syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1726/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 20:53:54 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x0, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1446.111419][ T3495] loop4: detected capacity change from 0 to 256 [ 1446.215655][ T3499] loop5: detected capacity change from 0 to 256 [ 1446.245377][ T3495] 9pnet_fd: p9_fd_create_unix (3495): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1446.262093][ T3499] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 20:53:54 executing program 2: r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x7ba2b25f}}, 0x30) 20:53:54 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) connect$pptp(r0, &(0x7f0000000380)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 20:53:54 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mknod$loop(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") unlink(&(0x7f0000000000)='./bus\x00') 20:53:54 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b04", 0x25}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:53:54 executing program 1: bpf$BPF_LINK_CREATE(0x3, 0x0, 0x0) [ 1446.602814][ T3507] loop4: detected capacity change from 0 to 256 [ 1446.651826][ T3509] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1446.658401][ T3509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1446.668664][ T3508] loop5: detected capacity change from 0 to 256 [ 1446.692356][ T3508] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1446.718607][ T3509] vhci_hcd vhci_hcd.0: Device attached [ 1446.744717][ T3510] vhci_hcd: connection closed [ 1446.745071][ T2896] vhci_hcd: stop threads 20:53:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") unlink(&(0x7f0000000000)='./bus\x00') 20:53:55 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000500)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") mknod$loop(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000046c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 20:53:55 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mknod$loop(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) [ 1446.751876][ T3507] 9pnet_fd: p9_fd_create_unix (3507): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1446.774223][ T2896] vhci_hcd: release socket [ 1446.865347][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.934428][ T29] audit: type=1804 audit(1702673635.160:218): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1727/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 20:53:55 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x0, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1446.991146][ T29] audit: type=1804 audit(1702673635.160:219): pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1727/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 1447.011753][ T3521] loop1: detected capacity change from 0 to 256 [ 1447.017211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.034685][ T3520] loop5: detected capacity change from 0 to 256 [ 1447.079944][ T3523] loop4: detected capacity change from 0 to 256 [ 1447.101301][ T3520] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1447.113548][T21640] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 1447.137021][ T2896] vhci_hcd: disconnect device 20:53:55 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 20:53:55 executing program 5: creat(&(0x7f00000004c0)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:53:55 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 20:53:55 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mknod$loop(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESOCT], 0x9, 0x23e, &(0x7f00000001c0)="$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") [ 1447.288413][ T3523] 9pnet_fd: p9_fd_create_unix (3523): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1447.529721][ T3536] loop1: detected capacity change from 0 to 256 [ 1447.529845][ T3535] loop4: detected capacity change from 0 to 256 [ 1447.620952][ C0] vkms_vblank_simulate: vblank timer overrun 20:53:55 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000500)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mknod$loop(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) statfs(&(0x7f00000016c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001100)=""/9) 20:53:55 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b04", 0x25}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:53:55 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x10, 0x2008, 0x0, @link_id}, 0x20) 20:53:55 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x0, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:53:55 executing program 5: creat(&(0x7f00000004c0)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:53:56 executing program 5: creat(&(0x7f00000004c0)='./bus\x00', 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:53:56 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0xa, 0x0, 0x0, @link_id}, 0x20) [ 1447.827905][ T3535] 9pnet_fd: p9_fd_create_unix (3535): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1447.875837][ T3544] loop1: detected capacity change from 0 to 256 [ 1447.966964][ C0] vkms_vblank_simulate: vblank timer overrun 20:53:56 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") creat(0x0, 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:53:56 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x8}, 0x20) [ 1448.081146][ T3554] loop5: detected capacity change from 0 to 256 20:53:56 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@map, 0xffffffffffffffff, 0x15, 0x10, 0x0, @prog_id}, 0x20) [ 1448.121124][ T3554] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1448.146064][ T29] audit: type=1804 audit(1702673636.390:220): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1728/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1448.172521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.191718][ T3557] loop4: detected capacity change from 0 to 256 20:53:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") creat(0x0, 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:53:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) [ 1448.245000][ T3557] 9pnet_fd: p9_fd_create_unix (3557): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1448.310559][ T29] audit: type=1804 audit(1702673636.390:221): pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1728/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1448.403576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.430324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.601514][ T3564] loop5: detected capacity change from 0 to 256 [ 1448.684615][ T3564] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 20:53:57 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad", 0x2b}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:53:57 executing program 4: mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:57 executing program 1: request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xffffffffffffffff) 20:53:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:53:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) 20:53:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$eJzs3bFrU1scB/Bf2rQvr/BIhgePJ4JXXBwktBX3FqkgBhQlgw5isS1KUwsWAjq0OPlP6J+gDg6ugoO4+g+IIFVwsVsHIZLckrYhSatyE6Sfz5If95xvzrn3JjlTzr11fGV5YXVtaWtrMwqFXORnYia2c1GKkRiNiMhHN+NdjwIAf4TtRiO+NVLDngsAMBjWfwA4eg65/l8Z4JQAgIz1Wf/HhjQlACBj167fuDRbqcxdTZJCxMrjerVeTV/T9tmluBu1aMRkRHyPaLSl9YWLlbnJpOlzKU3kImJlo14d3ZtfjKkoRql7fipJRbWZa42/Ua+OxcRO/sNELMZ0FOPf7vnpjnxh59xOn9ozfjmK8f52rEYtFqKZ3c2vTyXJ+cuVjvH/avUDAAAAAAAAAAAAAAAAAAAAAIAslJO20v79b9L9e8rlXu1pvr2/zmQU++8P1Lm/Tz6OdX+2IAAAAAAAAAAAAAAAAAAAABw5aw8eLs/Xaov3+xX33j1/c1CfA4u/W0VuZ9xff5/fL/Kt4p+Tn5707vOo7/VJsjyL1yd6Nj1rzicZxqWrdBx5u3nn/7Nr526+PNMrlYsB39yxfjflazGyms+LIX2Mm8VI+4u8r2m8S+f/ns7Mv1r/+OWwQwz0ZwgAAAAAAAAAAAAAAAAAANj3//afjuYymRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMHu8/+zK4Z9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CMAAP//3UOVpA==") creat(0x0, 0x0) unlink(&(0x7f0000000000)='./bus\x00') 20:53:57 executing program 4: mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) [ 1448.835301][ T3574] loop5: detected capacity change from 0 to 256 [ 1448.882622][ T3574] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 20:53:57 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', 0x0, 0x2000, 0x0) 20:53:57 executing program 4: mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) [ 1448.977104][ T3572] hsr_slave_0 (unregistering): left promiscuous mode 20:53:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x0) unlink(0x0) 20:53:57 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(0x0, &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0x34}}, 0x0) [ 1449.123423][ T29] audit: type=1804 audit(1702673637.370:222): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1729/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 1449.149992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1449.161404][ T3584] loop1: detected capacity change from 0 to 256 [ 1449.253409][ T3591] loop5: detected capacity change from 0 to 256 [ 1449.262456][ T3587] loop4: detected capacity change from 0 to 256 [ 1449.313531][ T3591] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1449.331364][ T29] audit: type=1804 audit(1702673637.370:223): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1729/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 20:53:58 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad", 0x2b}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:53:58 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', 0x0, 0x2000, 0x0) 20:53:58 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x1d, 0x16, 0xffffffffffffffff, @prog_fd}, 0x20) 20:53:58 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(0x0, &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:58 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:53:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x0) unlink(0x0) [ 1449.847311][ T3597] loop5: detected capacity change from 0 to 256 [ 1449.863702][ T3599] loop4: detected capacity change from 0 to 256 [ 1449.865756][ T3601] loop1: detected capacity change from 0 to 256 [ 1449.888878][ T3597] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 20:53:58 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(0x0, &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:58 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000000)='trusted\x00', 0x0, 0x0) 20:53:58 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000001c0)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) 20:53:58 executing program 2: bpf$BPF_LINK_CREATE(0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) [ 1450.052806][ T29] audit: type=1804 audit(1702673638.290:224): pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1730/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 20:53:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES32=0x0], 0x9, 0x250, &(0x7f0000000500)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x0) unlink(0x0) 20:53:58 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000180)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/117, 0x75}}], 0x1, 0x20, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) [ 1450.205289][ T29] audit: type=1804 audit(1702673638.290:225): pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1730/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 1450.206077][ T3609] loop4: detected capacity change from 0 to 256 [ 1450.231292][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.427004][ T3618] loop5: detected capacity change from 0 to 256 [ 1450.452366][ T3618] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! 20:53:59 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad", 0x2b}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:53:59 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:53:59 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 20:53:59 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000000)=@raw=[@cb_func], &(0x7f0000000040)='GPL\x00', 0x6, 0x72, &(0x7f0000000080)=""/114}, 0x90) 20:53:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=iso8859-6,iocharset=utf8,flush,shortname=winnt,utf8=1,errors=continue,shortname=lower,uid=', @ANYRESHEX=0x0, @ANYBLOB="000f89af8ce77e8328058437"], 0x9, 0x23e, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 20:53:59 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395d50b1ab155521}, 0x90) 20:53:59 executing program 1: bpf$BPF_LINK_CREATE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) [ 1450.875815][ T3625] loop4: detected capacity change from 0 to 256 [ 1450.914351][ T3625] 9pnet_fd: p9_fd_create_unix (3625): problem connecting socket: ./file0/file0: -111 20:53:59 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x31, 0x10, 0x0, @prog_fd}, 0x20) 20:53:59 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:53:59 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x414, &(0x7f0000000500)=ANY=[], 0xfe, 0x1dd, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="88e195de448498af1e21c0d5f9edb421b8bd84bbf380841ac4ca661147c7b3dda845488c70410052733a475e48f79a9a63f2ce2310404a225adbd5ecf3451a8b3f"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) link(&(0x7f0000000040)='.\x00', 0x0) 20:53:59 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000500)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mknod$loop(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) getxattr(&(0x7f00000016c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) [ 1451.116755][ T3640] loop5: detected capacity change from 0 to 256 [ 1451.139965][ T3642] loop4: detected capacity change from 0 to 256 [ 1451.196685][ T3642] 9pnet_fd: p9_fd_create_unix (3642): problem connecting socket: ./file0/file0: -111 [ 1451.211773][ T3644] loop1: detected capacity change from 0 to 256 [ 1451.253651][ T29] audit: type=1804 audit(1702673639.440:226): pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1731/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1451.356354][ T29] audit: type=1804 audit(1702673639.460:227): pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1731/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 20:54:00 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) symlinkat(&(0x7f00000005c0)='./file0\x00', 0xffffffffffffffff, 0x0) 20:54:00 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe5", 0x2e}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:00 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:54:00 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x414, &(0x7f0000000500)=ANY=[], 0xfe, 0x1dd, &(0x7f0000001100)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="88e195de448498af1e21c0d5f9edb421b8bd84bbf380841ac4ca661147c7b3dda845488c70410052733a475e48f79a9a63f2ce2310404a225adbd5ecf3451a8b3f"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) link(&(0x7f0000000040)='.\x00', 0x0) 20:54:00 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x0, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:00 executing program 2: mkdir(&(0x7f0000000580)='./file1\x00', 0x150) 20:54:00 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000500)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") rename(&(0x7f00000026c0)='./file0/file0\x00', &(0x7f00000036c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20:54:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, &(0x7f0000000080)={[{@grpid}, {@nodiscard}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x40}}, {@noload}, {@noquota}, {@abort}, {@lazytime}, {@noblock_validity}]}, 0x64, 0x4fa, &(0x7f0000000540)="$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") [ 1451.872137][ T3654] loop4: detected capacity change from 0 to 256 [ 1451.880879][ T3653] loop1: detected capacity change from 0 to 256 20:54:00 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001140)) [ 1451.949005][ T3654] 9pnet_fd: p9_fd_create_unix (3654): problem connecting socket: ./file0/file0: -111 [ 1452.047037][ T3658] loop5: detected capacity change from 0 to 256 [ 1452.085523][ T3665] loop4: detected capacity change from 0 to 256 20:54:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, &(0x7f0000000080)={[{@grpid}, {@nodiscard}, {@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x40}}, {@noload}, {@noquota}, {@abort}, {@lazytime}, {@noblock_validity}]}, 0x64, 0x4fa, &(0x7f0000000540)="$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") 20:54:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='rxrpc_s\x00', r2) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$search(0xa, r2, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x3}, r1) 20:54:00 executing program 5: linkat(0xffffffffffffffff, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x0) 20:54:00 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001140)) [ 1452.188380][ T29] audit: type=1804 audit(1702673640.430:228): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1732/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 1452.208392][T21640] vhci_hcd: vhci_device speed not set [ 1452.319657][ T29] audit: type=1804 audit(1702673640.470:229): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1732/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 1452.371742][ T3670] loop4: detected capacity change from 0 to 256 20:54:01 executing program 1: utime(&(0x7f0000000500)='./file1\x00', 0x0) 20:54:01 executing program 2: pipe(&(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, 0xffffffffffffffff, 0x0) 20:54:01 executing program 5: pipe(&(0x7f0000006280)={0xffffffffffffffff}) readv(r0, &(0x7f00000067c0)=[{0x0}], 0x1) pipe(&(0x7f000001ae00)) 20:54:01 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001140)) 20:54:01 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe5", 0x2e}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:01 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x0, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:01 executing program 1: lchown(&(0x7f0000000300)='./file0\x00', 0x0, 0xffffffffffffffff) 20:54:01 executing program 5: pipe(&(0x7f0000002080)) [ 1452.923915][ T3679] loop4: detected capacity change from 0 to 256 20:54:01 executing program 2: capset(&(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) 20:54:01 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001140)) 20:54:01 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) 