676] usb 1-1: config 0 descriptor?? [ 776.046790][ T4032] usb 4-1: No valid video chain found. [ 776.096703][ T145] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.164200][ T9931] usb 6-1: Using ep0 maxpacket: 8 05:52:01 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 776.220222][ T9592] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 776.227388][ T145] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 776.232001][ T4573] usb 4-1: USB disconnect, device number 6 [ 776.238537][ T9592] usb 3-1: No valid video chain found. [ 776.258720][ T145] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 776.274704][ T145] usb 5-1: Manufacturer: syz [ 776.291842][ T9592] usb 3-1: USB disconnect, device number 54 [ 776.306215][ T145] usb 5-1: config 0 descriptor?? [ 776.334178][ T3676] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 776.341112][ T3676] usb 1-1: No valid video chain found. [ 776.347127][ T9931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.365495][ T3676] usb 1-1: USB disconnect, device number 51 [ 776.433931][ T9931] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 776.443024][ T9931] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 776.452240][ T9931] usb 6-1: Manufacturer: syz [ 776.468179][ T9931] usb 6-1: config 0 descriptor?? [ 776.505489][ T9931] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 776.512393][ T9931] usb 6-1: No valid video chain found. [ 776.583926][ T145] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 776.590954][ T145] usb 5-1: No valid video chain found. [ 776.598971][ T145] usb 5-1: USB disconnect, device number 46 [ 776.613678][T12549] usb 2-1: new high-speed USB device number 9 using dummy_hcd 05:52:02 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:52:02 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 776.709688][ T3676] usb 6-1: USB disconnect, device number 93 05:52:02 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e7"], 0x0) [ 776.873846][T12549] usb 2-1: Using ep0 maxpacket: 8 [ 776.993865][T12549] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.003750][ T4573] usb 3-1: new high-speed USB device number 55 using dummy_hcd 05:52:02 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 777.043904][ T4578] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 777.114849][T12549] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 777.124261][ T145] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 777.136483][T12549] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 777.144948][T12549] usb 2-1: Manufacturer: syz [ 777.151319][T12549] usb 2-1: config 0 descriptor?? 05:52:02 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 777.196333][T12549] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 777.203312][T12549] usb 2-1: No valid video chain found. [ 777.247516][ T4573] usb 3-1: Using ep0 maxpacket: 8 [ 777.284348][ T4578] usb 4-1: Using ep0 maxpacket: 8 [ 777.363892][ T4573] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.383772][ T145] usb 1-1: Using ep0 maxpacket: 8 [ 777.388972][ T3676] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 777.413843][ T4578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.423141][ T9931] usb 2-1: USB disconnect, device number 9 [ 777.463959][ T4573] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 777.473188][ T4573] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 777.482487][ T4573] usb 3-1: Manufacturer: syz [ 777.490317][ T4573] usb 3-1: config 0 descriptor?? [ 777.503998][ T4578] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 777.513242][ T4578] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 777.521919][ T4578] usb 4-1: Manufacturer: syz [ 777.533457][ T4578] usb 4-1: config 0 descriptor?? [ 777.535156][ T145] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.548939][T12549] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 777.576150][ T4578] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 777.583019][ T4578] usb 4-1: No valid video chain found. [ 777.633813][ T145] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 777.643009][ T145] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 777.651386][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 777.657916][ T145] usb 1-1: Manufacturer: syz [ 777.665822][ T145] usb 1-1: config 0 descriptor?? [ 777.773912][ T4573] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 777.780793][ T9931] usb 4-1: USB disconnect, device number 7 [ 777.790415][ T4573] usb 3-1: Failed to create links for entity 231 [ 777.794112][ T3676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.797264][ T4573] usb 3-1: Failed to register entities (-22). [ 777.806984][T12549] usb 6-1: Using ep0 maxpacket: 8 [ 777.822720][ T4573] usb 3-1: USB disconnect, device number 55 05:52:03 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403"], 0x0) [ 777.925696][ T3676] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 777.942846][ T3676] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 777.951818][ T3676] usb 5-1: Manufacturer: syz [ 777.972435][ T3676] usb 5-1: config 0 descriptor?? [ 777.983809][ T145] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 777.990952][T12549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.003901][ T145] usb 1-1: No valid video chain found. [ 778.011574][ T145] usb 1-1: USB disconnect, device number 52 [ 778.093829][T12549] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 778.103496][T12549] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 778.111642][T12549] usb 6-1: Manufacturer: syz [ 778.126991][T12549] usb 6-1: config 0 descriptor?? [ 778.178622][T12549] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 778.185664][T12549] usb 6-1: No valid video chain found. 05:52:03 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 778.263767][ T4578] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 778.295148][ T3676] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 778.302273][ T3676] usb 5-1: No valid video chain found. 05:52:03 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 778.317661][ T3676] usb 5-1: USB disconnect, device number 47 [ 778.379684][T12549] usb 6-1: USB disconnect, device number 94 05:52:04 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 778.523778][ T4578] usb 2-1: Using ep0 maxpacket: 8 [ 778.553713][T12038] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 778.633786][ T4573] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 778.643885][ T4578] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:04 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 778.733821][ T4578] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 778.742869][ T4578] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 778.754797][ T4578] usb 2-1: Manufacturer: syz [ 778.763806][ T145] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 778.768388][ T4578] usb 2-1: config 0 descriptor?? [ 778.804902][T12038] usb 3-1: Using ep0 maxpacket: 8 05:52:04 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 778.873746][ T4573] usb 4-1: Using ep0 maxpacket: 8 [ 778.934349][T12038] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.993872][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.013792][ T145] usb 1-1: Using ep0 maxpacket: 8 [ 779.024042][T12038] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 779.040781][T12038] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 779.044946][ T9931] usb 2-1: USB disconnect, device number 10 [ 779.052139][T12038] usb 3-1: Manufacturer: syz [ 779.073763][ T6] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 779.081597][T12038] usb 3-1: config 0 descriptor?? [ 779.087195][ T4573] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 779.096869][ T4573] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 779.105348][ T4573] usb 4-1: Manufacturer: syz [ 779.111729][ T4573] usb 4-1: config 0 descriptor?? [ 779.143877][ T145] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.155663][ T4573] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 779.168544][ T4573] usb 4-1: No valid video chain found. [ 779.213734][ T4578] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 779.243868][ T145] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 779.252912][ T145] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 779.268323][ T145] usb 1-1: Manufacturer: syz [ 779.281170][ T145] usb 1-1: config 0 descriptor?? [ 779.333846][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 779.358029][ T4573] usb 4-1: USB disconnect, device number 8 [ 779.383897][T12038] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 779.392498][T12038] usb 3-1: No valid video chain found. [ 779.406587][T12038] usb 3-1: USB disconnect, device number 56 [ 779.453925][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.464114][ T4578] usb 6-1: Using ep0 maxpacket: 8 [ 779.553995][ T6] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 779.567707][ T6] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 779.580117][ T6] usb 5-1: Manufacturer: syz [ 779.583814][ T145] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 779.589935][ T4578] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:05 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824"], 0x0) [ 779.591717][ T145] usb 1-1: Failed to create links for entity 231 [ 779.611089][ T145] usb 1-1: Failed to register entities (-22). [ 779.615579][ T6] usb 5-1: config 0 descriptor?? [ 779.641499][ T145] usb 1-1: USB disconnect, device number 53 [ 779.703998][ T4578] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 779.713084][ T4578] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 779.722288][ T4578] usb 6-1: Manufacturer: syz [ 779.736133][ T4578] usb 6-1: config 0 descriptor?? [ 779.786330][ T4578] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 779.793505][ T4578] usb 6-1: No valid video chain found. 05:52:05 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) 05:52:05 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 779.903917][ T6] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 779.910871][ T6] usb 5-1: No valid video chain found. [ 779.941878][ T6] usb 5-1: USB disconnect, device number 48 [ 779.953909][ T9931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 779.994592][ T3676] usb 6-1: USB disconnect, device number 95 05:52:05 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 780.153744][ T4578] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 780.183950][ T145] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 780.213855][ T9931] usb 2-1: Using ep0 maxpacket: 8 05:52:05 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 780.346738][ T9931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.373735][ T3676] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 780.393863][ T4578] usb 3-1: Using ep0 maxpacket: 8 [ 780.443871][ T9931] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 780.453144][ T145] usb 4-1: Using ep0 maxpacket: 8 [ 780.458407][ T9931] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 780.466619][ T9931] usb 2-1: Manufacturer: syz [ 780.481547][ T9931] usb 2-1: config 0 descriptor?? 05:52:06 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 780.514385][ T4578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.544775][ T9931] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 780.551711][ T9931] usb 2-1: No valid video chain found. [ 780.603903][ T4578] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 780.612964][ T4578] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 780.613972][ T145] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.637909][ T4578] usb 3-1: Manufacturer: syz [ 780.654541][ T4578] usb 3-1: config 0 descriptor?? [ 780.673845][ T3676] usb 1-1: Using ep0 maxpacket: 8 [ 780.713895][T12549] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 780.725648][ T145] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 780.735238][ T145] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 780.754287][ T145] usb 4-1: Manufacturer: syz [ 780.767564][ T4573] usb 2-1: USB disconnect, device number 11 [ 780.770795][ T145] usb 4-1: config 0 descriptor?? [ 780.798559][ T3676] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.823890][ T6] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 780.893835][ T3676] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 780.910762][ T3676] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 780.921357][ T3676] usb 1-1: Manufacturer: syz [ 780.933815][ T4578] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 780.939016][ T3676] usb 1-1: config 0 descriptor?? [ 780.941322][ T4578] usb 3-1: No valid video chain found. [ 780.954658][ T4578] usb 3-1: USB disconnect, device number 57 [ 780.975018][T12549] usb 5-1: Using ep0 maxpacket: 8 [ 781.017423][ T145] usb 4-1: USB disconnect, device number 9 [ 781.063763][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 781.113763][T12549] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.183860][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.204247][T12549] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 781.215595][T12549] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 781.224290][ T3676] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 781.231286][T12549] usb 5-1: Manufacturer: syz [ 781.236952][ T3676] usb 1-1: No valid video chain found. [ 781.252742][T12549] usb 5-1: config 0 descriptor?? [ 781.259147][ T3676] usb 1-1: USB disconnect, device number 54 [ 781.273966][ T6] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a 05:52:06 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000"], 0x0) [ 781.285081][ T6] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 781.293222][ T6] usb 6-1: Manufacturer: syz [ 781.334047][ T6] usb 6-1: config 0 descriptor?? 