20:54:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40}, {0x9, 0x4, 0x1}]}) 20:54:01 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',rootmode='], 0x0, 0x0, 0x0) [ 1453.155592][ T3695] loop4: detected capacity change from 0 to 256 [ 1453.176432][ T29] audit: type=1804 audit(1702673641.420:230): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1733/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 1453.294318][ T3702] fuse: Bad value for 'rootmode' 20:54:01 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0) 20:54:01 executing program 1: renameat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') [ 1453.316039][ T29] audit: type=1804 audit(1702673641.420:231): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1733/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 20:54:01 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) [ 1453.538220][T21640] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1453.808541][T21640] usb 6-1: Using ep0 maxpacket: 8 20:54:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{}, {0x9, 0x4}, {0x280, 0x6, 0xff, 0xffff}, {0x1ff, 0x2, 0x3f, 0x24}, {0x4, 0xff, 0x3, 0xeb5a}, {0x9, 0x7, 0x8, 0x4}, {0x8, 0x0, 0xf8, 0x7}, {0x8eb, 0x7b, 0x4, 0x80}]}) 20:54:02 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001140)) 20:54:02 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',blksize=0x0'], 0x0, 0x0, 0x0) 20:54:02 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x0, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:02 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe5", 0x2e}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:02 executing program 1: capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, 0x0) [ 1453.933891][T21640] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1453.941894][ T3715] fuse: blksize only supported for fuseblk [ 1453.987252][ T3718] loop4: detected capacity change from 0 to 256 [ 1454.028460][T21640] usb 6-1: language id specifier not provided by device, defaulting to English [ 1454.178528][T21640] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.210602][T21640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.233300][ T29] audit: type=1804 audit(1702673642.480:232): pid=3724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1734/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1454.252508][T21640] usb 6-1: Product: syz [ 1454.270274][ T29] audit: type=1804 audit(1702673642.500:233): pid=3724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1734/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1454.315732][T21640] usb 6-1: SerialNumber: syz [ 1454.421057][T21640] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1454.625605][ T5161] usb 6-1: USB disconnect, device number 27 20:54:03 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)="7ccc33582baf9831a6e3106bd4e46d8af9a060") 20:54:03 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0) 20:54:03 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$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") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001140)) 20:54:03 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x0, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:03 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820", 0x30}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:03 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) [ 1455.174300][ T3729] loop4: detected capacity change from 0 to 256 [ 1455.197745][ T3733] fuse: Unknown parameter '0xffffffffffffffff' 20:54:03 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x7f, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x1, 0xfbff, 0x4}, [@acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x1}, @mbim={0xc, 0x24, 0x1b, 0xc942, 0x7, 0x0, 0x7f, 0x7ff, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x0, 0x400, [0x7, 0xf991]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x1, 0x6, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0xa81a2c5cd203ae50, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xc1, 0xc}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x8, 0x3, 0x8}, 0xb4, &(0x7f00000000c0)={0x5, 0xf, 0xb4, 0x5, [@generic={0x88, 0x10, 0x2, "314992694c2ee420ccad561c3d3b85c3deb8b04940edfb7a9942eb2f010e16544415222476e42a48fe980256f108b0722013e7cf7a1f055e72c565e52f739ec3618d15c212d6f0bed36d5fbaf7302852b80211ab9fea87fdae45943a54468fcf63c6fc4e08b1dfc85349d8531c110d5a0b6ceb6f764d070e70b101756d41e2fe48b8004536"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x7, 0x1e, 0x9, 0x6, 0x81}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x1, 0x8, 0x9, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x3f, 0x7fff}]}, 0x2, [{0xcf, &(0x7f0000000180)=@string={0xcf, 0x3, "02d643785d055768f3904df35f8e18d03f8b99774a902b5ec1c2f814454a2b3106e1e14510dfeb8419499425c37acc9e4f76ac9ea7db064a7091300862aa500c2ebe5d3b6ae0831f7b7765b9cf81143b41e685082e1e1c53f7773a5396bd56828fb9286f37b32d4c9016736aac0b3cac3eca75431cdfb71d7376b8ca1760aefe4eede27af06fb7308f8b4154d664033b23ccb182d899711f9f63e7ee1400056794ee4b0a0353404ea02cdd7f802eeea22b30e725de75f341dbebf6a3ca77fd876e49647d526e6701e96f5be3b9"}}, {0xfd, &(0x7f0000000280)=@string={0xfd, 0x3, "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"}}]}) 20:54:03 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1455.259196][ T29] audit: type=1804 audit(1702673643.510:234): pid=3732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1735/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:54:03 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 1455.416950][ T29] audit: type=1804 audit(1702673643.530:235): pid=3732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1735/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1455.508179][ T3744] loop4: detected capacity change from 0 to 256 20:54:03 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 1455.564305][ T3744] 9pnet_virtio: no channels available for device ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1455.638512][ T8] usb 6-1: new high-speed USB device number 28 using dummy_hcd 20:54:03 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x0, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1455.694203][ T3748] loop4: detected capacity change from 0 to 256 [ 1455.729618][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:04 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0xfe, 0x1dd, &(0x7f00000014c0)="$eJzs3U9rE0EUAPC3WU1SD7VnEVz04qmon6AiFcSAoOSgJwUFofWil+ipR7+C31J66m0kmcR0TVobzXaJ/n6XPPbN29n5w+aUyeubHw6+dmOi3y+isxd7cVLETnTi9na+fhQLthYvAQCb4iSl+J6ytp8FALgcvv8B4P/z4uWrpw8Hg/3nVdWPOD4qptdHw/z5+Mlg/141sTOvOh6NhmXM2t7P+WE9fzWuTesf5HxV1vLduHsn58e5R88GVb2+F28bHTkAAAAAAAAAAAAAAAAAAAAAALRnt/pp4XyfSX73rHyOTp0P9Mv5Pd/ixpVzuy7XPBQAAAAAAAAAAAAAAAAAAADYWJ/6s+Dzl4M3h4fvPp4fvL8e8bs2rQYppTQezypVvekc/E3v2xdoU56eulvrG3txVipiSdVs6VfpYlbT3MKlco03rMZBEREtb8g/3FHd+up0ppPf3KMWS7bE/B3Ra/wtBAAAAAAAAAAAAAAAAAAARO1n/20/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0Z/7//ysGqZdvcIHGy/rduuRxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G/7EQAA//8HIRNR") mount$9p_unix(&(0x7f00000026c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000036c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 1455.818147][T31840] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1455.825983][ T5161] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1455.855285][ T3748] 9pnet_virtio: no channels available for device ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1455.978080][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1456.069206][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:04 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820", 0x30}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1456.107700][ T3753] loop4: detected capacity change from 0 to 256 [ 1456.136640][T31840] usb 2-1: Using ep0 maxpacket: 8 [ 1456.142524][ T5161] usb 3-1: Using ep0 maxpacket: 8 20:54:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,u'], 0x0, 0x0, 0x0) 20:54:04 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x0, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1456.164345][ T3753] 9pnet_virtio: no channels available for device ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1456.286631][ T3758] fuse: Unknown parameter 'u' [ 1456.338682][ T29] audit: type=1804 audit(1702673644.530:236): pid=3755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1736/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1456.377793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.404508][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1456.411291][ T5161] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1456.443361][T31840] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 44624, setting to 1024 [ 1456.468236][ T8] usb 6-1: language id specifier not provided by device, defaulting to English 20:54:04 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f00000000c0)=@string={0x4, 0x3, "1908"}}, {0x0, 0x0}]}) [ 1456.479191][T31840] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1456.491063][T31840] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 1456.504888][T31840] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1456.537574][ T29] audit: type=1804 audit(1702673644.530:237): pid=3755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1736/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1456.547374][T31840] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1456.563975][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.658375][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1456.668858][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.686495][ T8] usb 6-1: Product: syz [ 1456.691867][ T8] usb 6-1: SerialNumber: syz [ 1456.770364][ T8] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1456.778621][T31840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1456.800767][T31840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.813716][T31840] usb 2-1: Product: syz [ 1456.818194][T31840] usb 2-1: Manufacturer: ã¿ï…´ì„´áª‚ー삎ç¤ë©ì¹å•‚î’þࢢ횥薢밮⛢횑ꇑ㮢⡬꩙鬢⭾縑ê·ã¦˜éŸ´ã£éµ…焂㈼긂࢒歀͆㫷奿ç妎覜憚螎ï½æ£—淑쨯㒋佘ᛂ皸뜺硟ﭞ߻︻津犴泬宩蚆礰汼쿧é¦ç‹¥î²µê£™èŽ…ì¾ë½í™Œì‰‘äµæ¦»àµ„鶓筆擧윯鞇箓㴗ì›â¶”è¯è•½ä‰ºç±¥â €ì‘ƒãŠ½ï‘”ã¨„ê¯›ë¼œîªŠé·¥é‘™ë­€ç»šæ´šä¿ŠåžŽà±‘íŠ¦ÛŠë½‚ã¸½ã…‚æ…‹ë¡¢ïŒ¨á… [ 1456.854218][ T5161] usb 3-1: string descriptor 0 read error: -22 [ 1456.863783][ T5161] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1456.879473][ T779] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1456.889748][T31840] usb 2-1: SerialNumber: syz [ 1456.894644][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.941155][ T3745] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1456.955173][ T3745] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1456.964801][ T5161] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1457.042600][T21640] usb 6-1: USB disconnect, device number 28 20:54:05 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820", 0x30}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1457.153294][ T779] usb 5-1: Using ep0 maxpacket: 8 [ 1457.195896][ T8] usb 3-1: USB disconnect, device number 29 [ 1457.268337][T31840] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 1457.290162][T31840] usb 2-1: USB disconnect, device number 28 [ 1457.308811][ T779] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1457.326680][ T29] audit: type=1804 audit(1702673645.570:238): pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1737/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1457.358498][ T29] audit: type=1804 audit(1702673645.600:239): pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1737/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1457.430882][ T779] usb 5-1: language id specifier not provided by device, defaulting to English 20:54:05 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0x0, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:05 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20:54:05 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x1, 0xfbff, 0x4}, [@acm={0x4}, @network_terminal={0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0xa81a2c5cd203ae50, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) 20:54:05 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) [ 1457.808687][ T779] usb 5-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1457.817802][ T779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.832776][ T779] usb 5-1: Manufacturer: à ™ [ 1457.837547][ T779] usb 5-1: SerialNumber: syz [ 1457.896283][ T779] usbhid 5-1:1.0: couldn't find an input interrupt endpoint 20:54:06 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1458.048347][T31840] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1458.068802][ T5161] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1458.088253][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1458.110159][ T779] usb 5-1: USB disconnect, device number 30 20:54:06 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0x0, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:06 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1458.309061][T31840] usb 3-1: Using ep0 maxpacket: 8 [ 1458.339529][ T5161] usb 6-1: Using ep0 maxpacket: 8 [ 1458.358162][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1458.458974][T31840] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1458.476042][T31840] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1458.484405][ T5161] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1458.499741][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 20:54:06 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1458.538477][ T5161] usb 6-1: language id specifier not provided by device, defaulting to English 20:54:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200440, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC], 0x0, 0x0, 0x0) [ 1458.668428][T31840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1458.677558][T31840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.700344][ T3788] fuse: Bad value for 'user_id' [ 1458.702446][ T5161] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 20:54:06 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0x0, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:07 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x0, 0x0}]}) [ 1458.735743][T31840] usb 3-1: Product: syz [ 1458.740877][ T5161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.756434][T31840] usb 3-1: Manufacturer: syz [ 1458.768550][ T8] usb 2-1: string descriptor 0 read error: -22 [ 1458.773258][T31840] usb 3-1: SerialNumber: syz [ 1458.774943][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1458.784494][ T5161] usb 6-1: Product: syz [ 1458.805269][ T5161] usb 6-1: SerialNumber: syz [ 1458.831378][ T3773] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1458.847812][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.853308][ T3773] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 20:54:07 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1458.888820][T31840] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1458.922111][ T5161] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1458.931976][ T8] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1459.064797][ T29] audit: type=1804 audit(1702673647.310:240): pid=3796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1741/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1459.091840][ T8] usb 3-1: USB disconnect, device number 30 [ 1459.134967][T14758] usb 2-1: USB disconnect, device number 29 [ 1459.186772][ T29] audit: type=1804 audit(1702673647.310:241): pid=3796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1741/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1459.212816][ C0] vkms_vblank_simulate: vblank timer overrun [ 1459.218304][ T5156] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1459.265687][T21640] usb 6-1: USB disconnect, device number 29 20:54:07 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1459.528132][ T5156] usb 5-1: Using ep0 maxpacket: 8 20:54:07 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200440, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC], 0x0, 0x0, 0x0) 20:54:07 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x80400) [ 1459.668734][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.705887][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.743719][ T5156] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 20:54:08 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x4}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) 20:54:08 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',group_id=', @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030306330302c626c6b73697a653d3078303030303030303030303030303630302c666f876e65723cc2befbfbd6b2aca0e7d14f276c971788537291f47ecbc3921b38862c09cec50f6bbc04fa48574b6b04cb22"], 0x0, 0x0, 0x0) [ 1459.796992][ T3804] fuse: Bad value for 'fd' [ 1459.802294][ T5156] usb 5-1: language id specifier not provided by device, defaulting to English 20:54:08 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x6000) [ 1459.878649][ T3806] fuse: Bad value for 'group_id' 20:54:08 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) 20:54:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0x9}, {}]}) 20:54:08 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode'], 0x0, 0x0, 0x0) 20:54:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0x9}, {0x9, 0x4, 0x1, 0x8}]}) [ 1460.191002][T31840] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1460.199278][ T5156] usb 5-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1460.201489][ T3816] fuse: Bad value for 'rootmode' [ 1460.235183][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.268344][ T5156] usb 5-1: Manufacturer: ጠ[ 1460.286446][ T5156] usb 5-1: SerialNumber: syz [ 1460.498641][T31840] usb 6-1: Using ep0 maxpacket: 8 [ 1460.629299][T31840] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1460.661857][ T5156] usbhid 5-1:1.0: can't add hid device: -22 [ 1460.667922][ T5156] usbhid: probe of 5-1:1.0 failed with error -22 [ 1460.679987][ T5156] usb 5-1: USB disconnect, device number 31 [ 1460.689249][T31840] usb 6-1: language id specifier not provided by device, defaulting to English [ 1460.831444][T31840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1460.840854][T31840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.852720][T31840] usb 6-1: Product: syz [ 