05:52:06 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) 05:52:07 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 781.543999][T12549] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 781.552553][T12549] usb 5-1: No valid video chain found. [ 781.578342][ T4578] usb 6-1: USB disconnect, device number 96 [ 781.580097][T12549] usb 5-1: USB disconnect, device number 49 [ 781.633842][ T145] usb 2-1: new high-speed USB device number 12 using dummy_hcd 05:52:07 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 781.774774][ T9931] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 781.813766][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 781.913765][ T145] usb 2-1: Using ep0 maxpacket: 8 05:52:07 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 782.003785][ T4573] usb 1-1: new high-speed USB device number 55 using dummy_hcd 05:52:07 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 782.053968][ T9931] usb 3-1: Using ep0 maxpacket: 8 [ 782.059157][ T145] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.063784][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 782.069574][ T145] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 782.173898][ T145] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 782.183226][ T145] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 782.191829][ T145] usb 2-1: Manufacturer: syz [ 782.193921][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.213792][ T9931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.224337][ T145] usb 2-1: config 0 descriptor?? [ 782.253779][ T4573] usb 1-1: Using ep0 maxpacket: 8 [ 782.283916][ T6] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 782.293317][ T6] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 782.302038][ T6] usb 4-1: Manufacturer: syz [ 782.310223][ T6] usb 4-1: config 0 descriptor?? [ 782.313954][T12549] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 782.323218][ T9931] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 782.332862][ T9931] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 782.342302][ T9931] usb 3-1: Manufacturer: syz [ 782.360012][ T9931] usb 3-1: config 0 descriptor?? [ 782.374033][ T4573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.394308][T12556] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 782.463955][ T4573] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 782.473315][ T4573] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 782.480386][ T3676] usb 2-1: USB disconnect, device number 12 [ 782.484843][ T4573] usb 1-1: Manufacturer: syz [ 782.507891][ T4573] usb 1-1: config 0 descriptor?? [ 782.563045][ T4578] usb 4-1: USB disconnect, device number 10 [ 782.593757][T12549] usb 5-1: Using ep0 maxpacket: 8 [ 782.653708][T12556] usb 6-1: Using ep0 maxpacket: 8 [ 782.673951][ T9931] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 782.681134][ T9931] usb 3-1: No valid video chain found. [ 782.689573][ T9931] usb 3-1: USB disconnect, device number 58 [ 782.744042][T12549] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.783904][T12556] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.783916][ T4573] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 782.802552][ T4573] usb 1-1: No valid video chain found. [ 782.810795][ T4573] usb 1-1: USB disconnect, device number 55 [ 782.845554][T12549] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 782.855750][T12549] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 782.864289][T12549] usb 5-1: Manufacturer: syz [ 782.870869][T12549] usb 5-1: config 0 descriptor?? [ 782.903913][T12556] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 782.913432][T12556] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 782.922057][T12556] usb 6-1: Manufacturer: syz [ 782.932119][T12556] usb 6-1: config 0 descriptor?? 05:52:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:08 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 783.112221][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 783.112237][ T27] audit: type=1804 audit(1658037128.650:779): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/793/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 05:52:08 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 783.184300][T12549] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 783.190076][ T6] usb 6-1: USB disconnect, device number 97 [ 783.191241][T12549] usb 5-1: No valid video chain found. 05:52:08 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 783.242277][T12549] usb 5-1: USB disconnect, device number 50 [ 783.373871][ T4573] usb 4-1: new high-speed USB device number 11 using dummy_hcd 05:52:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 783.543705][T12556] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 783.590026][ T27] audit: type=1804 audit(1658037129.130:780): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/794/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 783.620065][ T4573] usb 4-1: Using ep0 maxpacket: 8 [ 783.624040][ T9931] usb 1-1: new high-speed USB device number 56 using dummy_hcd 05:52:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:09 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000"], 0x0) [ 783.754002][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.788501][ T27] audit: type=1804 audit(1658037129.330:781): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/559/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 05:52:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 783.853868][T12556] usb 3-1: Using ep0 maxpacket: 8 [ 783.873995][ T4573] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 783.884716][ T4573] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 783.893498][ T4573] usb 4-1: Manufacturer: syz [ 783.909221][ T9931] usb 1-1: Using ep0 maxpacket: 8 [ 783.931437][ T4573] usb 4-1: config 0 descriptor?? [ 783.994176][T12556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.041032][ T27] audit: type=1804 audit(1658037129.580:782): pid=13011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/560/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 05:52:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) [ 784.093900][ T6] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 784.094172][ T9931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.170701][T12556] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 784.190982][T12556] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 784.194163][ T4578] usb 4-1: USB disconnect, device number 11 [ 784.202654][T12556] usb 3-1: Manufacturer: syz [ 784.228926][T12556] usb 3-1: config 0 descriptor?? [ 784.235128][ T9931] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 784.257293][ T9931] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 784.269666][ T9931] usb 1-1: Manufacturer: syz [ 784.285005][ T9931] usb 1-1: config 0 descriptor?? 05:52:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:52:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 784.344289][ T6] usb 6-1: Using ep0 maxpacket: 8 05:52:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 784.463969][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.543867][T12556] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 784.553867][T12556] usb 3-1: No valid video chain found. [ 784.566467][T12556] usb 3-1: USB disconnect, device number 59 [ 784.573962][ T9931] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 784.582053][ T9931] usb 1-1: No valid video chain found. [ 784.583941][ T6] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 784.589898][ T9931] usb 1-1: USB disconnect, device number 56 05:52:10 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 784.700182][ T6] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 784.713702][ T4578] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 784.784605][ T6] usb 6-1: Manufacturer: syz [ 784.852680][ T6] usb 6-1: config 0 descriptor?? [ 784.894162][T12549] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 784.973772][ T4578] usb 5-1: Using ep0 maxpacket: 8 05:52:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 785.063704][ T3676] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 785.093989][ T4578] usb 5-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 785.158222][ T6] usb 6-1: USB disconnect, device number 98 [ 785.183782][T12549] usb 2-1: Using ep0 maxpacket: 8 [ 785.233912][ T4578] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 785.287997][ T4578] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 785.323843][T12549] usb 2-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config 05:52:10 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 785.353717][ T3676] usb 4-1: Using ep0 maxpacket: 8 [ 785.413929][ T4578] usb 5-1: Manufacturer: syz 05:52:11 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) [ 785.464212][T12549] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 785.477684][ T4578] usb 5-1: config 0 descriptor?? [ 785.483901][ T3676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.520730][T12549] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 05:52:11 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 785.593989][T12556] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 785.626387][T12549] usb 2-1: Manufacturer: syz [ 785.644035][ T3676] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 785.687753][ T3676] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 785.723020][T12549] usb 2-1: config 0 descriptor?? [ 785.783179][ T3676] usb 4-1: Manufacturer: syz 05:52:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 785.840335][ T3676] usb 4-1: config 0 descriptor?? [ 785.883746][T12556] usb 3-1: Using ep0 maxpacket: 8 [ 786.005524][T12556] usb 3-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 786.143823][T12556] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 786.160177][T12556] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 786.183856][ T3676] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 786.193778][ T145] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 786.201715][ T3676] usb 4-1: No valid video chain found. [ 786.214710][T12556] usb 3-1: Manufacturer: syz [ 786.220029][ T3676] usb 4-1: USB disconnect, device number 12 [ 786.235904][T12556] usb 3-1: config 0 descriptor?? [ 786.263807][ T9592] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 786.453686][ T145] usb 6-1: Using ep0 maxpacket: 8 [ 786.516273][ T9592] usb 1-1: Using ep0 maxpacket: 8 [ 786.574226][ T145] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:12 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 786.674141][ T9592] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 786.704019][ T145] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 786.775710][ T145] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 786.784220][ T9592] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 786.810296][ T9592] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 786.856234][ T145] usb 6-1: Manufacturer: syz [ 786.894086][ T9592] usb 1-1: Manufacturer: syz [ 786.946731][ T145] usb 6-1: config 0 descriptor?? [ 786.967096][ T9592] usb 1-1: config 0 descriptor?? [ 787.153806][ T4578] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 787.165816][ T4578] usb 5-1: No valid video chain found. [ 787.227262][ T4578] usb 5-1: USB disconnect, device number 51 [ 787.273832][ T145] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 787.281573][ T145] usb 6-1: No valid video chain found. [ 787.293400][T13040] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 787.301518][T12549] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 787.312500][T12549] usb 2-1: No valid video chain found. [ 787.333137][ T145] usb 6-1: USB disconnect, device number 99 [ 787.378112][T12549] usb 2-1: USB disconnect, device number 13 [ 787.563781][T13040] usb 4-1: Using ep0 maxpacket: 8 05:52:13 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 787.684011][T13040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:13 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) 05:52:13 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 787.804104][T13040] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 787.830923][T13040] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 787.840039][T13040] usb 4-1: Manufacturer: syz [ 787.881786][T13040] usb 4-1: config 0 descriptor?? [ 788.004226][T12556] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 788.019092][T12556] usb 3-1: No valid video chain found. [ 788.033859][T12549] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 788.051943][T12556] usb 3-1: USB disconnect, device number 60 [ 788.073972][ T145] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 788.153935][T13040] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 788.160980][T13040] usb 4-1: No valid video chain found. [ 788.167095][ T9592] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 788.184536][ T9592] usb 1-1: No valid video chain found. [ 788.192710][T13040] usb 4-1: USB disconnect, device number 13 [ 788.208867][ T9592] usb 1-1: USB disconnect, device number 57 [ 788.245083][ T3676] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 788.293915][T12549] usb 5-1: Using ep0 maxpacket: 8 [ 788.323811][ T145] usb 6-1: Using ep0 maxpacket: 8 05:52:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 788.413859][T12549] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.443985][ T145] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 788.504511][T12549] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 788.513844][ T3676] usb 2-1: Using ep0 maxpacket: 8 [ 788.526963][T12549] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 788.540724][T12549] usb 5-1: Manufacturer: syz [ 788.548395][ T145] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 788.567670][T12549] usb 5-1: config 0 descriptor?? [ 788.573990][ T145] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 788.598972][ T145] usb 6-1: Manufacturer: syz [ 788.612653][ T145] usb 6-1: config 0 descriptor?? 05:52:14 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) 05:52:14 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 788.634544][ T3676] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.737834][ T27] audit: type=1804 audit(1658037134.280:783): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1789386244/syzkaller.3oSslL/715/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 788.765598][ T3676] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 788.775458][ T3676] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 788.783560][ T3676] usb 2-1: Manufacturer: syz [ 788.792640][ T3676] usb 2-1: config 0 descriptor?? [ 788.883956][ T145] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 788.891621][T12549] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 788.905989][T12549] usb 5-1: No valid video chain found. [ 788.912014][ T145] usb 6-1: No valid video chain found. [ 788.922999][T12549] usb 5-1: USB disconnect, device number 52 [ 788.961956][ T145] usb 6-1: USB disconnect, device number 100 [ 788.993961][ T4578] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 789.013975][ T6] usb 1-1: new high-speed USB device number 58 using dummy_hcd 05:52:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 789.073893][ T3676] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 789.082066][ T3676] usb 2-1: No valid video chain found. [ 789.098295][ T3676] usb 2-1: USB disconnect, device number 14 [ 789.259032][ T27] audit: type=1804 audit(1658037134.800:784): pid=13059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1789386244/syzkaller.3oSslL/716/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 789.287393][ T4578] usb 4-1: Using ep0 maxpacket: 8 [ 789.324027][ T6] usb 1-1: Using ep0 maxpacket: 8 05:52:14 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) 05:52:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 789.444194][ T4578] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.474365][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 05:52:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 789.554070][ T4578] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 789.565512][ T4578] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 789.574296][ T6] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 789.591245][ T6] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 789.608479][ T4578] usb 4-1: Manufacturer: syz [ 789.613237][ T6] usb 1-1: Manufacturer: syz [ 789.625665][ T4578] usb 4-1: config 0 descriptor?? [ 789.632845][ T6] usb 1-1: config 0 descriptor?? [ 789.669143][ T27] audit: type=1804 audit(1658037135.210:785): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/563/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 05:52:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 789.813755][T12038] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 789.939936][ T6] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 789.958642][ T6] usb 1-1: No valid video chain found. [ 789.966667][ T4578] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 789.982900][ T4578] usb 4-1: No valid video chain found. [ 790.024928][ T6] usb 1-1: USB disconnect, device number 58 [ 790.033573][ T4578] usb 4-1: USB disconnect, device number 14 [ 790.103980][T12038] usb 6-1: Using ep0 maxpacket: 8 [ 790.214110][ T4573] usb 2-1: new high-speed USB device number 15 using dummy_hcd 05:52:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 790.264225][T12038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.374098][T12038] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 790.404899][T12038] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 05:52:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:52:16 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 790.483735][ T4573] usb 2-1: Using ep0 maxpacket: 8 [ 790.513900][T12038] usb 6-1: Manufacturer: syz [ 790.572272][T12038] usb 6-1: config 0 descriptor?? [ 790.614411][ T4573] usb 2-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 790.713851][ T4573] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 790.753881][ T4573] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 790.819659][ T4573] usb 2-1: Manufacturer: syz [ 790.883831][T12038] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 790.897756][ T4573] usb 2-1: config 0 descriptor?? [ 790.904785][T12038] usb 6-1: No valid video chain found. [ 790.953697][T12549] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 790.985581][T12038] usb 6-1: USB disconnect, device number 101 [ 791.023797][ T4578] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 791.031445][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 791.233825][T12549] usb 1-1: Using ep0 maxpacket: 8 [ 791.251421][ T27] audit: type=1804 audit(1658037136.790:786): pid=13072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1789386244/syzkaller.3oSslL/717/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 05:52:16 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 791.303987][ T4578] usb 5-1: Using ep0 maxpacket: 8 [ 791.309079][ T6] usb 4-1: Using ep0 maxpacket: 8 05:52:16 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 791.383990][T12549] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 791.433812][ T4578] usb 5-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 791.444433][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.543941][T12549] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 791.573887][ T6] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 791.583125][ T4578] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 791.592345][T12549] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 791.601033][T12549] usb 1-1: Manufacturer: syz [ 791.618248][T12549] usb 1-1: config 0 descriptor?? [ 791.728476][ T6] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 791.755529][ T4578] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 791.773732][ T3676] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 791.868741][ T6] usb 4-1: Manufacturer: syz [ 791.877367][ T4578] usb 5-1: Manufacturer: syz [ 791.922432][ T6] usb 4-1: config 0 descriptor?? [ 791.937609][ T4578] usb 5-1: config 0 descriptor?? [ 791.953777][ T145] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 792.053699][ T3676] usb 6-1: Using ep0 maxpacket: 8 [ 792.183953][ T3676] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.245906][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 792.293802][ T4573] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 792.303826][ T6] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 792.313981][ T3676] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 792.327980][ T4573] usb 2-1: No valid video chain found. [ 792.329949][ T3676] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 792.344997][ T6] usb 4-1: No valid video chain found. [ 792.352496][ T3676] usb 6-1: Manufacturer: syz [ 792.367774][ T3676] usb 6-1: config 0 descriptor?? [ 792.404256][ T145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.501521][ T4573] usb 2-1: USB disconnect, device number 15 [ 792.516353][ T6] usb 4-1: USB disconnect, device number 15 [ 792.533824][ T145] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 792.589962][ T145] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 792.614000][ T145] usb 3-1: Manufacturer: syz [ 792.657194][ T145] usb 3-1: config 0 descriptor?? [ 792.673798][ T3676] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 792.699842][ T3676] usb 6-1: No valid video chain found. 05:52:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) 05:52:18 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 792.758641][ T3676] usb 6-1: USB disconnect, device number 102 [ 792.933766][T12549] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 792.941481][T12549] usb 1-1: No valid video chain found. [ 792.946135][ T4578] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 792.967083][ T4578] usb 5-1: No valid video chain found. [ 792.980186][T12549] usb 1-1: USB disconnect, device number 59 [ 792.987070][ T145] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 792.994886][ T145] usb 3-1: No valid video chain found. [ 793.011541][ T145] usb 3-1: USB disconnect, device number 61 [ 793.049050][ T4578] usb 5-1: USB disconnect, device number 53 05:52:18 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 793.263728][ T6] usb 4-1: new high-speed USB device number 16 using dummy_hcd 05:52:18 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 793.353816][T13040] usb 2-1: new high-speed USB device number 16 using dummy_hcd 05:52:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 793.454014][ T3676] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 793.503818][ T6] usb 4-1: Using ep0 maxpacket: 8 05:52:19 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403"], 0x0) [ 793.623889][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.623933][T13040] usb 2-1: Using ep0 maxpacket: 8 [ 793.723710][T12549] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 793.743937][ T6] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 793.769491][ T6] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 793.784085][ T3676] usb 6-1: Using ep0 maxpacket: 8 [ 793.823846][T13040] usb 2-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 793.840568][ T6] usb 4-1: Manufacturer: syz [ 793.886866][ T6] usb 4-1: config 0 descriptor?? [ 793.903813][ T145] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 793.923937][ T3676] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.954176][T13040] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 793.967381][T13040] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 793.978920][T13040] usb 2-1: Manufacturer: syz [ 793.994787][T12549] usb 1-1: Using ep0 maxpacket: 8 [ 794.005533][T13040] usb 2-1: config 0 descriptor?? [ 794.023711][T12038] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 