1460.856923][T31840] usb 6-1: SerialNumber: syz [ 1460.901756][T31840] cdc_ether: probe of 6-1:1.0 failed with error -22 20:54:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14020000", @ANYRES16, @ANYBLOB="04"], 0x214}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) 20:54:09 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:09 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) 20:54:09 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:09 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',blksize=0'], 0x0, 0x0, 0x0) [ 1461.130863][ T3821] fuse: blksize only supported for fuseblk [ 1461.186935][ T29] audit: type=1804 audit(1702673649.430:242): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1742/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1461.213459][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.223166][T31840] usb 6-1: USB disconnect, device number 30 [ 1461.259531][ T29] audit: type=1804 audit(1702673649.430:243): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1742/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1461.285619][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:10 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200440, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030306330302c626c6b73697a653d3078303030303030303030303030303630302c666f876e65723cc2befbfbd6b2aca0e7d14f276c971788537291f47ecbc3921b38862c09cec50f6bbc04fa48574b6b04cb2298"], 0x0, 0x0, 0x0) 20:54:10 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) 20:54:10 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000280)=@string={0x2}}]}) [ 1461.824371][ T3834] fuse: Bad value for 'user_id' 20:54:10 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 20:54:10 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6}]}}}]}}]}}, 0x0) 20:54:10 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',blksize=0x'], 0x0, 0x0, 0x0) 20:54:10 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1462.049242][ T3842] fuse: Bad value for 'blksize' 20:54:10 executing program 5: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030306330302c626c6b73697a653d3078303030303030303030303030303630302c666f876e65723cc2befbfbd6b2aca0e7d14f276c971788537291f47ecbc3921b38862c09cec50f6bbc04fa48574b6b04cb2298"], 0x0, 0x0, 0x0) [ 1462.116199][ T5156] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1462.124206][ T5161] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1462.154875][ T3846] fuse: Bad value for 'fd' 20:54:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {}]}) 20:54:10 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {}]}) [ 1462.318410][T31840] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1462.388412][ T5156] usb 3-1: Using ep0 maxpacket: 8 [ 1462.393813][ T5161] usb 5-1: Using ep0 maxpacket: 8 20:54:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {}]}) [ 1462.509332][ T5156] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1462.539327][ T5161] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 20:54:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {}]}) [ 1462.588736][ T5156] usb 3-1: language id specifier not provided by device, defaulting to English [ 1462.599317][ T5161] usb 5-1: language id specifier not provided by device, defaulting to English [ 1462.639322][T31840] usb 2-1: Using ep0 maxpacket: 8 [ 1462.738416][ T5161] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1462.755822][ T5161] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.764615][T31840] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1462.772396][ T29] audit: type=1804 audit(1702673651.020:244): pid=3857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1743/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1462.802079][ T5161] usb 5-1: Product: syz [ 1462.804072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.812814][ T5161] usb 5-1: SerialNumber: syz [ 1462.856487][ T29] audit: type=1804 audit(1702673651.070:245): pid=3857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1743/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1462.902675][ T5161] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1462.998823][T31840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1463.007953][T31840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.027726][T31840] usb 2-1: Product: syz [ 1463.036014][T31840] usb 2-1: Manufacturer: syz [ 1463.045163][T31840] usb 2-1: SerialNumber: syz [ 1463.093118][T31840] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1463.110897][T21640] usb 5-1: USB disconnect, device number 32 [ 1463.218370][ T5156] usb 3-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1463.227608][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.236107][ T5156] usb 3-1: SerialNumber: syz [ 1463.295148][T31840] usb 2-1: USB disconnect, device number 30 [ 1463.309254][ T5156] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1463.511923][ T5156] usb 3-1: USB disconnect, device number 31 20:54:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x9}]}) 20:54:12 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:12 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) 20:54:12 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id='], 0x0, 0x0, 0x0) 20:54:12 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:12 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',blksize'], 0x0, 0x0, 0x0) 20:54:12 executing program 5: keyctl$search(0xa, 0x0, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffa) 20:54:12 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x101, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000180)=@string={0x2}}]}) [ 1464.089954][ T3866] fuse: Bad value for 'user_id' [ 1464.091411][ T3867] fuse: Bad value for 'blksize' 20:54:12 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x2e, &(0x7f00000002c0)=@string={0x2e, 0x3, "e57019ae93304b282cded48d3fbaba1cefbfb6bbd8948a3b6d58029cc92ae41d4ecf19dd9228c2477f0f54db"}}]}) 20:54:12 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:12 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:12 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}]}) 20:54:12 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1464.448333][ T5156] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1464.549319][T31840] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1464.568762][ T5161] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1464.628556][T21640] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1464.758494][ T5156] usb 3-1: Using ep0 maxpacket: 8 20:54:13 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1464.818811][T31840] usb 5-1: Using ep0 maxpacket: 8 [ 1464.824167][ T5161] usb 2-1: Using ep0 maxpacket: 8 [ 1464.868622][T21640] usb 6-1: Using ep0 maxpacket: 8 [ 1464.888890][ T5156] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1464.939570][ T5156] usb 3-1: language id specifier not provided by device, defaulting to English [ 1464.988525][T31840] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1464.998414][T21640] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1465.001962][ T5161] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1465.060238][T21640] usb 6-1: language id specifier not provided by device, defaulting to English [ 1465.078464][T31840] usb 5-1: language id specifier not provided by device, defaulting to English [ 1465.087740][ T5161] usb 2-1: language id specifier not provided by device, defaulting to English [ 1465.218812][T31840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.228049][T31840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.236132][T31840] usb 5-1: Product: syz [ 1465.241438][ T5161] usb 2-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1465.250739][T31840] usb 5-1: Manufacturer: syz [ 1465.255352][T31840] usb 5-1: SerialNumber: syz [ 1465.266451][ T5161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.275678][ T5161] usb 2-1: Product: syz [ 1465.282452][ T5161] usb 2-1: Manufacturer: 烥긙ん⡋跔먿Ჺ뿯뮶铘㮊塭鰂⫉ᷤ콎⢒䟂ཿ [ 1465.291967][ T5161] usb 2-1: SerialNumber: syz [ 1465.330578][T31840] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1465.350325][ T5161] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1465.388631][T21640] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.397789][T21640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.406449][T21640] usb 6-1: Product: syz [ 1465.412011][T21640] usb 6-1: SerialNumber: syz [ 1465.463570][T21640] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1465.535187][ T5161] usb 5-1: USB disconnect, device number 33 [ 1465.554616][T31840] usb 2-1: USB disconnect, device number 31 [ 1465.578779][ T5156] usb 3-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1465.587911][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.597162][ T5156] usb 3-1: SerialNumber: syz [ 1465.651204][ T5156] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1465.666077][T21640] usb 6-1: USB disconnect, device number 31 [ 1465.873030][T31840] usb 3-1: USB disconnect, device number 32 20:54:14 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:14 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) 20:54:14 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x200440, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030306330302c626c6b73697a653d3078303030303030303030303030303630302c666f876e65723cc2befbfbd6b2aca0e7d14f276c971788537291f47ecbc3921b38862c09cec50f6bbc04fa48574b6b04cb22"], 0x0, 0x0, 0x0) 20:54:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0], 0x0, 0x0, 0x0) 20:54:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000093427"], 0x14}}, 0x0) 20:54:14 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:14 executing program 1: statx(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x0) syz_clone(0x48180000, &(0x7f0000000000)="305fbb9e858f89decb15c5c1ee921c7f2fd6bfeece2591380cea7c3dc94089b6569b6be9ab854da2b24b", 0x2a, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="70374b25b92358a59d53d1418097a65bfd2073e4e29c2fff726d1b0c073993a479b5ab7ee045fb31e16f9b7b9a11f98a123194164ecb2448b5e7152245f302d55bbe754526049d8a09d8372952b86b3ea8c31e38e50c8d6b40ec8c872a9b9f3e98fba053f2e188f665aaa87a765fababdf8c843fad4762b940ee15b6af6bab7f23a153364cd5f49bdb716b50ed73c592aa35efb590945d49d4a5ec651ffb2b9b990108262b3d43644a3645c4cf1e7abf827b2f065fde38c3d2b8cf") 20:54:14 executing program 4: ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 20:54:14 executing program 5: syz_clone(0x44020080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 20:54:14 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:14 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 1466.779264][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd 20:54:15 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x3ff, 0x5, 0x5e07, 0x0, 0x1}, 0x48) [ 1467.080469][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1467.088610][ T5156] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1467.238312][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1467.299280][ T8] usb 3-1: language id specifier not provided by device, defaulting to English [ 1467.378133][ T5156] usb 5-1: Using ep0 maxpacket: 8 [ 1467.519482][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.532344][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.554158][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1467.571923][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1467.592499][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1467.608446][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1467.812973][ T5156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1467.827611][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.838427][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1467.841928][ T5156] usb 5-1: Product: syz [ 1467.859330][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.861112][ T5156] usb 5-1: Manufacturer: syz [ 1467.878117][ T5156] usb 5-1: SerialNumber: syz [ 1467.880453][ T8] usb 3-1: SerialNumber: syz [ 1467.942459][ T8] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1468.178499][ T5156] cdc_ncm 5-1:1.0: bind() failure [ 1468.190191][ T5156] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1468.198763][T21640] usb 3-1: USB disconnect, device number 33 [ 1468.220872][ T5156] cdc_ncm 5-1:1.1: bind() failure [ 1468.249232][ T5156] usb 5-1: USB disconnect, device number 34 20:54:17 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) 20:54:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) 20:54:17 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:17 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:17 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 20:54:17 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000001440), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 20:54:17 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x6, 0x0, 0x36, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "2c95"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffc, 0x0, 0x40}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x41}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x98, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x3}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x3, [{0x2, &(0x7f0000000400)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:54:17 executing program 5: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x9, &(0x7f0000000a40)={{}, 0x0, 0x0}, 0x20) 20:54:17 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1469.128725][T21640] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1469.158146][ T5156] usb 3-1: new high-speed USB device number 34 using dummy_hcd 20:54:17 executing program 5: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="19", 0x1, 0xfffffffffffffffb) [ 1469.318965][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd 20:54:17 executing program 5: socketpair(0x28, 0x5, 0x0, &(0x7f0000000800)) [ 1469.397373][ T29] audit: type=1804 audit(1702673657.640:246): pid=3945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1753/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1469.424946][T21640] usb 5-1: Using ep0 maxpacket: 8 [ 1469.498159][ T5156] usb 3-1: Using ep0 maxpacket: 8 [ 1469.525486][ T29] audit: type=1804 audit(1702673657.700:247): pid=3945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1753/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1469.551438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1469.609377][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1469.628527][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.648711][ T5156] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1469.670853][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:54:18 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1469.738344][ T5156] usb 3-1: language id specifier not provided by device, defaulting to English [ 1469.738581][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 1469.767954][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1469.794467][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1469.817946][ T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1469.846479][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1469.875073][ T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1469.892124][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1469.949808][ T8] usb 2-1: language id specifier not provided by device, defaulting to English [ 1470.079179][T21640] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1470.091608][T21640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.111765][T21640] usb 5-1: Product: syz [ 1470.124729][T21640] usb 5-1: Manufacturer: syz [ 1470.137696][T21640] usb 5-1: SerialNumber: syz [ 1470.308707][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1470.329817][ T5156] usb 3-1: New USB device found, idVendor=056a, idProduct=0061, bcdDevice= 0.40 [ 1470.341477][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.350544][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.351002][ T8] usb 2-1: SerialNumber: syz [ 1470.376725][ T5156] usb 3-1: SerialNumber: syz [ 1470.438381][ T5156] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1470.489370][T21640] cdc_ncm 5-1:1.0: bind() failure [ 1470.525745][T21640] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1470.538633][T21640] cdc_ncm 5-1:1.1: bind() failure [ 1470.568438][T21640] usb 5-1: USB disconnect, device number 35 [ 1470.714140][ T5156] usb 3-1: USB disconnect, device number 34 [ 1470.715257][ T8] cdc_ncm 2-1:1.0: bind() failure [ 1470.747410][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1470.755161][ T8] cdc_ncm 2-1:1.1: bind() failure [ 1470.767618][ T8] usb 2-1: USB disconnect, device number 32 20:54:19 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:19 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0xa1}}}}}}}]}}, 0x0) 20:54:19 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:19 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 20:54:19 executing program 1: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x36, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfffc, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x41, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x98, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x3, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r0, 0x4b47, 0x0) 20:54:19 executing program 2: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0x0, r0) setreuid(0xee01, r0) 20:54:19 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1471.386538][ T29] audit: type=1804 audit(1702673659.630:248): pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1754/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1471.413170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.449955][ T29] audit: type=1804 audit(1702673659.630:249): pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1754/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1471.578177][T14758] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1471.592313][ T5156] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1471.600338][ T5161] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1471.778232][ T779] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1471.818181][T14758] usb 6-1: Using ep0 maxpacket: 8 [ 1471.878357][ T5161] usb 2-1: Using ep0 maxpacket: 8 [ 1471.883601][ T5156] usb 5-1: Using ep0 maxpacket: 8 [ 