794.044043][ T3676] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 794.073951][ T3676] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 794.082347][ T3676] usb 6-1: Manufacturer: syz [ 794.097182][ T3676] usb 6-1: config 0 descriptor?? [ 794.125437][T12549] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.183781][ T6] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 794.193913][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 794.200904][ T6] usb 4-1: No valid video chain found. [ 794.213932][T12549] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 794.246982][T12549] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 794.269435][T12549] usb 1-1: Manufacturer: syz [ 794.273695][T12038] usb 5-1: Using ep0 maxpacket: 8 [ 794.280544][ T6] usb 4-1: USB disconnect, device number 16 [ 794.324211][ T145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.386684][T12549] usb 1-1: config 0 descriptor?? [ 794.393874][ T3676] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 794.401104][T12038] usb 5-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 794.418362][ T3676] usb 6-1: No valid video chain found. [ 794.452097][ T3676] usb 6-1: USB disconnect, device number 103 [ 794.474117][ T145] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 794.490305][ T145] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 794.499363][T13040] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 794.503934][T12038] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 794.510106][T13040] usb 2-1: No valid video chain found. [ 794.539764][T12038] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 794.549925][T12038] usb 5-1: Manufacturer: syz [ 794.554802][ T145] usb 3-1: Manufacturer: syz [ 794.563946][ T145] usb 3-1: config 0 descriptor?? [ 794.569408][T13040] usb 2-1: USB disconnect, device number 16 [ 794.608009][T12038] usb 5-1: config 0 descriptor?? 05:52:20 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 794.753875][T12549] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 794.764659][T12549] usb 1-1: No valid video chain found. [ 794.787876][T12549] usb 1-1: USB disconnect, device number 60 05:52:20 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 794.853835][ T145] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 794.887201][ T145] usb 3-1: No valid video chain found. 05:52:20 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 794.940774][ T145] usb 3-1: USB disconnect, device number 62 [ 794.953865][ T6] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 795.183986][ T4573] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 795.204026][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 795.223998][T12038] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 795.230907][T12038] usb 5-1: No valid video chain found. [ 795.255150][T12038] usb 5-1: USB disconnect, device number 54 05:52:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 795.323756][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.339775][ T4578] usb 2-1: new high-speed USB device number 17 using dummy_hcd 05:52:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 795.423882][ T6] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 795.433722][ T4573] usb 6-1: Using ep0 maxpacket: 8 [ 795.447809][ T6] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 795.467789][ T6] usb 4-1: Manufacturer: syz [ 795.489455][ T6] usb 4-1: config 0 descriptor?? [ 795.536455][ T27] audit: type=1804 audit(1658037141.080:787): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2765272540/syzkaller.FAdQMC/647/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 795.564698][ T4573] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.593853][ T4578] usb 2-1: Using ep0 maxpacket: 8 05:52:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 795.664085][ T4573] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 795.688458][ T4573] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 795.723911][ T4578] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.764295][ T4573] usb 6-1: Manufacturer: syz [ 795.793877][ T6] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 795.818748][ T4573] usb 6-1: config 0 descriptor?? [ 795.825072][ T6] usb 4-1: No valid video chain found. [ 795.845085][ T4578] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 795.864357][ T6] usb 4-1: USB disconnect, device number 17 [ 795.872775][ T4578] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 795.887831][ T4578] usb 2-1: Manufacturer: syz [ 795.904561][ T4578] usb 2-1: config 0 descriptor?? 05:52:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705803b6831bc3848561f255f15aca28ec3e5e69a7251137c2f08fa433a680a6cdb9df580e94f24e3e0319ed08faaee26d84674a5c0e52e4ff2027ad72fd7c415b7d45baa79588aa29b44ab5ce0a84610b0e2dc9cfbf82113d8059428798d242c9bd2e3a2b07ae6b5a2493e12", @ANYRES32=0x0], 0x0) [ 796.013708][T12549] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 796.103772][ T4573] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 796.110726][ T4573] usb 6-1: No valid video chain found. [ 796.125671][ T4573] usb 6-1: USB disconnect, device number 104 [ 796.193773][ T4578] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 796.209365][ T4578] usb 2-1: No valid video chain found. [ 796.283924][T12035] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 796.293751][T12549] usb 3-1: Using ep0 maxpacket: 8 [ 796.314760][ T4578] usb 2-1: USB disconnect, device number 17 [ 796.423952][T12549] usb 3-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config 05:52:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 796.543794][T12549] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 796.553696][T12035] usb 5-1: Using ep0 maxpacket: 8 [ 796.579072][T12549] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 796.613775][ T145] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 796.635474][ T27] audit: type=1804 audit(1658037142.180:788): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3067551675/syzkaller.G1rkPt/613/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 796.694887][T12035] usb 5-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 796.711625][T12549] usb 3-1: Manufacturer: syz 05:52:22 executing program 1: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e705"], 0x0) [ 796.771083][T12549] usb 3-1: config 0 descriptor?? [ 796.863832][T12035] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a 05:52:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 796.921048][T12035] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 796.953864][ T145] usb 1-1: Using ep0 maxpacket: 8 05:52:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 797.063033][T12035] usb 5-1: Manufacturer: syz [ 797.093928][ T145] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 797.129738][T12035] usb 5-1: config 0 descriptor?? [ 797.273937][ T145] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 797.306364][ T145] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 797.373824][T12556] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 797.382227][ T145] usb 1-1: Manufacturer: syz [ 797.412980][ T145] usb 1-1: config 0 descriptor?? [ 797.643871][T12556] usb 2-1: Using ep0 maxpacket: 8 [ 797.773845][T12556] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.914055][T12556] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 797.959709][T12556] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 798.080106][T12556] usb 2-1: Manufacturer: syz [ 798.179476][T12556] usb 2-1: config 0 descriptor?? 05:52:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 05:52:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 798.533923][T12556] usb 2-1: Found UVC 0.00 device (0bd3:0d55) [ 798.557539][T12556] usb 2-1: No valid video chain found. [ 798.573836][T12549] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 798.593138][T12549] usb 3-1: No valid video chain found. [ 798.662945][T12556] usb 2-1: USB disconnect, device number 18 [ 798.702176][T12549] usb 3-1: USB disconnect, device number 63 [ 798.713772][T12035] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 798.748781][T12035] usb 5-1: No valid video chain found. [ 798.836974][T12035] usb 5-1: USB disconnect, device number 55 05:52:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 799.144115][ T145] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 799.157394][ T145] usb 1-1: No valid video chain found. 05:52:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 799.268656][ T145] usb 1-1: USB disconnect, device number 61 05:52:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 799.359383][ T27] audit: type=1804 audit(1658037144.900:789): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/803/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 05:52:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0xc1, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x401}}, {0x0, 0xbb, 0x0, 0x0, @tick=0x7, {0x2, 0x7}, {0x1, 0x8}, @note={0x1, 0x0, 0x3, 0x20}}, {0x0, 0x0, 0x1, 0x0, @tick, {0x0, 0x7}, {0x7, 0x3f}, @raw32={[0xc8e2, 0x0, 0x321d]}}, {0x0, 0xa6, 0x0, 0x0, @time={0x0, 0x400}, {}, {0x8}, @time=@tick=0x3f}], 0x70) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2200]}}], 0xffc8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20201, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x19, 0x7f, 0x4, 0x23, @private1={0xfc, 0x1, '\x00', 0x3}, @mcast1, 0xff98, 0x7800, 0xffffff37, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x40, 0x0, 0x10001, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x0, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x82, 0x3, 0x0, [{@multicast2, 0x7}, {@loopback, 0x3d}, {@multicast1, 0x5}, {@multicast1, 0xfff}]}]}}}}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 799.957215][ T27] audit: type=1804 audit(1658037145.480:790): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/804/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 800.129975][ T27] audit: type=1804 audit(1658037145.560:791): pid=13155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2765272540/syzkaller.FAdQMC/649/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 05:52:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 800.464736][ T27] audit: type=1800 audit(1658037146.010:792): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1182 res=0 errno=0 05:52:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0800000ffffffffffff080211000001505050505050"], 0x58}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x70}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) [ 800.698436][ T27] audit: type=1804 audit(1658037146.240:793): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2765272540/syzkaller.FAdQMC/650/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 05:52:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 800.851687][ T27] audit: type=1804 audit(1658037146.370:794): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/805/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 800.939093][ T27] audit: type=1804 audit(1658037146.480:795): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/732/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 05:52:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 801.003856][ T27] audit: type=1804 audit(1658037146.480:796): pid=13172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/568/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 [ 801.118480][ T27] audit: type=1804 audit(1658037146.620:797): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1789386244/syzkaller.3oSslL/723/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 05:52:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 05:52:26 executing program 5: syz_mount_image$jfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) [ 801.324385][ T27] audit: type=1804 audit(1658037146.870:798): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir171652471/syzkaller.eMFBbH/806/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 05:52:26 executing program 3: syz_mount_image$jfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}) 05:52:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) sendfile(r2, r1, 0x0, 0x100000002) 05:52:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x7c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void}}]}, 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendfile(r2, r1, 0x0, 0x100000002) 05:52:27 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd000009"], 0x0) [ 801.537111][ T27] audit: type=1804 