1471.948654][T14758] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.984011][T14758] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:54:20 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1472.012572][T14758] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1472.028597][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.036180][T14758] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1472.059568][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.069897][ T779] usb 3-1: Using ep0 maxpacket: 8 [ 1472.083738][T14758] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1472.098791][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1472.113434][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1472.114982][T14758] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1472.124824][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1472.144751][ T5161] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 1472.158854][ T5161] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1472.170413][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1472.180837][ T5161] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1472.288403][ T779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.312397][ T779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1472.324678][ T779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1472.358580][T14758] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1472.378893][ T5161] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1472.388250][ T5156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1472.397317][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.410582][ T5161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.413961][T14758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.422669][ T5161] usb 2-1: Product: ã  [ 1472.431445][ T5156] usb 5-1: Product: syz [ 1472.439562][ T5156] usb 5-1: Manufacturer: syz [ 1472.446263][T14758] usb 6-1: Product: syz [ 1472.451964][ T5161] usb 2-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± [ 1472.462636][T14758] usb 6-1: Manufacturer: syz [ 1472.474865][ T5156] usb 5-1: SerialNumber: syz [ 1472.502108][T14758] usb 6-1: SerialNumber: syz [ 1472.503938][ T5161] usb 2-1: SerialNumber: à § [ 1472.528877][ T779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1472.547458][ T779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.571504][ T779] usb 3-1: Product: ã  [ 1472.583777][ T779] usb 3-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± 20:54:20 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1472.623573][ T779] usb 3-1: SerialNumber: à § 20:54:20 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, 0x0, 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1472.808676][T14758] cdc_ncm 6-1:1.0: bind() failure [ 1472.826229][T14758] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1472.835446][T14758] cdc_ncm 6-1:1.1: bind() failure [ 1472.838793][ T5156] cdc_ncm 5-1:1.0: bind() failure [ 1472.864700][ T5156] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1472.872094][ T5161] cdc_ncm 2-1:1.0: bind() failure [ 1472.875865][T14758] usb 6-1: USB disconnect, device number 32 [ 1472.900755][ T5156] cdc_ncm 5-1:1.1: bind() failure [ 1472.932447][ T5161] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1472.968293][ T5156] usb 5-1: USB disconnect, device number 36 [ 1472.978372][ T779] cdc_ncm 3-1:1.0: bind() failure [ 1472.990682][ T5161] cdc_ncm 2-1:1.1: bind() failure [ 1473.058375][ T779] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1473.075928][ T5161] usb 2-1: USB disconnect, device number 33 [ 1473.087424][ T779] cdc_ncm 3-1:1.1: bind() failure [ 1473.159097][ T779] usb 3-1: USB disconnect, device number 35 20:54:21 executing program 5: modify_ldt$write(0x1, &(0x7f0000000000)={0x1028000}, 0x10) 20:54:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, 0x0, 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:21 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x2, &(0x7f0000000400)=@string={0x2}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:54:21 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 20:54:21 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) 20:54:21 executing program 5: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1473.708318][ T779] usb 2-1: new high-speed USB device number 34 using dummy_hcd 20:54:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, 0x0, 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1473.770619][ T29] audit: type=1804 audit(1702673662.000:250): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1755/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1473.808964][ T5161] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1473.858459][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1473.878616][ T29] audit: type=1804 audit(1702673662.000:251): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1755/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1473.908771][ T5156] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1473.958391][ T779] usb 2-1: Using ep0 maxpacket: 8 [ 1474.058214][ T5161] usb 3-1: Using ep0 maxpacket: 8 20:54:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1474.108578][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1474.139437][ T779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.160788][ T779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.172467][ T5156] usb 6-1: Using ep0 maxpacket: 8 [ 1474.181605][ T779] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1474.193435][ T779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1474.205956][ T779] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1474.217410][ T779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1474.238672][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.258538][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.278627][ T779] usb 2-1: language id specifier not provided by device, defaulting to English [ 1474.298239][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1474.318448][ T5161] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.338595][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1474.349618][ T5161] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1474.360398][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1474.360434][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1474.408123][ T5161] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1474.439589][ T5156] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.470731][ T5156] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1474.504491][ T5156] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1474.518692][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.527820][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.564356][ T8] usb 5-1: Product: syz [ 1474.575825][ T8] usb 5-1: Manufacturer: syz [ 1474.599325][ T8] usb 5-1: SerialNumber: syz [ 1474.628777][ T5161] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.642811][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.663133][ T5161] usb 3-1: Product: ã  [ 1474.668329][ T779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.679412][ T5161] usb 3-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± [ 1474.699431][ T5156] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.709236][ T779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.749519][ T5156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.757754][ T5156] usb 6-1: Product: ã  [ 1474.766761][ T5161] usb 3-1: SerialNumber: à § [ 1474.776260][ T5156] usb 6-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± 20:54:23 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1474.803896][ T5156] usb 6-1: SerialNumber: à § 20:54:23 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1474.941983][ T8] cdc_ncm 5-1:1.0: bind() failure [ 1475.006143][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1475.016754][ T8] cdc_ncm 5-1:1.1: bind() failure [ 1475.036742][ T8] usb 5-1: USB disconnect, device number 37 [ 1475.048643][ T779] cdc_ncm 2-1:1.0: bind() failure [ 1475.128559][ T779] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1475.151629][ T779] cdc_ncm 2-1:1.1: bind() failure [ 1475.175940][ T779] usb 2-1: USB disconnect, device number 34 [ 1475.218477][ T5156] cdc_ncm 6-1:1.0: bind() failure [ 1475.224674][ T5161] cdc_ncm 3-1:1.0: bind() failure [ 1475.256842][ T5156] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1475.275323][ T5161] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1475.289882][ T5156] cdc_ncm 6-1:1.1: bind() failure [ 1475.300298][ T5161] cdc_ncm 3-1:1.1: bind() failure [ 1475.314257][ T5156] usb 6-1: USB disconnect, device number 33 [ 1475.349167][ T5161] usb 3-1: USB disconnect, device number 36 20:54:23 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:23 executing program 1: r0 = syz_clone(0x4020000, 0x0, 0x0, &(0x7f0000004980), &(0x7f00000049c0), &(0x7f0000004a00)="c665d3e71adef3adf917be78cbd275509f94ff6575bf3de6ce62cf2955d5ac3ab22de9bfa76cf1cac7fbc43a7d6979d1e1cc8b7a2523aaa2ed5213fb6dcaa1853f2512c1cffda2e40dde5a17305cf7914ebceecbf3a1cefd58e4d564003682a1a1d6915f060da2dcebc3371e72f37915bc849a99f58244169ff2141054c64674d537fa3f58c35e9886994dadc7248c7c8a25334e4f850472e42faa44f9e79e994d4881197b13d11fc5c8c2bf69d07c90e431460eb54f") pidfd_open(r0, 0x0) 20:54:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x40004) 20:54:24 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) 20:54:24 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'TC'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:54:24 executing program 5: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) 20:54:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000430001014bbd7000fcdbdf251c0000000d"], 0x24}}, 0x0) [ 1475.796788][ T29] audit: type=1804 audit(1702673664.040:252): pid=4012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1756/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1475.913201][ T29] audit: type=1804 audit(1702673664.070:253): pid=4012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1756/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 20:54:24 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) 20:54:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) sendfile(r13, r6, 0x0, 0x8a000) 20:54:24 executing program 1: bpf$MAP_CREATE(0xa003000000000000, &(0x7f0000000100)=@base={0xa, 0x3, 0x9, 0xd7}, 0x48) 20:54:24 executing program 1: bpf$MAP_CREATE(0xa003000000000000, &(0x7f0000000100)=@base={0xa, 0x3, 0x9, 0xd7}, 0x48) [ 1476.298269][T21640] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1476.299533][ T5161] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1476.348164][ T5156] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1476.578098][T21640] usb 6-1: Using ep0 maxpacket: 8 20:54:24 executing program 1: bpf$MAP_CREATE(0xa003000000000000, &(0x7f0000000100)=@base={0xa, 0x3, 0x9, 0xd7}, 0x48) 20:54:24 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1476.608650][ T5161] usb 3-1: Using ep0 maxpacket: 8 [ 1476.613866][ T5156] usb 5-1: Using ep0 maxpacket: 8 20:54:24 executing program 1: bpf$MAP_CREATE(0xa003000000000000, &(0x7f0000000100)=@base={0xa, 0x3, 0x9, 0xd7}, 0x48) [ 1476.758648][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.772550][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.781376][T21640] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.788994][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1476.807492][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1476.817946][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1476.835589][T21640] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1476.840101][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 20:54:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108906, 0x0) [ 1476.868390][ T5161] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.883032][ T5161] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1476.892632][T21640] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1476.894812][ T5156] usb 5-1: language id specifier not provided by device, defaulting to English [ 1476.937172][ T5161] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1477.108475][T21640] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.117717][T21640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.138944][T21640] usb 6-1: Product: ã  [ 1477.146217][T21640] usb 6-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± [ 1477.188088][T21640] usb 6-1: SerialNumber: à § [ 1477.188559][ T5161] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.213084][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.222295][ T29] audit: type=1804 audit(1702673665.470:254): pid=4039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1757/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1477.229159][ T5161] usb 3-1: Product: ã  [ 1477.248850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.274858][ T5161] usb 3-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± [ 1477.279712][ T29] audit: type=1804 audit(1702673665.510:255): pid=4039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1757/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1477.300882][ T5161] usb 3-1: SerialNumber: à § [ 1477.318922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.400310][ T5156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.418145][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.427082][ T5156] usb 5-1: Manufacturer: ä” [ 1477.558357][T21640] cdc_ncm 6-1:1.0: bind() failure [ 1477.578060][T21640] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1477.585054][T21640] cdc_ncm 6-1:1.1: bind() failure [ 1477.612957][T21640] usb 6-1: USB disconnect, device number 34 [ 1477.738469][ T5156] cdc_ncm 5-1:1.0: bind() failure [ 1477.750042][ T5161] cdc_ncm 3-1:1.0: bind() failure [ 1477.756190][ T5156] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1477.771511][ T5161] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1477.778794][ T5156] cdc_ncm 5-1:1.1: bind() failure [ 1477.784135][ T5161] cdc_ncm 3-1:1.1: bind() failure [ 1477.802458][ T5156] usb 5-1: USB disconnect, device number 38 [ 1477.816661][ T5161] usb 3-1: USB disconnect, device number 37 20:54:26 executing program 2: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) 20:54:26 executing program 1: syz_clone(0xa5108200, 0x0, 0x0, 0x0, 0x0, 0x0) 20:54:26 executing program 5: syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2c9534e9e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x0, 0x40}, {0x6, 0x24, 0x1a, 0x56, 0x30}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x3f84010140c9f5b3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x2, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xeb, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x2, 0x80, 0x40, 0x6}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6828fb4cab8d6a8f6e7e5eba8231017e"}]}, 0x5, [{0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "3006e17eb5201c2866fad2d6a27f33cb29aabe6e9d444ce6e0239dd99c8455ff4d7121956e57e1391f3d698a17d02c262749c32cbdde964f16c66be584f438dd35a05d9150e373a5e9ea693bfaaa53c9ab1f9f20db0595c8ab41b671d7981b2b8a1e5385090d3029a3616bb851127d1b4fb8250065020ea540510899a026296f69e6cdfb02865624162ad4c599f79575932e9598f191f06f4e7c1985d877b94531d6546484b395356c0f74455d95325ee3ae0d34e313181607c6d5d1fdca6a25d5cc2d9fa59b89e57bf09e9b86c61c224a1c1f841358a4f7f3bf24abbf"}}, {0x6a, &(0x7f0000000400)=@string={0x6a, 0x3, "5443335179e51222d7d7e4723724ba9155b9fc9e23f6f83a74704cf720cc5fbcea417402f96a11eb309d53bfaf6ad76351bf33c9da462899c4abf04352fcd4ce1bc2fed04a5f9bb2418c8fa60cac2e47d27f219c351390a17f7544e821372b23843f63134dc6719c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x444}}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0xc9226bf8bc131a4e, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xf8, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd55df7dc0f3ba4aeeb3f013efa65514a6d3d2762e1a40c2ed87eae58e565f13"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81e42a1e40ce2560a2b2731d5b146f8b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f6f5f629658d260431dede96c5edd0da26da2e035d0316f7c0b60534f3fd063"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a5ee534c63cd7e0f9a50b72543ddaf57f2f69ae82c8de2b218552b2615bedc32"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20060010) socket$nl_netfilter(0x10, 0x3, 0xc) 20:54:26 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) sendfile(r13, r6, 0x0, 0x8a000) 20:54:26 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x10}, @val={0x8}, @void}}}, 0x24}}, 0x0) 20:54:26 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'TC'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 1478.319020][ T4048] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 20:54:26 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x10) mkdir(&(0x7f0000001640)='./file0\x00', 0x4) 20:54:26 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xc4, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x3, 0x6}}}}}]}}]}}, 0x0) [ 1478.578301][T21640] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1478.618213][ T5161] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1478.668498][ T779] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1478.828122][T21640] usb 6-1: Using ep0 maxpacket: 8 20:54:27 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) sendfile(r13, r6, 0x0, 0x8a000) [ 1478.869743][ T29] audit: type=1804 audit(1702673667.120:256): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1758/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1478.896370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1478.898682][ T5161] usb 3-1: Using ep0 maxpacket: 8 [ 1478.968340][T14758] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1478.968340][ T779] usb 2-1: Using ep0 maxpacket: 8 [ 1478.986714][ T29] audit: type=1804 audit(1702673667.160:257): pid=4061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1758/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1479.013451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1479.088450][T21640] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.104278][T21640] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1479.118563][ T779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.131948][ T779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.144127][ T779] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1479.154886][ T779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1479.158173][T21640] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1479.165452][ T5161] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.191396][ T779] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1479.205123][ T779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1479.220586][ T5161] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1479.231738][ T5161] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1479.260261][T14758] usb 5-1: Using ep0 maxpacket: 16 [ 1479.269474][ T779] usb 2-1: language id specifier not provided by device, defaulting to English [ 1479.369937][T21640] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1479.379805][T14758] usb 5-1: config 1 interface 0 altsetting 196 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1479.390058][T21640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.408893][ T5161] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 20:54:27 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1479.422501][T14758] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1479.429955][T21640] usb 6-1: Product: ã  [ 1479.435655][T21640] usb 6-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± [ 1479.461638][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.481468][T21640] usb 6-1: SerialNumber: à § [ 1479.485163][ T5161] usb 3-1: Product: ã  [ 1479.506468][ T5161] usb 3-1: Manufacturer: ä”儳−ퟗ狤â·é†ºë¥•é»¼ï˜£ã«¸ç´ïŒì° ë±Ÿä‡ªÉ´æ«¹î¬‘鴰뽓檯æ—뽑줳䛚館ꯄä°ï±’컔숛탾彊늛è±êšê°Œäœ®ç¿’鰡ጵê†ç•¿î¡„㜡⌫㾄á£ì™é±± [ 1479.548525][ T5161] usb 3-1: SerialNumber: à § [ 1479.589873][T14758] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1479.603477][T14758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.626450][T14758] usb 5-1: Product: syz [ 1479.647907][T14758] usb 5-1: Manufacturer: syz [ 1479.658451][ T779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1479.670195][ T779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.680551][T14758] usb 5-1: SerialNumber: syz [ 1479.710812][ T779] usb 2-1: Manufacturer: ä” [ 1479.728764][ T4058] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1479.848526][T21640] cdc_ncm 6-1:1.0: bind() failure 20:54:28 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1479.890582][T21640] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1479.916094][ T5161] cdc_ncm 3-1:1.0: bind() failure [ 1479.916297][T21640] cdc_ncm 6-1:1.1: bind() failure [ 1479.945499][T21640] usb 6-1: USB disconnect, device number 35 [ 1479.955329][ T5161] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1480.009145][ T5161] cdc_ncm 3-1:1.1: bind() failure [ 1480.038527][ T779] cdc_ncm 2-1:1.0: bind() failure [ 1480.052250][ T5161] usb 3-1: USB disconnect, device number 38 [ 1480.057331][T14758] usb 5-1: USB disconnect, device number 39 [ 1480.083963][ T779] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1480.111282][ T779] cdc_ncm 2-1:1.1: bind() failure [ 1480.167562][ T779] usb 2-1: USB disconnect, device number 35 20:54:28 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:28 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)='&\x00') 20:54:28 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x6, 0x0, 0x36, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "2c9534e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd}, {0x6, 0x24, 0x1a, 0x56}, [@network_terminal={0x7, 0x24, 0xa, 0x41, 0x0, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3af, 0x0, 0x0, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x0, 0xa1}}}}}}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r0, 0x4b47, 0x0) 20:54:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000300)="f6"}) 20:54:28 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'TC'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 1480.517555][ T4073] sysfs: Unknown parameter '&' 20:54:28 executing program 5: setreuid(0xee01, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) [ 1480.607120][ T4078] binder: 4076:4078 ioctl 40046205 0 returned -22 20:54:28 executing program 2: syz_open_dev$vcsu(&(0x7f0000000000), 0x83, 0x0) 20:54:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, "5a04a4a33a8fa33558d1c5f1f801c7756ab5d7dd529f2a3104dfd258fd41ca45"}, 0x3c) 20:54:29 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:29 executing program 5: setreuid(0xee01, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 20:54:29 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10d881) 20:54:29 executing program 5: setreuid(0xee01, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) [ 1480.898589][T21640] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1480.918429][T14758] usb 2-1: new high-speed USB device number 36 using dummy_hcd 20:54:29 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:29 executing program 2: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x2}, &(0x7f0000000280), &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x80000001]}, 0x8}) [ 1481.169802][T21640] usb 5-1: Using ep0 maxpacket: 8 [ 1481.189384][T14758] usb 2-1: Using ep0 maxpacket: 8 [ 1481.289199][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.309931][T14758] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.361753][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1481.379998][T14758] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.393376][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1481.404542][T14758] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1481.415314][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 1481.425327][T14758] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1481.436269][T14758] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1481.456989][T14758] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1481.509193][T14758] usb 2-1: language id specifier not provided by device, defaulting to English [ 1481.588438][T21640] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1481.597616][T21640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.612098][T21640] usb 5-1: Product: syz [ 1481.616279][T21640] usb 5-1: Manufacturer: syz [ 1481.622765][T21640] usb 5-1: SerialNumber: syz [ 1481.848747][T14758] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1481.860722][T14758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.871647][T14758] usb 2-1: Manufacturer: ä” [ 1481.948422][T21640] cdc_ncm 5-1:1.0: bind() failure [ 1481.957790][T21640] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1481.965653][T21640] cdc_ncm 5-1:1.1: bind() failure [ 1481.981521][T21640] usb 5-1: USB disconnect, device number 40 [ 1482.158542][T14758] cdc_ncm 2-1:1.0: bind() failure [ 1482.167639][T14758] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1482.177071][T14758] cdc_ncm 2-1:1.1: bind() failure [ 1482.188455][T14758] usb 2-1: USB disconnect, device number 36 20:54:30 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x6}]}}}}}]}}, 0x0) 20:54:30 executing program 5: setreuid(0xee01, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 20:54:30 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'TC'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:54:30 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080), 0x0, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:30 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:30 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402dcd4147ae6e4f, 0x1) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 20:54:30 executing program 5: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010) ioprio_set$uid(0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 1482.748175][ T779] usb 3-1: new high-speed USB device number 39 using dummy_hcd 20:54:31 executing program 4: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 20:54:31 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:31 executing program 5: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010) ioprio_set$uid(0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) [ 1482.998504][ T779] usb 3-1: Using ep0 maxpacket: 8 [ 1483.000024][T21640] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1483.153485][ T779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.184007][ T779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.212418][ T779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1483.223288][ T5156] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1483.236584][ T29] audit: type=1804 audit(1702673671.470:258): pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1762/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1483.245373][ T779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1483.263120][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:31 executing program 5: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010) ioprio_set$uid(0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 20:54:31 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1483.318147][T21640] usb 2-1: Using ep0 maxpacket: 8 [ 1483.334583][ T779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1483.352609][ T779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1483.438533][T21640] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.467105][T21640] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.511483][T21640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1483.528377][ T5156] usb 5-1: Using ep0 maxpacket: 8 [ 1483.534509][T21640] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1483.534992][ T779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1483.545302][T21640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1483.582317][ T779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.584199][ T29] audit: type=1804 audit(1702673671.820:259): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1763/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1483.592110][ T779] usb 3-1: Product: syz [ 1483.617165][ C0] vkms_vblank_simulate: vblank timer overrun [ 1483.635338][T21640] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1483.654742][ T779] usb 3-1: Manufacturer: syz [ 1483.659655][ T779] usb 3-1: SerialNumber: syz [ 1483.681948][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.688582][T21640] usb 2-1: language id specifier not provided by device, defaulting to English [ 1483.694134][ T5156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.731041][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1483.749927][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1483.765374][ T5156] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1483.776488][ T5156] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1483.948501][ T779] cdc_ncm 3-1:1.0: bind() failure [ 1483.957074][ T779] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1483.964905][ T779] cdc_ncm 3-1:1.1: bind() failure [ 1483.970385][ T5156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1483.984003][ T779] usb 3-1: USB disconnect, device number 39 [ 1483.990140][ T5156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.003972][ T5156] usb 5-1: Product: syz [ 1484.011303][ T5156] usb 5-1: Manufacturer: syz [ 1484.015946][ T5156] usb 5-1: SerialNumber: syz [ 1484.038735][T21640] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1484.058107][T21640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.066650][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.074343][T21640] usb 2-1: Manufacturer: ä” [ 1484.298539][ T5156] cdc_ncm 5-1:1.0: bind() failure [ 1484.309393][ T5156] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1484.319692][ T5156] cdc_ncm 5-1:1.1: bind() failure [ 1484.332737][ T5156] usb 5-1: USB disconnect, device number 41 20:54:32 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080), 0x0, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:32 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1484.388530][T21640] cdc_ncm 2-1:1.0: bind() failure [ 1484.397809][T21640] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1484.407024][T21640] cdc_ncm 2-1:1.1: bind() failure [ 1484.418491][T21640] usb 2-1: USB disconnect, device number 37 [ 1484.570637][ T29] audit: type=1804 audit(1702673672.820:260): pid=4144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1764/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 20:54:33 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7}]}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, 'TC'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x0, 0x0}]}) 20:54:33 executing program 5: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010) ioprio_set$uid(0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 20:54:33 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:33 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x6}]}}}}}]}}, 0x0) 20:54:33 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080), 0x0, r1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:33 executing program 4: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 1485.163708][ T29] audit: type=1804 audit(1702673673.410:261): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1765/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1485.235807][ T29] audit: type=1804 audit(1702673673.440:262): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1765/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 20:54:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1485.298337][T21640] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1485.311189][ T5156] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1485.358261][ T779] usb 2-1: new high-speed USB device number 38 using dummy_hcd 20:54:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000080)='=', 0x1, 0x800b5eb) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 20:54:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000080)='=', 0x1, 0x800b5eb) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) 20:54:33 executing program 5: inotify_init1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mq_open(&(0x7f00000001c0)='${$\x00\xe7\xdb\xc7\x8buA\xc2\x9e{s\xe1\tp\xb6\x86BUr\n\xf0\xbe\xc1|\x1e\xb3\xe5.\x7f', 0x0, 0x0, 0x0) [ 1485.558518][T21640] usb 5-1: Using ep0 maxpacket: 8 [ 1485.568516][ T5156] usb 3-1: Using ep0 maxpacket: 8 [ 1485.648645][ T779] usb 2-1: Using ep0 maxpacket: 8 [ 1485.688513][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.708787][ T5156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.712310][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:54:34 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1}) sendfile(r13, r6, 0x0, 0x8a000) [ 1485.738279][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1485.773592][ T5156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 20:54:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 1485.781269][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1485.800747][ T779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.802021][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1485.821061][ T5156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1485.853822][ T779] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.868704][ T5156] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1485.888827][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1485.900245][ T779] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1485.921576][ T5156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1485.943278][ T779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1485.965785][ T5156] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1485.982274][ T779] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1486.015485][ T779] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1486.068466][T21640] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1486.078845][ T779] usb 2-1: language id specifier not provided by device, defaulting to English [ 1486.090633][T21640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.102782][T21640] usb 5-1: Product: syz [ 1486.107451][T21640] usb 5-1: Manufacturer: syz [ 1486.113040][T21640] usb 5-1: SerialNumber: syz [ 1486.198963][ T5156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1486.210664][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.220199][ T5156] usb 3-1: Product: syz [ 1486.224542][ T5156] usb 3-1: Manufacturer: syz [ 1486.232023][ T5156] usb 3-1: SerialNumber: syz [ 1486.420692][T21640] cdc_ncm 5-1:1.0: bind() failure [ 1486.433161][T21640] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1486.443308][T21640] cdc_ncm 5-1:1.1: bind() failure [ 1486.476199][T21640] usb 5-1: USB disconnect, device number 42 [ 1486.488533][ T779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1486.508261][ T779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.524009][ T779] usb 2-1: Manufacturer: ä” [ 1486.571401][ T5156] cdc_ncm 3-1:1.0: bind() failure [ 1486.593203][ T5156] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1486.602278][ T5156] cdc_ncm 3-1:1.1: bind() failure [ 1486.617263][ T5156] usb 3-1: USB disconnect, device number 40 [ 1486.828415][ T779] cdc_ncm 2-1:1.0: bind() failure [ 1486.836827][ T779] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1486.844938][ T779] cdc_ncm 2-1:1.1: bind() failure [ 1486.855525][ T779] usb 2-1: USB disconnect, device number 38 20:54:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000080)='=', 0x1, 0x800b5eb) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8) 20:54:35 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:35 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:35 executing program 4: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 20:54:35 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x6}]}}}}}]}}, 0x0) 20:54:35 executing program 1: msgget$private(0x0, 0x4d0) 20:54:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RGETATTR(r0, &(0x7f0000002080)={0xa0}, 0xa0) 20:54:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') write$P9_RFSYNC(r0, 0x0, 0x0) [ 1487.544779][ T29] audit: type=1804 audit(1702673675.770:263): pid=4184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1766/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1487.634279][ T29] audit: type=1804 audit(1702673675.780:264): pid=4184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1766/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1487.660628][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:35 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) [ 1487.695488][T21640] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1487.698163][ T779] usb 3-1: new high-speed USB device number 41 using dummy_hcd 20:54:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r1) 20:54:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_ENTRY(r0, 0x0, 0x0) 20:54:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_ATTR(r0, 0x0, 0x8a) 20:54:36 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) [ 1487.968307][T21640] usb 5-1: Using ep0 maxpacket: 8 [ 1488.008339][ T779] usb 3-1: Using ep0 maxpacket: 8 [ 1488.098715][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.136860][T21640] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.168910][ T779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.188260][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1488.190926][ T779] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.211987][ T779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1488.223357][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1488.244372][ T779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1488.257578][T21640] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 20:54:36 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:36 executing program 1: msgget(0x0, 0x270) [ 1488.269683][ T779] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1488.290916][T21640] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1488.312283][ T779] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1488.416280][ T29] audit: type=1804 audit(1702673676.660:265): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1767/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1488.446809][ T29] audit: type=1804 audit(1702673676.690:266): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1767/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1488.468521][T21640] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1488.482831][T21640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.491262][T21640] usb 5-1: Product: syz [ 1488.495486][T21640] usb 5-1: Manufacturer: syz [ 1488.500653][T21640] usb 5-1: SerialNumber: syz [ 1488.548664][ T779] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1488.560300][ T779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.569280][ T779] usb 3-1: Product: syz [ 1488.574055][ T779] usb 3-1: Manufacturer: syz [ 1488.579170][ T779] usb 3-1: SerialNumber: syz [ 1488.788429][T21640] cdc_ncm 5-1:1.0: bind() failure [ 1488.796748][T21640] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1488.805138][T21640] cdc_ncm 5-1:1.1: bind() failure [ 1488.816001][T21640] usb 5-1: USB disconnect, device number 43 [ 1488.909743][ T779] cdc_ncm 3-1:1.0: bind() failure [ 1488.924701][ T779] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1488.933236][ T779] cdc_ncm 3-1:1.1: bind() failure [ 1488.946447][ T779] usb 3-1: USB disconnect, device number 41 20:54:37 executing program 4: syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 20:54:37 executing program 1: msgget$private(0x0, 0x500) 20:54:37 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1}) sendfile(r13, r6, 0x0, 0x8a000) 20:54:37 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0xffffffffffffffff, 0xfffffffffffffcc6) 20:54:37 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0x6}]}}}}}]}}, 0x0) 20:54:37 executing program 1: msgget$private(0x0, 0x49) 20:54:37 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 20:54:37 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x3000) 20:54:37 executing program 1: msgget(0x1, 0x2a9) [ 1489.630302][ T29] audit: type=1804 audit(1702673677.880:267): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1768/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1489.668314][ T779] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1489.748631][T21640] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1489.756688][ T29] audit: type=1804 audit(1702673677.920:268): pid=4220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1768/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1489.782752][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:38 executing program 5: r0 = msgget(0x2, 0x224) msgctl$IPC_RMID(r0, 0x0) 20:54:38 executing program 1: msgget(0x2, 0x224) [ 1489.979273][ T779] usb 5-1: Using ep0 maxpacket: 8 [ 1490.029008][T21640] usb 3-1: Using ep0 maxpacket: 8 [ 1490.149301][T21640] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.149654][ T779] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.167342][T21640] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.174114][ T779] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.191507][ T779] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1490.196660][T21640] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1490.204550][ T779] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1490.217457][T21640] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1490.222645][ T779] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1490.237654][T21640] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1490.240916][ T779] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1490.259013][T21640] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1490.428311][T21640] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1490.437452][T21640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.446004][T21640] usb 3-1: Product: syz [ 1490.453369][ T779] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1490.457093][T21640] usb 3-1: Manufacturer: syz [ 1490.467168][T21640] usb 3-1: SerialNumber: syz [ 1490.467494][ T779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.486883][ T779] usb 5-1: Product: syz [ 1490.491240][ T779] usb 5-1: Manufacturer: syz [ 1490.496039][ T779] usb 5-1: SerialNumber: syz [ 1490.758510][T21640] cdc_ncm 3-1:1.0: bind() failure [ 1490.776605][T21640] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1490.784662][T21640] cdc_ncm 3-1:1.1: bind() failure [ 1490.794328][T21640] usb 3-1: USB disconnect, device number 42 [ 1490.801492][ T779] cdc_ncm 5-1:1.0: bind() failure [ 1490.820511][ T779] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1490.827384][ T779] cdc_ncm 5-1:1.1: bind() failure [ 1490.848542][ T779] usb 5-1: USB disconnect, device number 44 20:54:39 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:39 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00') 20:54:39 executing program 5: r0 = msgget(0x2, 0x224) msgctl$IPC_RMID(r0, 0x0) 20:54:39 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(0xffffffffffffffff, r6, 0x0, 0x8a000) 20:54:39 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'system.', ')*\x00'}) 20:54:39 executing program 4: shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ea7000/0x2000)=nil) 20:54:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 20:54:39 executing program 5: r0 = msgget(0x2, 0x224) msgctl$IPC_RMID(r0, 0x0) 20:54:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='comm\x00') 20:54:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RGETATTR(r0, 0x0, 0x0) [ 1491.453903][ T29] audit: type=1804 audit(1702673679.700:269): pid=4240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1769/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1491.480388][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/231, &(0x7f0000000100)=0xe7) 20:54:39 executing program 5: r0 = msgget(0x2, 0x224) msgctl$IPC_RMID(r0, 0x0) [ 1491.588576][ T29] audit: type=1804 audit(1702673679.700:270): pid=4240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1769/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 20:54:40 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:40 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 20:54:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RATTACH(r0, 0x0, 0x0) 20:54:40 executing program 5: r0 = semget(0x1, 0x0, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) 20:54:40 executing program 1: semget$private(0x0, 0x7, 0x69) 20:54:40 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(0xffffffffffffffff, r6, 0x0, 0x8a000) 20:54:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) 20:54:40 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 20:54:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_NOTIFY_STORE(r0, 0x0, 0x31) 20:54:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x30, 0x6, 0x0, {0x0, 0x0, 0x7, 0x0, 'fdinfo\x00'}}, 0xfffffffffffffffb) 20:54:40 executing program 1: semget$private(0x0, 0x6, 0x285) 20:54:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x90) [ 1492.436434][ T29] audit: type=1804 audit(1702673680.680:271): pid=4275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1770/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1492.480325][ T29] audit: type=1804 audit(1702673680.730:272): pid=4275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1770/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:54:41 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:41 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(0xffffffffffffffff, r6, 0x0, 0x8a000) 20:54:41 executing program 4: shmget(0x0, 0x2000, 0x4, &(0x7f0000ea6000/0x2000)=nil) 20:54:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='5'], 0x35) 20:54:41 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) 20:54:41 executing program 5: getitimer(0x94e465eddde1d288, 0x0) 20:54:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') write$P9_RFLUSH(r0, 0x0, 0x0) 20:54:41 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') write$P9_RRENAMEAT(r0, 0x0, 0x0) 20:54:41 executing program 4: semget$private(0x0, 0x7, 0x3a9) 20:54:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') write$P9_RLCREATE(r0, 0x0, 0x0) 20:54:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RWALK(r0, 0x0, 0x0) 20:54:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RWRITE(r0, &(0x7f0000000080)={0xb}, 0xb) [ 1493.418151][ T29] audit: type=1804 audit(1702673681.660:273): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1771/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1493.525661][ T29] audit: type=1804 audit(1702673681.670:274): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1771/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:54:42 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ea5000/0x4000)=nil, 0x2000) 20:54:42 executing program 5: r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 20:54:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x31) 20:54:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0x7) 20:54:42 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) dup(r5) r6 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r12 = accept4(r11, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r12, 0xffffffffffffffff, 0x0, 0x8a000) 20:54:42 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:42 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000140)) 20:54:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="03"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) 20:54:42 executing program 5: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x13, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x73}, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:42 executing program 1: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x6) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0xdc, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x1, 0x2, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x0, 0x1}, @fd, @fd}, &(0x7f0000000340)={0x0, 0x20, 0x38}}}, @enter_looper, @enter_looper], 0x22, 0x0, &(0x7f00000004c0)="eceec9a2aa2fb5d9a5e21239647f0245ff7d72b5f5ad98b471d05e90372adbb40ba4"}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) gettid() 20:54:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r1, 0x8dc8bd28350bf393, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 20:54:42 executing program 2: openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() 20:54:42 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000300)={'\x00', 0xc}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:54:42 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) [ 1494.477047][ T4339] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use) [ 1494.490980][ T29] audit: type=1804 audit(1702673682.730:275): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1772/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 20:54:42 executing program 2: syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 20:54:42 executing program 4: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) [ 1494.607178][ T29] audit: type=1804 audit(1702673682.730:276): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1772/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1494.633289][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:43 executing program 4: creat(&(0x7f00000006c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x38e, 0x4) sendfile(r2, r0, 0x0, 0x81) [ 1495.075453][ T29] audit: type=1804 audit(1702673683.320:277): pid=4353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1646533900/syzkaller.bVeYox/2032/bus" dev="sda1" ino=1951 res=1 errno=0 [ 1495.100648][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.117540][ T29] audit: type=1804 audit(1702673683.360:278): pid=4353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1646533900/syzkaller.bVeYox/2032/bus" dev="sda1" ino=1951 res=1 errno=0 20:54:43 executing program 5: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x10) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x4000085) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) read$ptp(0xffffffffffffffff, &(0x7f0000000a40)=""/3, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:54:43 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x83000000) 20:54:43 executing program 2: syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 20:54:43 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) dup(r5) r6 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r12 = accept4(r11, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r12, 0xffffffffffffffff, 0x0, 0x8a000) 20:54:43 executing program 4: syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$eJzs3UFsHNd5B/DvDUmTkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTtu7BK3GlbkUtFyTlyEabuCcfWqBsCvTSFChQpDB6CNhDDu0pBQr0ShS5FQXUNHVdFAX2ECOXwixm9i25kmiLEEVRkn8/QPoPZ7+3O/Peema4b8cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiV3719PhEOuitAADuppfmXhmfdP4HgI+Vs37/BwAAAAAAAAAAAACAe12KIt6LFN94opteq37uGTvTal+5Oj89s3OzQ6lqOVTVl3/GJiZPfvGZZ08918+Pbn+nfTpenjt7uv7i0uXOcnNlpblQn2+3zi8tNHf9DHttf6PjVQfUL1+6snDhwkp98sTJ6x6+Wnt39OGjtalTE68e6dfOT8/MzA3UDI/c9qvf5MPu8HgoirgQKS69815qREQRe++LW7x39tuhaieOVzsxPz1T7chiq9FeLR+c7XdEEVEbaPRCv4/uwljsST3irXLzyw0+Xu7eXKex3Di32KzPNpZXW6utpfZs6m1tqsqLeC5FdCKiO3rz041EEd+MFG9/p5vORcRQvx8+X90YfOvtKfZhH3dhOCJqIxEbxX0wZvew0Sjie5Hi298aj/O5X6tuezriq2UejbhS5rWItTI/G5HKN8ijEe/v8H7i/jIcRfxRpPjJVDct9Me+Oq6c+Vr9y+0LSwO1/ePKfX9+uJvu8WPTWBTRqI743XT7FzsAAAAAANx7ivjTSPHkD4+lTgzOKbbaF+tnG+cWe58K9z/7r+dWm5ubm7XUy/Gcszk7OddyrufcyNnNWSty+5yzOTs513Ku59zI2c1ZG8rtc87m7ORcy7mecyNnN2dtOLfPOZuzk3Mt53rOjZzd4QMcLgAAAAAAAADYwaEo4uuR4ulfer26rziq+9I/OXXqlRO/PnjP+OO3eJ6y9kRErBe7uyf3oXzr8GyaTemA7iGmd//fH+T7//7woDcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4UEUU8VSkeP373RQpIuoRr0Uvr40e9NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3wlgq4v1I8edfGat+3igifjsiPtj8YDMirn2weacd9B4DAAAAAAAAwAMoFfFGpHjqlW6qRcTV2rujDx+tTZ2aePXIUAxFKksG61+eO3u6/uLS5c5yc2WluVCfb7fOLy00d/tyY2da7StX56dn9mVnbunQPm//obEXlzpvLLcu/u7qjo8fHjt9bmV1uXF+54fjUBQR9cE1x6sNnp+eqTZ6sdVoV01n0263GAAAAAAAAICPg5FUxAeR4u2/eWdr3nm4N+c/fGPtd78UUeTl6Tz/vDUNXX1v4BPV9wZ6y5+cOvUbk58ZXN5xyvp4NaFen5+emZkbWD08cnPpWH7d8b3tMgPK8V+NFH/8l/X0ZF53/fgPbdV+9/e3x/utG5/oQ8Z8r+P/swPrytdMqYi/ixQ/95uPx5PVdh6Om74zkeu+Eil+a/2JXBcPlXVP5ccfqf4eu9BabI6XtVcjxT9eub726Vz7qe3aiV137H2iHP+nIsX//M76Vt/k8c8jsD1qg+P/mRvfHfs0/o8MrKvl1/35O7PrRMTKG29eaiwuNpctWLBgYWvhoI9M3A3l+f/rkeIf/uxft6538vn/Z3o/bV///fSb2+f/qRufaJ/O/58aWDeVr0ZGhiPGVi93Rh6LGFt5480vtC43LjYvNtsnTz3/7OT48xPjJ0ce6l/cbS/tua8eROX4/16k+N6P/jY+l9ddf/238/X/4RufaJ/G/9GBdYevu17Z866Tx///IsU/T/8gjuV1H3X93//9/1i+CN+6Pt+n8T8ysK76He8TEb8wsO7YkYgH7pcyAAAAuMNSKuIHeT51/Bbzqf8UKd7871/MdeloWfdCfrxW/T320lL7C6cXF5fON1Yb5xab9blO43yzbPvjSNH96ydy26KaX+3PN/fmeLfnYv8lUjz/a/3a3lxs/7OpR7drJ8raE5HiT166vrb/OcaR7drJsvbfIsXEqzvXHt2uPVnW/lek+Olf1Pu1h8vaL+Xax7ZrT5xfWlzYh2EBAAAAAIA9GUlFPBsp/v7kcOp/vr2b73/e9KH3Pn3/77GBdQt36X6VPXcqANzjyvP/sfKs/st/tTWXf/35f/v/AzB4/r/R4L8b8GHLt3P+r92Z3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD42ElRxFKk+MYT3XRttPy5Z+xMq33l6vz0zM7NDqWq5VBVX/4Zm5g8+cVnnj31XD8/uv2d9ul4ee7s6fqLS5c7y82VleZCfb7dOr+00Nz1M+y1/Y2OVx1Qv3zpysKFCyv1yRMnr3v4au3d0YeP1qZOTbx6pF87Pz0zMzdQMzxy269+k/Qh6x+KIv43Ulx6573076MRRey9L27x3tlvh6qdOF7txPz0TLUji61Ge7V8cLbfEUVEbaDRC/0+ugtjcfve2loqyg0+Xu7eXKex3Di32KzPNpZXW6utpfZs6m1tuT/1KOK5FNGJiO7ozc84EkWMRIq3v9NNPxqNGOr3w+dfmntlfPLWm1Tc0R3cteGIqI1EbBT3+pjd20ajiGcixbe/NR7/Mdrr16rbno74aplHI66UeS1irczPRqTyDfJoxPs7vJ+4vwxHEY9Eip9MddOPR/PYV8eVM1+rf7l9YWmgtn9cue/PD3fTPX5sGosi3quO+N30n/57BgAAAAB4gBTxeKR48ofHUjU/uDWn2GpfrJ9tnFvsfazf/+y/nlttbm5u1lIvx3PO5uzkXMu5nnMjZzdnrcjtc87m7ORcy7mecyNnN2dtKLfPOZuzk3Mt53rOjZzdnLXh3D7nbM5OzrWc6zk3cnaHD3K8AAAAAAAAAHZWRBGfixSvf7+bNkd7E7yvRS+vuR/ogff/AQAA///PjVta") r0 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 20:54:43 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:43 executing program 1: syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 20:54:43 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 1495.426099][ T4363] loop4: detected capacity change from 0 to 2048 [ 1495.456764][ T29] audit: type=1804 audit(1702673683.690:279): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1773/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1495.483310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.512468][ T4363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1495.552568][ T29] audit: type=1804 audit(1702673683.700:280): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1773/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1495.578649][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x20, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 20:54:43 executing program 5: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 20:54:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000010c0)) [ 1495.725409][ T4371] loop1: detected capacity change from 0 to 2048 20:54:44 executing program 4: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000003c0)={0x0, 0x2}, 0x18) 20:54:44 executing program 2: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x13, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x71}, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast2, {[@timestamp={0x44, 0x4}]}}}}}) [ 1495.847509][ T4371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:54:44 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) dup(r5) r6 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r10, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r12 = accept4(r11, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r12, 0xffffffffffffffff, 0x0, 0x8a000) 20:54:44 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000001080)='./binderfs/binder0\x00', 0x801, 0x0) 20:54:44 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x80001, 0x0) read$ptp(r0, 0x0, 0x0) 20:54:44 executing program 1: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x76}, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:44 executing program 5: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300), 0x48) 20:54:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14}, 0x14}}, 0x0) 20:54:44 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r1, 0x8dc8bd28350bf393, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) 20:54:44 executing program 4: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}, 0x0, 0x0, 0x0) 20:54:44 executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) [ 1496.528254][ T4404] fuse: Bad value for 'fd' 20:54:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 20:54:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r1, 0x8dc8bd28350bf393, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) [ 1496.691788][ T29] audit: type=1804 audit(1702673684.940:281): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1774/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 20:54:45 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x0) 20:54:45 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000e00)) 20:54:45 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xac940) 20:54:45 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000005c0)) 20:54:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r1, 0x8dc8bd28350bf393, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) [ 1496.818499][ T29] audit: type=1804 audit(1702673684.940:282): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1774/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 20:54:45 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000005c0)={0x15}) 20:54:45 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:45 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{}, 0x0, 0x0}, 0x20) 20:54:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r1, 0x8dc8bd28350bf393, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) 20:54:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@empty}, 0x14) 20:54:45 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000005c0)={0x15}) 20:54:45 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x0) 20:54:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x83000000) 20:54:45 executing program 4: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x9, 0x2, &(0x7f0000003200)=@raw=[@call, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:45 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000005c0)={0x15}) 20:54:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000440)={0x3c, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffffc0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}}, 0x0) 20:54:45 executing program 1: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x1d, 0x2, &(0x7f0000003200)=@raw=[@call, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:45 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000005c0)={0x15}) [ 1497.637328][ T4447] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 20:54:46 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000440)={0x3c, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffffc0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}}, 0x0) 20:54:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000016c0)=ANY=[@ANYBLOB="a0070000", @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="6007088050"], 0x7a0}}, 0x0) 20:54:46 executing program 1: mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) 20:54:46 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x66380, 0x0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000d00), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x8, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r11, 0x400, 0x7f, 0x1, 0x3, [], [0x1, 0x6, 0x3ff, 0x6], [0x5, 0x100, 0x2, 0x4426], [0xff, 0x3, 0x8, 0x3]}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x2f) r13 = accept4(r12, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x22500, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000080)=[0x0], 0x1, r1}) sendfile(r13, r6, 0x0, 0x0) 20:54:46 executing program 4: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x9, 0x2, &(0x7f0000003200)=@raw=[@call, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:46 executing program 1: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x468, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) [ 1498.474874][ T4468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 20:54:46 executing program 2: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x13, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x2}, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000440)={0x3c, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffffc0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}}, 0x0) 20:54:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) [ 1498.664686][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 20:54:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x20a02) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000300)="0e", 0x20000301) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) socket$unix(0x1, 0x5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0c0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 20:54:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000440)={0x3c, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffffc0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}}, 0x0) [ 1498.753358][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1498.753375][ T29] audit: type=1804 audit(1702673687.000:285): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1776/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1498.844871][ T29] audit: type=1804 audit(1702673687.040:286): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1776/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1498.896839][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 20:54:47 executing program 5: syz_clone(0x44000000, 0x0, 0x1b1251f000, 0x0, 0x0, 0x0) 20:54:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x20, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 20:54:47 executing program 4: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x9, 0x2, &(0x7f0000003200)=@raw=[@call, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030200000000000000000f0000000c"], 0x20}}, 0x0) 20:54:47 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x20a02) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000300)="0e", 0x20000301) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) socket$unix(0x1, 0x5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0c0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 20:54:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x20, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 20:54:47 executing program 0: syz_usb_connect(0x0, 0x219, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x9e, 0x16, 0x96, 0x40, 0x1266, 0x1008, 0xe0e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x207, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xe1, 0xca, 0x8c, 0x0, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe6, 0x0, "8b722bfef47c767e989b9bbe2541e44c657560ab8c70e98e3b0c5aae426eb7d36a1f73ad72551b9f5f67595549766e24414976197bc7a33f64f0741615a6a7ded78efd273bb00179b31886adebb1cf68d2db90214f6e89ddf9efb5934fef71cfb5055bde9ea5655dc2e50ad5b056a17bc6c9a884589e80dda55bd0afa46c0e7f36f7d060683726062edd2b49288642293776439f2238178dcc14d8a489a7d906abbf4a2a52b90dbd221f0e6e88b4c3adedc3ea86140a290c8b6eda1c227b34a392f1f113cc1da1a4da4d51138b1b9a65a7ad4bb3d03846685c6f5ed0ac266c33a0501d70"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xa2, 0x0, "1ed536365844afa17ce83fa4743d86412c70beba4df19b0c90622e3298c665634320a86d7d7756e051e3f0b0756ffcfa691a340a419ec4c6417a66555e45d69a6cdfbb0b1c7724d467e2d88c0c154c5b36bd0f5bf5705fc9b42b8adbe95010cd151a487db0ffe052a66553f143e55aa916ef887bba00599f08220c0cf54abf957ba78f6b415013b9ff806600bd4a2420c79658924cacc26d2382c76cadaff8be"}, @generic={0x2}]}}]}}]}}]}}, 0x0) 20:54:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x20, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) [ 1499.744228][ T29] audit: type=1804 audit(1702673687.990:287): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1777/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 20:54:48 executing program 4: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x9, 0x2, &(0x7f0000003200)=@raw=[@call, @exit], &(0x7f0000000000)='GPL\x00'}, 0x80) 20:54:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 20:54:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x20, r1, 0x203, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) [ 1499.879663][ T5156] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1499.896695][ T29] audit: type=1804 audit(1702673688.030:288): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1777/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 20:54:48 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x0, 0x2011, 0xffffffffffffffff, @link_id}, 0x20) 20:54:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x14, r1, 0x203}, 0x14}}, 0x0) 20:54:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x83000000) 20:54:48 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) [ 1500.318320][ T5156] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1500.347475][ T5156] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 20:54:48 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) 20:54:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 20:54:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x20a02) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000300)="0e", 0x20000301) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) socket$unix(0x1, 0x5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0c0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) [ 1500.578905][ T5156] usb 1-1: New USB device found, idVendor=1266, idProduct=1008, bcdDevice=e0.e7 [ 1500.602194][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.620718][ T5156] usb 1-1: Product: syz [ 1500.625081][ T5156] usb 1-1: Manufacturer: syz [ 1500.631303][ T5156] usb 1-1: SerialNumber: syz [ 1500.649421][ T5156] usb 1-1: config 0 descriptor?? [ 1500.903713][T21640] usb 1-1: USB disconnect, device number 29 20:54:49 executing program 0: syz_usb_connect(0x0, 0x219, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x9e, 0x16, 0x96, 0x40, 0x1266, 0x1008, 0xe0e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x207, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xe1, 0xca, 0x8c, 0x0, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe6, 0x0, "8b722bfef47c767e989b9bbe2541e44c657560ab8c70e98e3b0c5aae426eb7d36a1f73ad72551b9f5f67595549766e24414976197bc7a33f64f0741615a6a7ded78efd273bb00179b31886adebb1cf68d2db90214f6e89ddf9efb5934fef71cfb5055bde9ea5655dc2e50ad5b056a17bc6c9a884589e80dda55bd0afa46c0e7f36f7d060683726062edd2b49288642293776439f2238178dcc14d8a489a7d906abbf4a2a52b90dbd221f0e6e88b4c3adedc3ea86140a290c8b6eda1c227b34a392f1f113cc1da1a4da4d51138b1b9a65a7ad4bb3d03846685c6f5ed0ac266c33a0501d70"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xa2, 0x0, "1ed536365844afa17ce83fa4743d86412c70beba4df19b0c90622e3298c665634320a86d7d7756e051e3f0b0756ffcfa691a340a419ec4c6417a66555e45d69a6cdfbb0b1c7724d467e2d88c0c154c5b36bd0f5bf5705fc9b42b8adbe95010cd151a487db0ffe052a66553f143e55aa916ef887bba00599f08220c0cf54abf957ba78f6b415013b9ff806600bd4a2420c79658924cacc26d2382c76cadaff8be"}, @generic={0x2}]}}]}}]}}]}}, 0x0) 20:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 20:54:49 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan4\x00'}) 20:54:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x18, r1, 0x203, 0x0, 0x0, {0x8}, [@HEADER={0x4}]}, 0x18}}, 0x0) 20:54:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x20a02) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000300)="0e", 0x20000301) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) socket$unix(0x1, 0x5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0c0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 20:54:49 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x10, r0, 0x83000000) 20:54:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000600)) 20:54:49 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 20:54:49 executing program 5: syz_open_dev$vcsn(&(0x7f0000000980), 0x1, 0x0) [ 1501.673530][ T29] audit: type=1804 audit(1702673689.920:289): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1778/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1501.700298][ C0] vkms_vblank_simulate: vblank timer overrun 20:54:50 executing program 4: syz_usb_connect(0x0, 0x2b8, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x9e, 0x16, 0x96, 0x40, 0x1266, 0x1008, 0xe0e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xe1, 0xca, 0x8c, 0x0, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe6, 0x0, "8b722bfef47c767e989b9bbe2541e44c657560ab8c70e98e3b0c5aae426eb7d36a1f73ad72551b9f5f67595549766e24414976197bc7a33f64f0741615a6a7ded78efd273bb00179b31886adebb1cf68d2db90214f6e89ddf9efb5934fef71cfb5055bde9ea5655dc2e50ad5b056a17bc6c9a884589e80dda55bd0afa46c0e7f36f7d060683726062edd2b49288642293776439f2238178dcc14d8a489a7d906abbf4a2a52b90dbd221f0e6e88b4c3adedc3ea86140a290c8b6eda1c227b34a392f1f113cc1da1a4da4d51138b1b9a65a7ad4bb3d03846685c6f5ed0ac266c33a0501d70"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xa4, 0x0, "1ed536365844afa17ce83fa4743d86412c70beba4df19b0c90622e3298c665634320a86d7d7756e051e3f0b0756ffcfa691a340a419ec4c6417a66555e45d69a6cdfbb0b1c7724d467e2d88c0c154c5b36bd0f5bf5705fc9b42b8adbe95010cd151a487db0ffe052a66553f143e55aa916ef887bba00599f08220c0cf54abf957ba78f6b415013b9ff806600bd4a2420c79658924cacc26d2382c76cadaff8be7238"}, @generic={0x98, 0x0, "0280f35f2ef95d7163bdf007aef62b9dbcbeb99e803163ddda51bf8994e613cb146bbb912bb61d120048b365262e7d9ad510fdf80e70bfb846baba4d2a4e510060888784dd6d5b7be0e2c7de55da72418d4618e14b5101ec53d1d0bc2a7521aec3606888fa6c40c33b94f93d4f8551d289ba6b3ee60a99cbf09b60a9c24ab1fd70ae688f96c5cb7a46af9c5ba2a009d7261ae7ebb39b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) [ 1501.745604][ T29] audit: type=1804 audit(1702673689.960:290): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1778/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 20:54:50 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) [ 1501.789064][T21640] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1502.168085][T32503] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1502.183574][T21640] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1502.191971][T21640] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1502.361071][T21640] usb 1-1: New USB device found, idVendor=1266, idProduct=1008, bcdDevice=e0.e7 [ 1502.381010][T21640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.394112][T21640] usb 1-1: Product: syz [ 1502.401611][T21640] usb 1-1: Manufacturer: syz [ 1502.409812][T21640] usb 1-1: SerialNumber: syz [ 1502.439945][T21640] usb 1-1: config 0 descriptor?? [ 1502.528543][T32503] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1502.535888][T32503] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1502.708338][T32503] usb 5-1: New USB device found, idVendor=1266, idProduct=1008, bcdDevice=e0.e7 [ 1502.717584][T32503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.725933][T32503] usb 5-1: Product: syz [ 1502.738086][T32503] usb 5-1: Manufacturer: syz [ 1502.742746][T32503] usb 5-1: SerialNumber: syz [ 1502.761190][T32503] usb 5-1: config 0 descriptor?? [ 1502.786937][T21640] usb 1-1: USB disconnect, device number 30 [ 1503.015763][T21640] usb 5-1: USB disconnect, device number 45 20:54:51 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 20:54:51 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 20:54:51 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 20:54:51 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:51 executing program 0: syz_usb_connect(0x0, 0x219, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x9e, 0x16, 0x96, 0x40, 0x1266, 0x1008, 0xe0e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x207, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xe1, 0xca, 0x8c, 0x0, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe6, 0x0, "8b722bfef47c767e989b9bbe2541e44c657560ab8c70e98e3b0c5aae426eb7d36a1f73ad72551b9f5f67595549766e24414976197bc7a33f64f0741615a6a7ded78efd273bb00179b31886adebb1cf68d2db90214f6e89ddf9efb5934fef71cfb5055bde9ea5655dc2e50ad5b056a17bc6c9a884589e80dda55bd0afa46c0e7f36f7d060683726062edd2b49288642293776439f2238178dcc14d8a489a7d906abbf4a2a52b90dbd221f0e6e88b4c3adedc3ea86140a290c8b6eda1c227b34a392f1f113cc1da1a4da4d51138b1b9a65a7ad4bb3d03846685c6f5ed0ac266c33a0501d70"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xa2, 0x0, "1ed536365844afa17ce83fa4743d86412c70beba4df19b0c90622e3298c665634320a86d7d7756e051e3f0b0756ffcfa691a340a419ec4c6417a66555e45d69a6cdfbb0b1c7724d467e2d88c0c154c5b36bd0f5bf5705fc9b42b8adbe95010cd151a487db0ffe052a66553f143e55aa916ef887bba00599f08220c0cf54abf957ba78f6b415013b9ff806600bd4a2420c79658924cacc26d2382c76cadaff8be"}, @generic={0x2}]}}]}}]}}]}}, 0x0) 20:54:51 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 20:54:51 executing program 2: r0 = gettid() r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r1) 20:54:51 executing program 2: r0 = gettid() r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r1) 20:54:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x20a02) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) write$hidraw(r1, &(0x7f0000000300)="0e", 0x20000301) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) socket$unix(0x1, 