audit(1658037147.080:799): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2765272540/syzkaller.FAdQMC/651/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 05:52:27 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x40, 0xa9, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x5, 0xef, 0x1, {0x22, 0xb47}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x1, 0x8}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x3, 0x40, 0x0, 0x8, 0xe2}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x39, &(0x7f0000000140)=@string={0x39, 0x3, "d0baba0c251a74fea32d94465f24fb06fa05e26f4667f1145cfb8133ed773f60bb2fe488ea8ac31ba538b9ba5d54789b174df88169b475"}}]}) [ 801.721982][ T27] audit: type=1804 audit(1658037147.260:800): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2376128777/syzkaller.Ksg5OV/569/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 05:52:27 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:52:27 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "88c2d157"}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0xc, 0x50, {0x50, 0x8, "1c3e35ab1344a7684d09acb7e931e3bf266b9b9090bd961fd7ef070d96821f48ffc7ab6699f44f752d0479eb1dcfad8b16a05334d5d0c86b3ff2a8a70a113700bb1fb58dbbabe3b1a3880a6936c7"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ee}}, &(0x7f0000000100)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x10000, 0xf0f, 0x0, [0x0, 0x3fc0, 0x30]}, @generic={0x4c, 0x10, 0x3, "9d72fc86baa56e2ca4af0278eed23620bc602ae6649fb603b51003ec8ac12df096ec0e14f4de5ab69dcd7246cf543a394446bcf9aa3959c9d81ddf3981076971b957eb95b2b03071c8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6181d97a1ba986543780533a72f6b3f6"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x4e, 0x1, "50045f34", "316de11e"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x3, 0x3f, 0x1, 0x40, 0x3ff, 0x2}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x15, 0xcf, "fbb915816f37e2e0fd65d701cba88003e46c0eb013fc1a37041f9046fcb40ec2f77ff45463dd8e44530482169dbd53a13ffa78fcd2f3dda76bca5c53d2b61226f4cef87694c9e46c3e7137cb1ce98abc105e9a5d101b3fb507c705091f8193e7c6c8566f9c6a77eefcbcaae0253464ea9b9a3c4f01c8fc630fa0af6616ec00fb3fd7492a994f7d2acadfca0b83799bd02991b56d3ce0d36922125c44c9c0c6483e69aa4ffd46d53024bcc039b612975ce0123f9ee2d3fbeba693435f4e1d979e80012a206f744e5f7ae71cdc97b7ae"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x60, 0x15, [0xf0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1000}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "a4ce"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "4517"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) [ 801.819113][ T27] audit: type=1804 audit(1658037147.350:801): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2311641339/syzkaller.tB4BB0/734/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 05:52:27 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x4, 0x81, 0x1, {0x22, 0xeeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8f, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xff, 0x1f, 0xfb}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x1, 0x80, 0x8, 0x6}, 0xe8, &(0x7f0000000100)={0x5, 0xf, 0xe8, 0x3, [@generic={0xc4, 0x10, 0x1, "5b8bee377399466fcfd4c200604533332f5b2d2faa0ca7de27190fa923f85b6d5f02df8133c6267ab7980766e8c7011a1ec9cf9192f972eaf84a83fa3aa638354f7cfa8e09359a763c1297b6227b47e7d8d81ac0e056ae7b3321e3a5e93040fceb16c9b69b151a8b62bba18d625ab68ab99fb60b5328b4bd003e23869b309ce2cf2a02c5d9202d9b5388eb055a373028b7b46703a2ea77dfd3c3feab21d04f537f590dd97cb0374b1b8284e7ba94a6531a13fe9096020d6329d142baf3d51bc6bc"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x53, 0x1, 0x7f, 0x80, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "e77bd14a828d5669386992f08e5a4c60"}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0xc0, 0x22, 0xbb, {0xbb, 0x6, "ee04ad439321384867ee5056a7d191996f3b346e745090489f1c332066862c95a265d9c7406ebceba3b0c812ead95da74ed9518ac804afe79a91e64c2310c977812757a3d65439f53ea3b8b68bb321368c6fe30cafba8d288e5a991b27138aebce3ef55f4bff743eb9e43dc2708dd20d7dc7099ba971378a7b275fe58c840461854c3c0fee6b7149e0dc369990dd7d36fd96cbb74ce32fbad6a5bdf5044d825391ffab408d37609fc6be86c81c84092fb1c579d7a6dc886f60"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f00000003c0)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x3, "d1c2b30b"}, @global=@item_4={0x3, 0x1, 0x7, "8dc8acb4"}, @main=@item_4={0x3, 0x0, 0xc, "a3c35209"}, @main=@item_4={0x3, 0x0, 0xa, "fe1f3610"}, @local=@item_012={0x1, 0x2, 0x7, "8b"}, @local=@item_012={0x1, 0x2, 0x5, "be"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xc8, 0x1, {0x22, 0x836}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0xb, 0x100, "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"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0xc0, "ea67587e0c32eb539fb4fe9173b5bcbded4a5e07efb4c71ee7e6bcc6c32dac16b17bafabef1cf56ec438aad34665b58ff9c1a1457f08a2245d6f3a0175b1adda8dfd6d62bf47c30ecb6bd8501f7930e2e36644c3e2b6393def5962ee041cad79673401e9624b844792f7ba535d1f4371747e8e79acf7ac24cc57a5fb84839a9441e49b4c95339718e1f96a817253f452fc7fd0654981bfca16008bf6c67169d9c7dc87a3e8d90a3f996d241571c27adad9330a995b0a2e7f74a49f811c201ca2"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1f}}) [ 801.954702][ T6] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 802.043880][T12549] usb 2-1: new high-speed USB device number 19 using dummy_hcd 05:52:27 executing program 5: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x3, 0x3, 0x3, 0x4}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000700)="e260909a25d1285cd95e01de0406f454b794ca67643600e21ba815f93c98fa9d4c76c59aea3f9c6db40c86c135f0a36c7c7f796fd735eefa4d7b9a06355a33ca970ca68203b8d2014ba647da4bacd681d487f995cad3f140da8e97a50e2f524502a989e23848864e107858688613d23b66d14b00eb15b17340c67d4fb6d1edda22f7c4200d789930b2be76d3d3b1b49d77c43c5935dfe56a11", 0x99}, {&(0x7f00000007c0)="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", 0xfa}, {&(0x7f00000008c0)="406c2d42b7c43d6d1568accfa1e5561cfa8ad19e608e970371dba9c62ba84a02858c3250af396fda9d2b32917088136a75c6822ca4259485eeb0fced0398f7aec0cac40ba54104708f1cbf85dbed8a5a3c10eea84be13a0ef379da8a1e0465b3fb03e1552e8488b87f945cfd45801e0e5acfef16a832b825d808fb864c13613222212d856cc0e490fd5f89b41e5c84c0e5c01c0e69f6c6caf3b2a01164f8e228d8876968e7dc82ab5151ee39fe976611d455d2ec300cc52dd79facd4be7aaaa9dd412e449af5d6081f5604019b910c86ea6a9e2dbe606dac31b589705c4a05926a02af0d2c91e3b235", 0xe9}, {&(0x7f00000009c0)="26414a0be8199a349fc109fcb6f8d99fe551157c5e43923c2cc3405390a04c327528fc9d311bb8da193998c566aa327fc1e2bfe4b49f9801f1a690418c5414f14d7ab8c35aed134523ea9f40269d174842e3c9d9e7c57c53197f478b490fbe7487334ab625949d76bf42b8c9ade8529e6b46ff8e3a363c57c3cfafcb87b3e946238065001b5139c2c92bfc22c5f9ffb313fbcc6bb80d66634720a5118aec8465ab79a2e25a0d0b", 0xa7}, {&(0x7f0000000a80)="7f5cce7e824e136c6dd7bf50241039a8bfcecb258a54c7388cc8333429b575179ad2bf278baf744bebec839acfcf776bd50f382b1afd0f634087daf3d88386c1f3f1b2c7fd0a91b020e10b3b5fe12fe2d5e0eff4c3e2f34627fe788d9fc48d9dea0b04e622e4e2937abba50c8b3145bedc3c938d658cbb86ef13c580fdee30d452fd32c01381649d11883858e5c39031a0e6eaa0", 0x94}, {&(0x7f0000000b40)="ab36c85728d18c992d16010bf4dde8884cdb10289ee868d2a028284390946e1043a70636cabe75fc616965d4c3b1e6267e1d8b2253d7553afdafcd3159b8f484c163f9180cd59ce55bd320a6307a14ee6e82ea8d4ea1e9fb39069a4df78a6f3b276542313b390b88", 0x68}], 0x6, &(0x7f0000001100)=[{0xc0, 0xff, 0x7fff, "16d2040f798e035e3c9dc7a9e8aef96ff273b7b247a5afa8582ceb87cb148a5739fdcf1a661c24d12f925a46bb72b078013090ae1734b16611709563a8087845436b52f1513b7b1b66157005a12749c9d8f5acc993900627dbd66eff85e1f587a10f493b5cf31f217b48a54f1178f9bc3d0aebb4dc3f622306662fcd55f4c597e307dd725437c1ae137124fbf2d785a424fdddd29b731163e56e3ea1cb0735fd1e7ce04b0dc09b042ad357c329c3d287"}, {0x18, 0x29, 0x8001, "4ac906eb393d"}, {0x78, 0x18a, 0x56f7, "d97ad644a51799b10ec642769c5f75ba21c78fa731ddd7a094c4d49a7a2d38643fcd5205014d08ae8f538ad067efa281fb60ba48594df74a96d8f3cf9bb1f7cb2d6fa43b2c02e02405bc3fa13e3e6631ecd329be2d07d805d75483361f941366cf38ccfc"}, {0xb0, 0x105, 0x10001, "9a5de0b353f070b4dd46d9c3c7216fd4898f87d3ec2f55c638827297c377ee1ee4cd5f689ea234af976b9e3ce10963e8a2936d673528e9e1477027131a24dff63d718747ed0ac02d774c59d7f88f3a5141525e33532f3652b8b486f9decdc65e5604aa0c6cb62e6bcbc39b0888e43130a47d97a48efdd0b5f418460719306c86a9eb00b039868648b837bf8b3be7ba1aa25ac420ab54a68b9ebe21"}, {0x1010, 0x110, 0x0, "fd3f6a3da8f35878a85453a3aa146ab75a7bc0096765fcc2bdbdcdd34f11fa0c3818c6238bb4f4363bb2546721dfd8d37ca1cea0d1d6a39ccd0bb0c0b1300735440eb5c1ea1812c2e56ee045db41aba8bb567aeed28d8ad16c8c9ed50b5f323f304e8c2e5ed23e3a04a275229701081700108964f418ded341af7332c52d4f7dd4dd4e362bf6294a0b1d9ec73dfa4bf06ab7bf07d1686d56482587b9d225c7adf19b995949a1b8c23159915d4ee21daa96133973bbb7acc84acab66da867cf39f457801b91a932c3725dcd8532da190cf29824f26cd2e444e5d7505120c63df4a076c971322331bbf570cea9af51307d8e7a4be09b3e9dfe8f1e7bc9b5cbe91c9d2b2c2fc2bcff025420c7e2e4b064aed90475675b24d3a48569ef57cd7d6b2ee11d4e48344302dbe3daee479375d20057021eb25cc969ee3c5ca87b7644fa267957cfbf30a499b91532e52b96f6d61fcef51d7b0461b47238a090a8d4827388805bea3fc26d07b709d1cb6c2710618048dedde0b82f3a2edd859dd6dddf5b560f4ba66157c3b390cb0ddde2d70059515df9e30b75cd3568b13d0971f0fb2852c9708e138b08880269aef4c086cf24db00147191f2f0e3d45ecdf3ef3d02350d1a4af07f4c7f7fcd371e5445f57c54ff8fbb8f028d296daab190429ae59a79bb41a22f8f91a9b4eda7cd79e4bf88fb65dd81be3a98463d559bebae4031f63f3b3dbcf2973a73372c38e160cd27e91e1853efe4e0b5bc9bccc9b277cc8cf11d1bdc44cf380264adb7d5b50e6cef720c69ff9612668e3b5c33486983d94843af58879fba5672e80450a857ff024097ef4fcd04f58ee1605d467094312751a303d35f3833c56e5cd95dc68b443bbc3f3ace04416552a5bf30c574d6a41b7d221d99980e016994ad6576e031edbfb5b6b2d7f8ddec7738fb60819c7bcd8e12df369d6013bace24878f1ad79283e4b39ba4e3a8445e61a115d9f58e0784ff20b80f54298d42d064302be876d3f08af14619361ea3aee5972a52c07caa51197244f929dcdef1bbf9b77379c74f588095308be37300a900f8fefffd132f874c098735ed0177da07dc51096eae2d48fc224ea1d54e762fad4fe63b81f7ee4f0835f7221370d30b758ae87f0d2a9638a9a7a5fe0fb300363c0be7a8928e26072e332c67addfc9084589c0f752a41713322b79c03ed2d37f56940fe6946f2420b5ce29b38d7af933b84be062b167387616d8b651dcd7d4a08fea42015ec6b5e311b9286e1bec52899a96a79b139f631e37915023749bb7c15e32fd9ba2d289ad6403b0dc2b2ec89d1c1cd2b475b381a66485e9fe04937d8ebe2fd9f9c8bb683a58672724243f938321cea8cce3c65a73ab1081385732076dfbff9e5f086e14a9ce6a4c9d2881c50506a84bbb1dce5a8c281acb965722c0ea66882e2025b6d1c1487cbe83545402143408800168ac07ef0d1c2e6235017308cdf8c025673ba21c86fe585cbb203ff67c2dceb3739f4b3344848af6b2ceffd6999ff792319e6d311d44206140b2e390c8e5c0d54f60080ac6b62e92442e9e03a18cc616933d525744296bb5fefac46bb9c9cc3c1f75d0f1489fed42067d5fd9e875e6ac2b63df040308f5d12e21a70da3f398f9d614d422d284c5926db2ffb918d6f3dbe47d223c677b40a8aa14560d3347364e43f9d28bedfbf2ffa93024567e7c79192509e4a9f80889bc5d3dc643fd1b0936c053ffa3f797a1f52965a5e628e1ff6e41ba6b75f1ce2e1ad166347001a864143f3a5bd35e841c2395066d3d3e0108cc57999ce89f085069f66adc8e0eee1849f7b739b674e420a12b98b263b549e2758f7030070fc62b828cc344436dfd23a89b3a2c2c0ecc188e7a5fcf248ea7808f301ef165a5897eb3d390bfbbcf5112715a81f6edc74ecf04d5415be388c6e5bde87fe855144dec1c93bc09a6e0f29535c5c0864f7a92ca4103752a72baa0054d330dc4d8273fc201b2da88d563d1f5f4d7c29c88aba90705852f58e4198b9c2a88fc1b0355ffeb727136bb4442d9cd457ffb905568e13c7e7a7e94aca2422ecabd681a875a17af807aa363dca25ede2a805d80fb81ae59659432de562d3f1c67fc7637115c2005bde27bef3f7cd07d120da4d8a20641f1a2b6882793a3ff4307e7c9e7c0d60f6048525da3895910b67e80d840006e880755fc74f99abee7e8e0045ff2911d9c0845e1bf1bd4325e16c53ce9e4dc1891ff83b493303f430b5c2b17b0e4fa965a6a41103f64d6ccd9629d5d8aab1a7f711fd5d5937a2643fd7138272c423f6a85d12358d75590ec08c84e69f06ff67142b0211e06c4d69ea017fc7167dd0d4ed3ee8661436ba69f885379ed7f41095db23674d0b2b022745b63269344f3bacccc0a48b768bf20cad960eb8b9107e2b9849130a1103a5cd009ef6082d253d47fd4963a793fe94e756e7e4d408e5962264859b6fdd97c4c51890b0a8e5f628304768088873b408149c539f37cd098099622b27270e13507156fac618f2fe1401e47e99cb70c955adada4d8700b955d5bbc90e0a7977b42206d229db8865813808f7456492c3b7f6b5c71da8340302ea29bf9131aa86a544b531cc587fa75fd5aa46abd0e9e80431e7a71f9c657383437eb37eff477d7da2d7d5a6ba37f9734a22d0da1540b22288145b4668ef61e2b7238a26fdbb0b3b0bd9ce7e57be9af87fbd9dc43ce5624a31d4c249b3379d93ebda666269e53067f94e1f178397dee4e792dc650904906d807387ccbea88a32ba089bd0e089124c47e7af96496b74e61b30a6a125ecaab61a4f663eb4210921ce67491599b0a3b1a3ee7bbbb25b056781a2e8490b9085aee01e467de2cc2ae80e2c0b7b06b7df20590ce5f0c2ef98d3ee08829424a82b2578e0e3b42c5d20854a215ac6641a4bb8379d09a40bef1b41afec6b4988addd535680e4fdaa39086003e7625dd9977119e536d22f191e6b145e0a2f7c73ad9ac522153344d9fc584a66169ce96259117ba8312baf07664d335a52defcd15ceb07d6b28e54279277fae1d32925d68a394de170fc3c4bc8e2f200532ccf08bcd7df6e69f093ba41a2761010bc2079d015a18d3d31ee60641c972a4544a772a9490634d3b1bd750d42f96458b1b23b9d7eb6b07ee4bff4eaeac99c3fd9bf29b8dfa33850affd0039da6a585de0c8bf2cb18155bb6763b01bfe176fa256d076dc1b4a512c41f4a9329c0ec433d85c1abd41a7223c826d1126c0e4b5da3753336f76ffea326dd17c53f77a8d739ab23634e387f681d04337feb1f4041eb7953fa403992ea51c57e599497d67f8452146622a2aa5df8cef8b0a9b8b657967eae415d7f262ab6fc5abe9b774aa80bda1ed55e2a1da92c194d409de9868ad0038a06fee6b56827eb3b0c0bb22ee2461e97648110d0da9dc6adc8c14af02d8198eb89a412f02a88da4704ecacc1cbfe55e7a8e621c95a036481361a0782157bc8d0961d54789355dce53d3e85f15dec443eff026ecde0a7a6bf46f818d1b3433c7f2eebf07cb0cc54caf55cda2ec2666d77b34f3ea7c07ce06bc9b315927f5221dad2176e35517041a9a4dafe9f1d604bfb5a74415997144c58b881683a1a199e161aa2bc11aa90840159b587aed50ab17dd46bbbee69ac9b63df03a12aa3314bf9fe0ebfdd65cc08464411f7f5c4e335145e356a788aa61cfb3ea00cb20504150b2cc100b48ec5d6ebcb6f2a9b871f56ea2c33530ff489c31b543bda67d2c15e14a187a5b82bd46edf1f48e28bac2736552ec272509602789a3cb016a0e596ee996539b678ef2a686a3e4ed17976536f22629b32766d5d8a7c3dc6329d74b3c590c14538531c8e410456bac078ebd401ee61add7d78b5e46434a10642b2f4db95a0daf8fd9f6d5ea1fd6c696261455a0a512b3ba077c74910159148cdf519f66e94521362546d9a88485f114269e4159beec2c304218705657fb7e4da2f357d7769ffae78e84a2fb9d3ce817adc5353d57ee061dc40ff68fc2b0064f5bac710d4cfbce9f40e9698c9ef175b92708bfbd4eb516240b83ebf709f63588f22b21eaa2d602ea8d3c99e0b014ff8c5fff8ad5b0ef3743347ca596e957c9aa884efc529dd18c320636c1a1985acbe4a1a17df4b162da071dc52017eeba3e993477158b309568656cb25b70c23ec496963537bb54cc17d41471ae231913f705291ff4f1a08fe1c15d2d59a84917b510eaa95ed29aeefb62e17f35cb919230414b48ff6e18dd5863400f7689525efc3f56713dd51ddb1e706a67cd73a2d121c6c3b7ad412a4935b3e49056cba5fdf5e648cda7771fdf66fa9028ab5aeeae9d7339925721ffdc3094d397e5559396716fab8f3796c6890eb8c8262b52428545b9daf0f1a45c33ee72ce8054b1752f8a2511b219e8b08c3a766fbdc9d54652171838892a9a8f56234b857bd585abd4f4c49652772d3517276c719178e2a9418d3996699da0e0639b58fdc500a6f09eef688f82f07a26f98d7aaba2c225709bfbe697d2fd67f2c012b77cd9dd766c00b2246e17bc29d9660fd0e002df56af623b869b9a4a42d825cccc52da4899ee784e829c3876df2de3e2e1b5e6f074fc84e21ce3bc0763842294a39eb5ee04eaea84cbed728f548ceb5fa8f9527810b60275ad24fd5fd74a4791976f84c027b1f1a29b3d1716dfb3c57bac11321ac3096c20936afc9338386507ca071e79bfa1996f065f0da445939da4182021ee389fa3faac9ee94881a47608d8bfae104b39091b6bce309196c71fedf5ff4321560a99ac5976b128f32de1c25fcd39665e5b37664db689d2d976ab967553f5c23d811a2297c7fe39edbd300ea5e1249d161f81593b0edb96e59ee6715f58e454c366f6ee3b04f0903d75f588de54052f6126f65522ef47903c2d08f41e4b58d0e77ca189b45f8ff25f0fec508d1d89f38f6baefe8b7626700b320f68f138f87131f1a822c6d1989b04a0ba25e928878888cfb86983be51a0c8d66e29a268ceddcccf1973c93302fdcfe9f540bc6b54c33a4f8a991bd26ca8a493621ba6090da7d94ba906dbbb2218c75f9586d8d97ada63dabe7d0b4cb9cf3e1723d7e9393cea0b41e1eaba5f5e6bbd22ec00f41796bb30879be3511dccce566cc2e663307d11b31c5acfdf237b81bbe00cd3d286461ec744008fe5271e2848c294dc52887894450cf8aaafd01dabc2a5a7406a0d494b55c3f289ce26ff950066bbe8c6dc1c76df9b554b342bf07fe3297d693fefbda5d9e2e11c0ffd2ed940b9b07be88c2dda75b34e0e9dac09d21f925054798a10ee8ccc61662006c6bd37763748c22e966c9cc0e8e894e503c7507edd6866c639af61c0d100b259c212b1fe2e24c19beabcf924cbaef166abc99388f915968c463549cd814dd1d0ef3cd725f9d630cf3aab72ac7b0134b62cbf70da502e7e8051a786518a3b931421f136ab32874cbfd9ffd6e8bcdb60c7442d4350bbc766af1741d4f5d6adc82ceea2f8a87294fa468fa761430d49084e7d9418adfe5a45f7f0a4c3b4cef5fcf64a4b35815bb8e504a119182374a3ead1ca5660bdda5ed370f22845ee7bff09ad74533f6059cf708bfb71eb09ce9f18b76f8139767f94a864fc57bfd8b6c11974bd974703176358830103b0738f4a82c1261207227c003921f27c35ad298bb5178ed348cb28c5b86f5c4e6f96ef093e2e30a47a6774ed39f6bbac8c2e2a13e7608bf96646e02cc14b1b0d0658bf1c15a2e9ff88b7870c88d6bb4bd3ff79fe9e48f6d7f6ac7d0750ef6d2da1eb5735ad61d34e3cb3867"}], 0x1210}, 0x80) r1 = syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e0100000824030001fd0000092403e70580"], 0x0) r2 = syz_mount_image$udf(&(0x7f0000003280), &(0x7f00000032c0)='./file0\x00', 0x7fffffffffffffff, 0x4, &(0x7f0000003400)=[{&(0x7f0000003300)="bae98a36b8af253d5d2fe6244b4ca771cba729a87cef904e61e5d5578719009937acef54f7f7bee06b2f5f8d625c248586657208cece", 0x36, 0x7}, {&(0x7f0000003340)="25a5d9e14399b32441ca7d242ab7675e1078087c5525fe", 0x17, 0x7f}, {&(0x7f0000003380)="5fb2472dfe5f629fb20542e9ade45db56ca376dd6e8024f9ab6c62bac7e7", 0x1e, 0x1c00000}, {&(0x7f00000033c0)="31df986431bb8c7570bafef5baea", 0xe, 0x800000}], 0x8000, &(0x7f0000003480)={[{}, {@rootdir={'rootdir', 0x3d, 0x9}}, {@lastblock={'lastblock', 0x3d, 0x8}}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@gid_ignore}, {@gid_forget}], [{@hash}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'bridge0\x00'}}, {@seclabel}, {@seclabel}, {@euid_eq}, {@fowner_gt={'fowner>', 0xee00}}]}) faccessat2(r2, &(0x7f0000003580)='./file0\x00', 0xc, 0x200) syz_usb_control_io(r1, &(0x7f0000002780)={0x2c, &(0x7f0000000180)={0x20, 0x5, 0xb2, {0xb2, 0xd, "ff90b83c8bfbf398743489ccc1b124963febcaa31e4d54eb55c15bf37b2fb1b15f22345c52288896773ab20c7ed881221ccaf4ecc58af9a85a85976aa6e8b033a3b1c08aa5eb46774f4a4966d3c41aaf986efaa394cc61b3cf8a452cb19fab990ca3ee572f8878d59a1f003ed0239c7c249e0f1cddc5b9b351d534d711d758864e913a6f0b06b91aaa7f8cec20e345c8e36bf6be414a94a399f56ffaae375aff84f29c94df1d7aef5297414937f91822"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f00000004c0)={0x0, 0xf, 0x48, {0x5, 0xf, 0x48, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0xee8, 0xff00, 0x7ff, [0xf0, 0xff003f, 0x101fff0, 0x0, 0xff0f, 0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0x6, 0x1, 0xfff, 0x6a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3f, 0x44, 0xd8c2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x6, 0x1}]}}, &(0x7f0000002700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x28, 0x0, 0x20, 0x5, "55930027", "39ed24d5"}}, &(0x7f0000002740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x7f, 0x20, 0x80, 0x7f, 0x278}}}, &(0x7f0000002c00)={0x84, &(0x7f00000027c0)={0x40, 0x14, 0x53, "16bd447d68bd68fcf3746f0fcd44639228d82ce98368b76786d35662a3b518c058c9d6d5d1e73c332bac246fac5e7b695b487357aa912d9115da0c5b5969f185517f33c02d138f4a23ba1f4ac5727463fabb2d"}, &(0x7f0000002840)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002880)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000028c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000002900)={0x20, 0x0, 0x4, {0x200, 0x40}}, &(0x7f0000002940)={0x40, 0x7, 0x2, 0xc183}, &(0x7f0000002980)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000029c0)={0x40, 0xb, 0x2, "ae3c"}, &(0x7f0000002a00)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000002a40)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002a80)={0x40, 0x17, 0x6}, &(0x7f0000002ac0)={0x40, 0x19, 0x2, "9fc8"}, &(0x7f0000002b00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000002b40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000002b80)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000002bc0)={0x40, 0x21, 0x1, 0x2}}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "88c2d157"}) syz_usb_control_io(r3, &(0x7f0000000e00)={0x2c, &(0x7f0000000c80)={0x20, 0x31, 0x31, {0x31, 0x22, "52959c7da9a262670ad7be463686cf160717b04a521c76fe3cd9020cc8d254c4190ba687ca88b5215a3d2b1ebd50a9"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "69bf01db2d5c2aa3fe266904f1446182562dbc23528f57059b8bfbdcf3d6c844d821a8b3b20566449299ef48bfb51960a93c9a76cc970c1b462c7968d8bdc273746dc45027125c7e77590c89704b6aa1db125a1d2faab285050f8d28fa6449e06762602296d38dfecc0ee142201acaaffddcf2d34e890152"}}, &(0x7f0000000d40)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x20, 0xdf, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x57, 0x477}]}}, &(0x7f0000000d80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd0, 0x1, 0x80, 0x1f, "c4be11a3", "b87d5800"}}, &(0x7f0000000dc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0x6, 0x80, 0x7d, 0x7, 0x20}}}, &(0x7f0000002540)={0x84, &(0x7f0000000e40)={0x40, 0x35, 0x70, "0fcabd49f05fcfe6f6ce1e0b1c557500667bd4ecba1622f6015412b2329e058dd207e7e52e18227060148c7c82d2d37cfeabf8dea2c263dfc9e05ed908d0e461b58a10aeadc04c2221ea971222fde1988921473249319861d62be5a86d5379a7ea05e6e9f49306a4674f85a9ddc9507c"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x4, 0x20, [0xf0f]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0xe49}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001040)={0x40, 0xb, 0x2, "3cb4"}, &(0x7f0000002340)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000002380)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000023c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002400)={0x40, 0x19, 0x2, "8e39"}, &(0x7f0000002440)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002480)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000024c0)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000002500)={0x40, 0x21, 0x1, 0x6}}) syz_usb_connect$uac1(0x1, 0xe7, &(0x7f0000002600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x6, 0x10, 0xe0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x9}, [@extension_unit={0xd, 0x24, 0x8, 0x4, 0x2, 0x4, "1667af2cb63a"}, @selector_unit={0xb, 0x24, 0x5, 0x7f, 0xc5, "8e7fb9b58792"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x65735966ebff530f, 0x1, 0xdc, 0x5, 0x81, 0x7}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x3, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x101, 0x6, 0x7, "4a69e84a"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x80, 0x2, 0x0, 0x6, 'JP'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x73, 0x4, 0x40, 0x5, "91", 'q\x00'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x81, 0x3, {0x7, 0x25, 0x1, 0x80, 0x8, 0x1fe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3ff, 0xfbff, 0x1, "180e577e"}, @as_header={0x7, 0x24, 0x1, 0xf8, 0x65, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xda, 0x4, 0x3, 0x20, "dc54", "8e9e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x5, 0x5, {0x7, 0x25, 0x1, 0x0, 0x40, 0x400}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x23, 0x40, 0x8, 0x10, 0x80}, 0x140, &(0x7f00000002c0)={0x5, 0xf, 0x140, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x8c}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3201cbc8d34a5c6553917ba7e604f958"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "546c4417cd61a2115f0c7112318c5c67"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x4, 0x1}, @generic={0xff, 0x10, 0xa, "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"}]}, 0x6, [{0xe, &(0x7f0000000400)=@string={0xe, 0x3, "f5cf80484283a4253e459ecd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}, {0x10, &(0x7f0000000540)=@string={0x10, 0x3, "d2981b9436bda6510e66e85a6c64"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x407}}]}) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "88c2d157"}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000002e40)={0x14, &(0x7f0000002cc0)={0x0, 0x11, 0xa0, {0xa0, 0xa, "243522db4aada6af458f1adcc8d75c25c95275d8f73a2afcaee6f655c316500b5d2f1f9171a4df62cb3044a07c8cae765d54bedbf1312af0dbdc08a371853e39c8b4b7ecdf70433953c7c64174d61d641281ceaa872143ba88d1f6aec2381f24f92e1bf588130b11f3f82f3a08dd6a3cc96ad536a6826de6a8a660244200a558c6eb848fa0f0551f9d4c66bb2df14ffb3367b70cb1ed20bc4adcef19a173"}}, &(0x7f0000002d80)={0x0, 0x3, 0x92, @string={0x92, 0x3, "2d91dcbe1507a42f3a03035194ccd14191ccaff9b444663b34674e058a7f71af537c0e4897c98486572afda99ea6a4f1b3132f231fb0c06579402588ba5322464991a9df457e51b74cf20f55e7a2e87dd126ee3a42c884d5692aa4fd37f12d18e1244ed6ddfc8b60db969c94fc0fee64df52bd48cc4015cd9b3f0dc36b9a7f5297a5371c16959bd0e80939a8e6367a94"}}}, &(0x7f0000003140)={0x44, &(0x7f0000002e80)={0x40, 0x16, 0xdf, "01b2e8be03abc96e29c901dddc3ac62e92c0936ed34d6b3eb0969a2ea3eb6815da66876c3fa4b2afc08afdcab5959c3620f5595bc8598fd175f9bd86d1fd1742f3e02719b30e40d5e29c1bcf330f4509eaeec4b07823590c862320bd1dd1a767bc8c318ee182d55df0758914884dd1790eb2f3db853c6deca61c7f3c965c6d421a1e517451fac288ff68205b7e2cc07aed792dddfa736dfb175cf7b48ae50f32fb1790dd5c68e0db77456f040ad6fd79966118f3b9bd02d6ee25af43dc6a92905e213893eff89ff779383b27d7e401b24958f053712f1e5d6aabc80eadfc68"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000002fc0)={0x0, 0x8, 0x1}, &(0x7f0000003000)={0x20, 0x81, 0x1, 'B'}, &(0x7f0000003040)={0x20, 0x82, 0x1, "86"}, &(0x7f0000003080)={0x20, 0x83, 0x2, "dbfd"}, &(0x7f00000030c0)=ANY=[@ANYBLOB="208402000000bbb2"], &(0x7f0000003100)={0x20, 0x85, 0x3, "36d531"}}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000031c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000003240)=@ready={0x0, 0x0, 0x8, "3f7ea669", {0x1, 0x2, 0x80, 0x4, 0x4}}) syz_usb_disconnect(r4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r6) [ 802.193691][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 802.213784][ T145] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 802.221488][ T3676] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 802.253829][ T9592] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 802.314000][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.393740][T12035] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 802.403886][ T6] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 802.413394][ T6] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 802.427766][ T6] usb 4-1: Manufacturer: syz [ 802.435888][ T6] usb 4-1: config 0 descriptor?? [ 802.443806][T12549] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 802.452741][T12549] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 802.463275][T12549] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.494067][ T145] usb 3-1: Using ep0 maxpacket: 8 [ 802.499205][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 802.526020][T12549] usb 2-1: language id specifier not provided by device, defaulting to English [ 802.535307][ T9592] usb 1-1: Using ep0 maxpacket: 8 [ 802.633779][T12035] usb 6-1: Using ep0 maxpacket: 8 [ 802.634107][ T3676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.649091][ T145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.704089][ T9592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.714489][ T6] usb 4-1: Found UVC 0.00 device (0bd3:0d55) [ 802.714558][ T6] usb 4-1: No valid video chain found. [ 802.717241][ T6] usb 4-1: USB disconnect, device number 18 [ 802.721861][T12549] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.752836][T12549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.761481][T12549] usb 2-1: Product: syz [ 802.763959][T12035] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.773316][T12549] usb 2-1: SerialNumber: syz [ 802.785807][ T145] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 802.798216][ T3676] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 802.808115][ T3676] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 802.817065][ T145] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 802.827196][ T3676] usb 5-1: Manufacturer: syz [ 802.831941][ T145] usb 3-1: Manufacturer: syz [ 802.839843][ T145] usb 3-1: config 0 descriptor?? [ 802.848192][ T9592] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 802.859974][ T3676] usb 5-1: config 0 descriptor?? [ 802.865050][ T9592] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 802.873474][ T9592] usb 1-1: Manufacturer: syz [ 802.873921][T12035] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 802.880082][ T9592] usb 1-1: config 0 descriptor?? [ 802.898586][T12035] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 802.907313][T12035] usb 6-1: Manufacturer: syz [ 802.918483][T12035] usb 6-1: config 0 descriptor?? [ 803.118988][T13205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.130733][T13205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.142148][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.151727][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.153892][ T145] usb 3-1: Found UVC 0.00 device (0bd3:0d55) [ 803.165440][T13210] loop5: detected capacity change from 0 to 264192 [ 803.166756][T12549] usb 2-1: 0:2 : does not exist [ 803.181118][T13210] UDF-fs: bad mount option "rootdir=00000000000000000009" or missing value [ 803.182951][ T145] usb 3-1: Failed to create links for entity 231 [ 803.198742][ T9592] usb 1-1: Found UVC 0.00 device (0bd3:0d55) [ 803.206935][ T3676] usb 5-1: Found UVC 0.00 device (0bd3:0d55) [ 803.219449][ T3676] usb 5-1: Failed to create links for entity 231 [ 803.238508][ T9592] usb 1-1: Failed to create links for entity 231 [ 803.249566][T12549] usb 2-1: USB disconnect, device number 19 [ 803.255584][ T3676] usb 5-1: Failed to register entities (-22). [ 803.262034][ T9592] usb 1-1: Failed to register entities (-22). 05:52:28 executing program 3: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009218006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000800)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000000)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "a0e06461d36c6b3c2dabbde288c73103e06108fc0eb7818a69f845"}}, &(0x7f00000008c0)={0x0, 0xf, 0xc6, {0x5, 0xf, 0xc6, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ssp_cap={0xc}, @generic={0xa8, 0x10, 0x2, "57f77423cca207f62c3543c67a168be402568fe8bb8ce8e1859149f24fcf07b01157823bb56077a54a558abd201e7b8f43483ce77b63cc8b9e9b4efac86ae6395fffcf17c25209b7e5fb10d76025e93e58d6edc6e83d59200ab7216881377a00e92479fb1477c7a651fdf19ac1fed72ba238527955671ca70c4514e26abdf6d008e2367ae135f3094b78b5c483e2a3741532f58c4d5c709f6b08908d4e29397872c4b5912d"}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x1, 0x2, "0400", "2ec87d27"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x10, 0x0, 0x0, 0x1f, 0x9, 0x3}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000000820000"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x6}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x200, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7d2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000480)={0x40, 0xb, 0x2, "caca"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xc8f}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f0000000580)={0x40, 0x19, 0x2, 'k\x00'}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x0, 0x0, 0xef, {0xef, 0xe, "d97842ad887f2bacdc85a2323bc9046a1f70c9db260dfc1834453891b59923037d1e1d52104e84dfd35a175f26e8bccee5ef648938b1ac95535bf5015698d191ba3eac99a8f846762c779f24c7ba8f28ba563442eb14fb1de100ad313e6e90de3665ae0e9748b6e328f8449a179b0cd2d17846859c7a119de2948a8517fbd4ad856c761489bef460972a57eb61dbde933ff19b96ebdbbd0e396ef96162a0f1b2852ce8769bb7d3cfc9955ae04d305043b1856253051496048aadc1ff15115ad111eae422232e42accd0ba56359eade9aec4d86fc2efdd36bf6d1b72a59f1fc38f8a6442e01af74d378a8675b9b"}}, &(0x7f0000000000)={0x0, 0x3, 0x15, @string={0x15, 0x3, "03f201eb8120a8281dec3c9f32f50f30bfe99f"}}, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x80, 0x1, {0x22, 0x2ff}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0xc, 0xfe, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7a}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x1, 0x2, "efd3"}, &(0x7f0000000440)={0x20, 0x3, 0x1}}) [ 803.274348][ T145] usb 3-1: Failed to register entities (-22). [ 803.283900][T12035] usb 6-1: Found UVC 0.00 device (0bd3:0d55) [ 803.287390][ T3676] usb 5-1: USB disconnect, device number 56 [ 803.305993][T12035] ------------[ cut here ]------------ [ 803.310328][ T9592] usb 1-1: USB disconnect, device number 62 [ 803.334935][T10591] udevd[10591]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.346528][T12035] WARNING: CPU: 0 PID: 12035 at drivers/media/mc/mc-entity.c:663 media_create_pad_link+0x4de/0x650 [ 803.359296][ T145] usb 3-1: USB disconnect, device number 64 [ 803.399218][T12035] Modules linked in: [ 803.428625][T12035] CPU: 0 PID: 12035 Comm: kworker/0:1 Not tainted 5.19.0-rc6-syzkaller-00378-gc658cabbfd32 #0 [ 803.461674][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 803.473712][T12035] Workqueue: usb_hub_wq hub_event [ 803.480152][T12035] RIP: 0010:media_create_pad_link+0x4de/0x650 [ 803.487196][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.488001][T12035] Code: 78 b9 6d fb 44 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 61 b9 6d fb 0f 0b 41 bc ea ff ff ff eb da e8 52 b9 6d fb <0f> 0b 41 bc ea ff ff ff eb cb e8 43 b9 6d fb 0f 0b 41 bc ea ff ff [ 803.516080][T12035] RSP: 0018:ffffc90003eb6ee0 EFLAGS: 00010246 [ 803.526094][T12035] RAX: 0000000000040000 RBX: ffff88801c2fa880 RCX: ffffc90013aaf000 [ 803.536718][T12035] RDX: 0000000000040000 RSI: ffffffff860be31e RDI: 0000000000000002 [ 803.542569][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.545046][T12035] RBP: ffff8880247a8080 R08: 0000000000000002 R09: 0000000000000000 [ 803.561457][T12035] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 803.566162][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.572189][T12035] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880247a8080 [ 803.586577][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.586892][T12035] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 803.598961][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.603565][T12035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.618802][T12035] CR2: 00007fdbbc7d5306 CR3: 0000000074e13000 CR4: 00000000003506f0 05:52:29 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) (async) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) [ 803.627393][T12035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 803.636889][T12035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.645257][T12035] Call Trace: [ 803.646805][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.648835][T12035] [ 803.656541][T13040] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 803.659527][T12035] uvc_mc_register_entities+0x5cd/0x910 05:52:29 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) 05:52:29 executing program 0: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc51b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xf0, 0x0, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x4, 0x81, 0x1, {0x22, 0xeeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8f, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xff, 0x1f, 0xfb}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x1, 0x80, 0x8, 0x6}, 0xe8, &(0x7f0000000100)={0x5, 0xf, 0xe8, 0x3, [@generic={0xc4, 0x10, 0x1, "5b8bee377399466fcfd4c200604533332f5b2d2faa0ca7de27190fa923f85b6d5f02df8133c6267ab7980766e8c7011a1ec9cf9192f972eaf84a83fa3aa638354f7cfa8e09359a763c1297b6227b47e7d8d81ac0e056ae7b3321e3a5e93040fceb16c9b69b151a8b62bba18d625ab68ab99fb60b5328b4bd003e23869b309ce2cf2a02c5d9202d9b5388eb055a373028b7b46703a2ea77dfd3c3feab21d04f537f590dd97cb0374b1b8284e7ba94a6531a13fe9096020d6329d142baf3d51bc6bc"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x53, 0x1, 0x7f, 0x80, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "e77bd14a828d5669386992f08e5a4c60"}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0xc0, 0x22, 0xbb, {0xbb, 0x6, "ee04ad439321384867ee5056a7d191996f3b346e745090489f1c332066862c95a265d9c7406ebceba3b0c812ead95da74ed9518ac804afe79a91e64c2310c977812757a3d65439f53ea3b8b68bb321368c6fe30cafba8d288e5a991b27138aebce3ef55f4bff743eb9e43dc2708dd20d7dc7099ba971378a7b275fe58c840461854c3c0fee6b7149e0dc369990dd7d36fd96cbb74ce32fbad6a5bdf5044d825391ffab408d37609fc6be86c81c84092fb1c579d7a6dc886f60"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f00000003c0)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x3, "d1c2b30b"}, @global=@item_4={0x3, 0x1, 0x7, "8dc8acb4"}, @main=@item_4={0x3, 0x0, 0xc, "a3c35209"}, @main=@item_4={0x3, 0x0, 0xa, "fe1f3610"}, @local=@item_012={0x1, 0x2, 0x7, "8b"}, @local=@item_012={0x1, 0x2, 0x5, "be"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xc8, 0x1, {0x22, 0x836}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x40, 0xb, 0x100, "22c901d2517690857ad7738fd587120cf4db5f84aa4866edcd5d1eb816dc931b3065579fe1779ace172162569a502712d64336ed24497c334150bf80744d22524171d55ad7d37885196b20d8dce1c04ba520f6b7f0d439713353b0f0b679a0861a81a87de500c6380b83094ee2133e673bdbedb0fc75f91558140ac1cbc9adf4d74ce04dca41a2976ca16b3220d28d35cb33624b5b19d0fa513e5aae6e571192ab355b1a79b6d2b128037567311ea120cf31d72382938c25cb0c04c2cfffc7116f089af6360bf1f4b2730a166c69f0242d11869ce4b359c846aae7e522bb75f8c26208d6151334b41d06c0be4c35f2a1b83914ffd3519600ada6f8819f56d654"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0xc0, "ea67587e0c32eb539fb4fe9173b5bcbded4a5e07efb4c71ee7e6bcc6c32dac16b17bafabef1cf56ec438aad34665b58ff9c1a1457f08a2245d6f3a0175b1adda8dfd6d62bf47c30ecb6bd8501f7930e2e36644c3e2b6393def5962ee041cad79673401e9624b844792f7ba535d1f4371747e8e79acf7ac24cc57a5fb84839a9441e49b4c95339718e1f96a817253f452fc7fd0654981bfca16008bf6c67169d9c7dc87a3e8d90a3f996d241571c27adad9330a995b0a2e7f74a49f811c201ca2"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1f}}) 05:52:29 executing program 4: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036ee3808d30b550d6a694000000109024600010000000009040000000e010000082403ff01fd0000092403e70580"], 0x0) (async, rerun: 64) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "88c2d157"}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0xc, 0x50, {0x50, 0x8, "1c3e35ab1344a7684d09acb7e931e3bf266b9b9090bd961fd7ef070d96821f48ffc7ab6699f44f752d0479eb1dcfad8b16a05334d5d0c86b3ff2a8a70a113700bb1fb58dbbabe3b1a3880a6936c7"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ee}}, &(0x7f0000000100)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x10000, 0xf0f, 0x0, [0x0, 0x3fc0, 0x30]}, @generic={0x4c, 0x10, 0x3, "9d72fc86baa56e2ca4af0278eed23620bc602ae6649fb603b51003ec8ac12df096ec0e14f4de5ab69dcd7246cf543a394446bcf9aa3959c9d81ddf3981076971b957eb95b2b03071c8"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6181d97a1ba986543780533a72f6b3f6"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x4e, 0x1, "50045f34", "316de11e"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x3, 0x3f, 0x1, 0x40, 0x3ff, 0x2}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x15, 0xcf, "fbb915816f37e2e0fd65d701cba88003e46c0eb013fc1a37041f9046fcb40ec2f77ff45463dd8e44530482169dbd53a13ffa78fcd2f3dda76bca5c53d2b61226f4cef87694c9e46c3e7137cb1ce98abc105e9a5d101b3fb507c705091f8193e7c6c8566f9c6a77eefcbcaae0253464ea9b9a3c4f01c8fc630fa0af6616ec00fb3fd7492a994f7d2acadfca0b83799bd02991b56d3ce0d36922125c44c9c0c6483e69aa4ffd46d53024bcc039b612975ce0123f9ee2d3fbeba693435f4e1d979e80012a206f744e5f7ae71cdc97b7ae"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xb8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x60, 0x15, [0xf0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1000}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "a4ce"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "4517"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x81}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x1f}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7}}) [ 803.719438][T12035] uvc_probe.cold+0x15c6/0x2153 [ 803.722878][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.736380][T12035] ? lock_chain_count+0x20/0x20 [ 803.753334][T12035] ? find_held_lock+0x2d/0x110 [ 803.770404][T12035] usb_probe_interface+0x315/0x7f0 [ 803.774406][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.780446][T12035] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 803.821289][T12035] really_probe+0x23e/0xb90 [ 803.823474][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.827942][T12035] __driver_probe_device+0x338/0x4d0 [ 803.854109][T12035] ? usb_match_id.part.0+0x15d/0x1b0 [ 803.862452][T12035] driver_probe_device+0x4c/0x1a0 [ 803.871541][T12035] __device_attach_driver+0x20b/0x2f0 [ 803.875203][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.879295][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.904242][T12035] ? driver_allows_async_probing+0x170/0x170 [ 803.910932][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.919383][T12035] bus_for_each_drv+0x15f/0x1e0 [ 803.933323][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.933576][T12035] ? bus_for_each_dev+0x1d0/0x1d0 [ 803.948405][T12035] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 803.949129][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.955150][T12035] ? lockdep_hardirqs_on+0x79/0x100 [ 803.970776][T12035] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 803.973739][T13040] usb 4-1: Using ep0 maxpacket: 8 [ 803.977464][T12035] __device_attach+0x1e4/0x530 [ 803.988168][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.988224][T12035] ? device_driver_attach+0x210/0x210 [ 804.002945][T12035] ? kobject_uevent_env+0x2ac/0x1660 [ 804.004394][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.009070][T12035] bus_probe_device+0x1e4/0x290 [ 804.021572][T12035] device_add+0xbda/0x1ea0 [ 804.027765][T12035] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 804.034731][T12035] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 804.038306][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.040911][T12035] usb_set_configuration+0x101e/0x1900 [ 804.056585][T12035] usb_generic_driver_probe+0xba/0x100 [ 804.064305][T12035] usb_probe_device+0xd9/0x2c0 [ 804.069623][T12035] ? usb_driver_release_interface+0x180/0x180 [ 804.077062][T12035] really_probe+0x23e/0xb90 [ 804.082390][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.082447][T12035] __driver_probe_device+0x338/0x4d0 [ 804.098968][T12035] driver_probe_device+0x4c/0x1a0 [ 804.104003][T12549] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 804.111038][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.117014][T12035] __device_attach_driver+0x20b/0x2f0 [ 804.124847][T13040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.130648][T12035] ? driver_allows_async_probing+0x170/0x170 [ 804.143797][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.146747][T12035] bus_for_each_drv+0x15f/0x1e0 [ 804.160435][T12035] ? bus_for_each_dev+0x1d0/0x1d0 [ 804.167110][T12035] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 804.168659][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.173355][T12035] ? lockdep_hardirqs_on+0x79/0x100 [ 804.188760][T12035] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 804.195455][T12035] __device_attach+0x1e4/0x530 [ 804.198400][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.200694][T12035] ? device_driver_attach+0x210/0x210 [ 804.214393][T12035] ? kobject_uevent_env+0x2ac/0x1660 [ 804.220042][T12035] bus_probe_device+0x1e4/0x290 [ 804.225756][T12035] device_add+0xbda/0x1ea0 [ 804.230715][T12035] ? lockdep_hardirqs_on+0x79/0x100 [ 804.236757][T12035] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 804.243297][T12035] ? add_device_randomness+0xb4/0xe0 [ 804.249378][T12035] usb_new_device.cold+0x641/0x1091 [ 804.258836][T12035] ? hub_disconnect+0x510/0x510 [ 804.263923][T13040] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a [ 804.272882][T12035] ? rwlock_bug.part.0+0x90/0x90 [ 804.273002][T13040] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 804.273034][T13040] usb 4-1: Manufacturer: syz [ 804.279034][T12035] ? _raw_spin_unlock_irq+0x1f/0x40 [ 804.301895][T13040] usb 4-1: config 0 descriptor?? [ 804.304211][T12035] ? _raw_spin_unlock_irq+0x1f/0x40 [ 804.312216][T12035] hub_event+0x25d5/0x4690 [ 804.317223][T12035] ? hub_port_debounce+0x3c0/0x3c0 [ 804.322382][T12035] ? lock_release+0x780/0x780 [ 804.328564][T12035] ? lock_downgrade+0x6e0/0x6e0 [ 804.333539][T12035] ? do_raw_spin_lock+0x120/0x2a0 [ 804.339184][T12035] process_one_work+0x996/0x1610 [ 804.349197][T12035] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 804.357859][T12035] ? rwlock_bug.part.0+0x90/0x90 [ 804.363268][T12035] ? _raw_spin_lock_irq+0x41/0x50 [ 804.374133][T12035] worker_thread+0x665/0x1080 [ 804.378847][T12035] ? __kthread_parkme+0x15f/0x220 [ 804.388709][T12035] ? process_one_work+0x1610/0x1610 [ 804.395630][T12035] kthread+0x2e9/0x3a0 [ 804.403771][T12549] usb 5-1: Using ep0 maxpacket: 8 [ 804.404649][T12035] ? kthread_complete_and_exit+0x40/0x40 [ 804.414570][T12035] ret_from_fork+0x1f/0x30 [ 804.419046][T12035] [ 804.422087][T12035] Kernel panic - not syncing: panic_on_warn set ... [ 804.428678][T12035] CPU: 0 PID: 12035 Comm: kworker/0:1 Not tainted 5.19.0-rc6-syzkaller-00378-gc658cabbfd32 #0 [ 804.438931][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 804.448998][T12035] Workqueue: usb_hub_wq hub_event [ 804.454041][T12035] Call Trace: [ 804.457318][T12035] [ 804.460252][T12035] dump_stack_lvl+0xcd/0x134 [ 804.464949][T12035] panic+0x2d7/0x636 [ 804.468866][T12035] ? panic_print_sys_info.part.0+0x10b/0x10b [ 804.474856][T12035] ? __warn.cold+0x1d1/0x2c5 [ 804.479469][T12035] ? media_create_pad_link+0x4de/0x650 [ 804.484943][T12035] __warn.cold+0x1e2/0x2c5 [ 804.489370][T12035] ? media_create_pad_link+0x4de/0x650 [ 804.494839][T12035] report_bug+0x1bc/0x210 [ 804.499179][T12035] handle_bug+0x3c/0x60 [ 804.503346][T12035] exc_invalid_op+0x14/0x40 [ 804.507856][T12035] asm_exc_invalid_op+0x16/0x20 [ 804.512737][T12035] RIP: 0010:media_create_pad_link+0x4de/0x650 [ 804.518817][T12035] Code: 78 b9 6d fb 44 89 e0 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 61 b9 6d fb 0f 0b 41 bc ea ff ff ff eb da e8 52 b9 6d fb <0f> 0b 41 bc ea ff ff ff eb cb e8 43 b9 6d fb 0f 0b 41 bc ea ff ff [ 804.538446][T12035] RSP: 0018:ffffc90003eb6ee0 EFLAGS: 00010246 [ 804.544525][T12035] RAX: 0000000000040000 RBX: ffff88801c2fa880 RCX: ffffc90013aaf000 [ 804.552501][T12035] RDX: 0000000000040000 RSI: ffffffff860be31e RDI: 0000000000000002 [ 804.560478][T12035] RBP: ffff8880247a8080 R08: 0000000000000002 R09: 0000000000000000 [ 804.568455][T12035] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 804.576432][T12035] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880247a8080 [ 804.584410][T12035] ? media_create_pad_link+0x4de/0x650 [ 804.589888][T12035] uvc_mc_register_entities+0x5cd/0x910 [ 804.595445][T12035] uvc_probe.cold+0x15c6/0x2153 [ 804.600307][T12035] ? lock_chain_count+0x20/0x20 [ 804.605173][T12035] ? find_held_lock+0x2d/0x110 [ 804.609951][T12035] usb_probe_interface+0x315/0x7f0 [ 804.615074][T12035] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 804.620459][T12035] really_probe+0x23e/0xb90 [ 804.624970][T12035] __driver_probe_device+0x338/0x4d0 [ 804.630262][T12035] ? usb_match_id.part.0+0x15d/0x1b0 [ 804.635559][T12035] driver_probe_device+0x4c/0x1a0 [ 804.640592][T12035] __device_attach_driver+0x20b/0x2f0 [ 804.645980][T12035] ? driver_allows_async_probing+0x170/0x170 [ 804.651970][T12035] bus_for_each_drv+0x15f/0x1e0 [ 804.656826][T12035] ? bus_for_each_dev+0x1d0/0x1d0 [ 804.661856][T12035] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 804.667672][T12035] ? lockdep_hardirqs_on+0x79/0x100 [ 804.672882][T12035] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 804.678728][T12035] __device_attach+0x1e4/0x530 [ 804.683509][T12035] ? device_driver_attach+0x210/0x210 [ 804.688891][T12035] ? kobject_uevent_env+0x2ac/0x1660 [ 804.694191][T12035] bus_probe_device+0x1e4/0x290 [ 804.699049][T12035] device_add+0xbda/0x1ea0 [ 804.703471][T12035] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 804.709722][T12035] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 804.715538][T12035] usb_set_configuration+0x101e/0x1900 [ 804.721012][T12035] usb_generic_driver_probe+0xba/0x100 [ 804.726481][T12035] usb_probe_device+0xd9/0x2c0 [ 804.731253][T12035] ? usb_driver_release_interface+0x180/0x180 [ 804.737329][T12035] really_probe+0x23e/0xb90 [ 804.741840][T12035] __driver_probe_device+0x338/0x4d0 [ 804.747134][T12035] driver_probe_device+0x4c/0x1a0 [ 804.752167][T12035] __device_attach_driver+0x20b/0x2f0 [ 804.757546][T12035] ? driver_allows_async_probing+0x170/0x170 [ 804.763534][T12035] bus_for_each_drv+0x15f/0x1e0 [ 804.768395][T12035] ? bus_for_each_dev+0x1d0/0x1d0 [ 804.773425][T12035] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 804.779242][T12035] ? lockdep_hardirqs_on+0x79/0x100 [ 804.784446][T12035] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 804.790260][T12035] __device_attach+0x1e4/0x530 [ 804.795048][T12035] ? device_driver_attach+0x210/0x210 [ 804.800429][T12035] ? kobject_uevent_env+0x2ac/0x1660 [ 804.805739][T12035] bus_probe_device+0x1e4/0x290 [ 804.810596][T12035] device_add+0xbda/0x1ea0 [ 804.815024][T12035] ? lockdep_hardirqs_on+0x79/0x100 [ 804.820231][T12035] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 804.826480][T12035] ? add_device_randomness+0xb4/0xe0 [ 804.831772][T12035] usb_new_device.cold+0x641/0x1091 [ 804.836985][T12035] ? hub_disconnect+0x510/0x510 [ 804.841840][T12035] ? rwlock_bug.part.0+0x90/0x90 [ 804.846783][T12035] ? _raw_spin_unlock_irq+0x1f/0x40 [ 804.851993][T12035] ? _raw_spin_unlock_irq+0x1f/0x40 [ 804.857199][T12035] hub_event+0x25d5/0x4690 [ 804.861627][T12035] ? hub_port_debounce+0x3c0/0x3c0 [ 804.866743][T12035] ? lock_release+0x780/0x780 [ 804.871434][T12035] ? lock_downgrade+0x6e0/0x6e0 [ 804.876293][T12035] ? do_raw_spin_lock+0x120/0x2a0 [ 804.881326][T12035] process_one_work+0x996/0x1610 [ 804.886272][T12035] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 804.891651][T12035] ? rwlock_bug.part.0+0x90/0x90 [ 804.896600][T12035] ? _raw_spin_lock_irq+0x41/0x50 [ 804.901637][T12035] worker_thread+0x665/0x1080 [ 804.906320][T12035] ? __kthread_parkme+0x15f/0x220 [ 804.911358][T12035] ? process_one_work+0x1610/0x1610 [ 804.916564][T12035] kthread+0x2e9/0x3a0 [ 804.920646][T12035] ? kthread_complete_and_exit+0x40/0x40 [ 804.926285][T12035] ret_from_fork+0x1f/0x30 [ 804.930725][T12035] [ 804.934129][T12035] Kernel Offset: disabled [ 804.938653][T12035] Rebooting in 86400 seconds..