0x5, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0c0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x44000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) [ 1503.444438][ T29] audit: type=1804 audit(1702673691.690:291): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1779/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:54:51 executing program 2: r0 = gettid() r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r1) [ 1503.502539][ T29] audit: type=1804 audit(1702673691.730:292): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1779/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:54:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_VLAN_ID={0x6}]}, 0x28}}, 0x0) 20:54:51 executing program 1: setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) 20:54:51 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) 20:54:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x18, r1, 0x203, 0x0, 0x0, {0xa}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 1503.668176][T21640] usb 1-1: new high-speed USB device number 31 using dummy_hcd 20:54:52 executing program 2: r0 = gettid() r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r1) [ 1504.040372][T21640] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1504.054946][T21640] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 20:54:52 executing program 2: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@blksize}, {@allow_other}, {}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}]}}, 0x0, 0x0, 0x0) [ 1504.216268][ T4605] fuse: Bad value for 'fd' [ 1504.240780][T21640] usb 1-1: New USB device found, idVendor=1266, idProduct=1008, bcdDevice=e0.e7 [ 1504.262772][T21640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.276543][T21640] usb 1-1: Product: syz [ 1504.284548][T21640] usb 1-1: Manufacturer: syz [ 1504.289433][T21640] usb 1-1: SerialNumber: syz [ 1504.296559][T21640] usb 1-1: config 0 descriptor?? [ 1504.568524][T21640] usb 1-1: USB disconnect, device number 31 20:54:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r1, 0x8dc8bd28350bf393, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}}, 0x0) 20:54:53 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) 20:54:53 executing program 5: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 20:54:53 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000016c0)=ANY=[@ANYBLOB="a0070000", @ANYRES16=r1, @ANYRES16], 0x7a0}}, 0x0) 20:54:53 executing program 0: syz_usb_connect(0x0, 0x219, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x9e, 0x16, 0x96, 0x40, 0x1266, 0x1008, 0xe0e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x207, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xe1, 0xca, 0x8c, 0x0, [@uac_control], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe6, 0x0, "8b722bfef47c767e989b9bbe2541e44c657560ab8c70e98e3b0c5aae426eb7d36a1f73ad72551b9f5f67595549766e24414976197bc7a33f64f0741615a6a7ded78efd273bb00179b31886adebb1cf68d2db90214f6e89ddf9efb5934fef71cfb5055bde9ea5655dc2e50ad5b056a17bc6c9a884589e80dda55bd0afa46c0e7f36f7d060683726062edd2b49288642293776439f2238178dcc14d8a489a7d906abbf4a2a52b90dbd221f0e6e88b4c3adedc3ea86140a290c8b6eda1c227b34a392f1f113cc1da1a4da4d51138b1b9a65a7ad4bb3d03846685c6f5ed0ac266c33a0501d70"}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xa2, 0x0, "1ed536365844afa17ce83fa4743d86412c70beba4df19b0c90622e3298c665634320a86d7d7756e051e3f0b0756ffcfa691a340a419ec4c6417a66555e45d69a6cdfbb0b1c7724d467e2d88c0c154c5b36bd0f5bf5705fc9b42b8adbe95010cd151a487db0ffe052a66553f143e55aa916ef887bba00599f08220c0cf54abf957ba78f6b415013b9ff806600bd4a2420c79658924cacc26d2382c76cadaff8be"}, @generic={0x2}]}}]}}]}}]}}, 0x0) 20:54:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x18, r1, 0x203, 0x0, 0x0, {0x5}, [@HEADER={0x4}]}, 0x18}}, 0x0) 20:54:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) 20:54:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 20:54:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000e00)) [ 1505.204948][ T4613] netlink: 1932 bytes leftover after parsing attributes in process `syz-executor.2'. 20:54:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 20:54:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001240)) 20:54:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1008000, &(0x7f0000000440)=ANY=[@ANYBLOB="64656275672c6f726c6f762c6e6f646973636172642c746573745f64756d6d795f656e6372797074696f6e2c98cf6a6f75726e616c5f636865636b0a756d2c696e69745f697461626c653d3078303030303230303030303030303030302c7374726970653d30f7c019f29278303030303030303030303030333039362c6572726f72733d636f6e74696e"], 0x1, 0x5ba, &(0x7f0000001bc0)="$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") 20:54:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) [ 1505.309842][ T29] audit: type=1804 audit(1702673693.540:293): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1780/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 20:54:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x0, 0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 1505.402980][ T29] audit: type=1804 audit(1702673693.560:294): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1780/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1505.478582][ T4631] loop1: detected capacity change from 0 to 1024 [ 1505.486262][ T4631] EXT4-fs: Ignoring removed orlov option [ 1505.508192][T32503] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1505.681045][ T4631] ext4: Unknown parameter '˜Ïjournal_check [ 1505.681045][ T4631] um' [ 1505.878377][T32503] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1505.889653][T32503] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 20:54:54 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:54 executing program 4: openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) [ 1506.058329][T32503] usb 1-1: New USB device found, idVendor=1266, idProduct=1008, bcdDevice=e0.e7 [ 1506.067450][T32503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.081735][ T29] audit: type=1804 audit(1702673694.330:295): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1781/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1506.108593][T32503] usb 1-1: Product: syz [ 1506.112805][T32503] usb 1-1: Manufacturer: syz [ 1506.117448][T32503] usb 1-1: SerialNumber: syz [ 1506.136515][T32503] usb 1-1: config 0 descriptor?? [ 1506.149864][ T29] audit: type=1804 audit(1702673694.330:296): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1781/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1506.446032][T21640] usb 1-1: USB disconnect, device number 32 20:54:55 executing program 2: socket$inet6(0xa, 0x2, 0x8) 20:54:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8907, 0x0) 20:54:55 executing program 1: r0 = creat(&(0x7f00000006c0)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x6}]) 20:54:55 executing program 4: mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100030, 0xffffffffffffffff, 0x83000000) 20:54:55 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) statx(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) 20:54:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x4000085) 20:54:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80108907, 0x0) 20:54:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@dev, @remote, @rand_addr=' \x01\x00', 0x0, 0x0, 0x8001}) 20:54:55 executing program 4: socketpair(0x0, 0x3e0601841121434a, 0x0, 0x0) 20:54:55 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000380)='t', 0x1}, {0x0}], 0x2, 0x0) [ 1507.157668][ T29] audit: type=1804 audit(1702673695.400:297): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1782/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 20:54:55 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x3009}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) [ 1507.281685][ T29] audit: type=1804 audit(1702673695.440:298): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1782/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 20:54:55 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}}}}]}}, 0x0) 20:54:55 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 20:54:55 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_id}, 0x20) [ 1507.369217][ T29] audit: type=1326 audit(1702673695.620:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe35727cba9 code=0x0 20:54:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) [ 1507.471368][ T29] audit: type=1326 audit(1702673695.720:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4673 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc30d47cba9 code=0x0 [ 1507.672384][ T8] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1507.768282][ T5162] usb 3-1: new high-speed USB device number 43 using dummy_hcd 20:54:56 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20:54:56 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1507.918227][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 1508.038365][ T5162] usb 3-1: Using ep0 maxpacket: 8 [ 1508.038378][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.055445][ T29] audit: type=1804 audit(1702673696.300:301): pid=4687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1783/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1508.055532][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.094597][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1508.105792][ T29] audit: type=1804 audit(1702673696.350:302): pid=4687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1783/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1508.106556][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1508.145712][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1508.156005][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 20:54:56 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000380)='t', 0x1}, {0x0}], 0x2, 0x0) [ 1508.198730][ T8] usb 6-1: language id specifier not provided by device, defaulting to English [ 1508.213999][ T4687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1508.224135][ T5162] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.248617][T31840] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1508.261591][ T5162] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1508.279583][ T5162] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1508.289940][ T5162] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 20:54:56 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) keyctl$link(0x8, 0x0, 0x0) [ 1508.306734][ T5162] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1508.328344][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.346157][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:54:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f00000002c0)="d3", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) [ 1508.363744][ T8] usb 6-1: Manufacturer: 〉 [ 1508.369280][ T8] usb 6-1: SerialNumber: syz 20:54:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000380)='t', 0x1}, {&(0x7f0000000480)="ba", 0x1}], 0x2, 0x0) [ 1508.508156][T31840] usb 5-1: Using ep0 maxpacket: 8 [ 1508.529358][ T5162] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.540411][ T5162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.549634][ T5162] usb 3-1: Product: syz [ 1508.554311][ T5162] usb 3-1: Manufacturer: syz [ 1508.559739][ T5162] usb 3-1: SerialNumber: syz [ 1508.628395][T31840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.646384][T31840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.657944][T31840] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1508.662665][ T8] cdc_ncm 6-1:1.0: bind() failure [ 1508.669432][T31840] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1508.686138][ T8] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1508.691574][T31840] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1508.703617][ T8] cdc_ncm 6-1:1.1: bind() failure [ 1508.708641][T31840] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1508.725135][ T8] usb 6-1: USB disconnect, device number 36 20:54:57 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1508.858651][ T5162] cdc_ncm 3-1:1.0: bind() failure [ 1508.871384][ T5162] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1508.886398][ T5162] cdc_ncm 3-1:1.1: bind() failure [ 1508.900827][ T5162] usb 3-1: USB disconnect, device number 43 [ 1508.968308][T31840] usb 5-1: string descriptor 0 read error: -22 [ 1508.977543][T31840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.992068][T31840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.074210][ T4700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:54:57 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000380)='t', 0x1}, {0x0}], 0x2, 0x0) [ 1509.318726][T31840] cdc_ncm 5-1:1.0: bind() failure [ 1509.327492][T31840] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1509.343456][T31840] cdc_ncm 5-1:1.1: bind() failure 20:54:57 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:54:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) 20:54:57 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) [ 1509.386040][T31840] usb 5-1: USB disconnect, device number 46 20:54:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x17, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x0, 0x0, "4db36c299a26f602cf2768d5526f9f6ec26c9bd73c2b731ef55efa730674102c2a696e52442a9d8187114cf0cd6f4f7cf07b04000000ba31cb071574711c0300"}, 0xd8) 20:54:58 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20:54:58 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:54:58 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x5}}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 20:54:58 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) 20:54:58 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:54:58 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:54:58 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:54:58 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000380)='t', 0x1}, {0x0}], 0x2, 0x0) 20:54:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1510.123644][ T4726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1510.151646][T31840] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1510.163828][ T5156] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1510.168147][ T8] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1510.440517][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1510.448384][T31840] usb 6-1: Using ep0 maxpacket: 8 [ 1510.453636][ T5156] usb 3-1: Using ep0 maxpacket: 8 [ 1510.480850][T21640] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1510.570118][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.581951][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.592374][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1510.598642][ T5156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.604266][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1510.614052][T31840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.624508][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1510.646607][ T5156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.653804][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1510.659305][T31840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.682657][ T5156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1510.697667][ T5156] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1510.712053][T31840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1510.723513][ T5156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1510.734579][T31840] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1510.738087][T21640] usb 2-1: Using ep0 maxpacket: 8 [ 1510.745423][ T5156] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1510.759388][T31840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 20:54:59 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1510.772088][T31840] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1510.818600][T31840] usb 6-1: language id specifier not provided by device, defaulting to English [ 1510.898621][T21640] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1510.915501][T21640] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1510.925832][ T8] usb 5-1: string descriptor 0 read error: -22 [ 1510.934847][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1510.941583][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1510.941596][ T29] audit: type=1804 audit(1702673699.180:311): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1786/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1510.956342][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.976986][ T5156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1510.977015][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.977035][ T5156] usb 3-1: Product: syz [ 1510.977052][ T5156] usb 3-1: Manufacturer: syz [ 1510.977068][ T5156] usb 3-1: SerialNumber: syz [ 1510.978811][T31840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 20:54:59 executing program 0: timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, 0x0, 0x0) [ 1511.047017][ T29] audit: type=1804 audit(1702673699.290:312): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1786/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1511.075942][T31840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.092053][T31840] usb 6-1: Product: syz [ 1511.104108][T31840] usb 6-1: SerialNumber: syz 20:54:59 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1511.202532][ T4741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.212374][T21640] usb 2-1: string descriptor 0 read error: -22 [ 1511.224881][T21640] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1511.234407][T21640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.308304][ T5156] cdc_ncm 3-1:1.0: bind() failure [ 1511.324026][ T5156] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1511.332487][ T5156] cdc_ncm 3-1:1.1: bind() failure [ 1511.338468][ T8] cdc_ncm 5-1:1.0: bind() failure [ 1511.343698][ T5156] usb 3-1: USB disconnect, device number 44 [ 1511.382725][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1511.401656][ T8] cdc_ncm 5-1:1.1: bind() failure [ 1511.428608][T31840] cdc_ncm 6-1:1.0: bind() failure [ 1511.431058][ T8] usb 5-1: USB disconnect, device number 47 [ 1511.441778][T31840] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1511.452024][T31840] cdc_ncm 6-1:1.1: bind() failure [ 1511.475457][T31840] usb 6-1: USB disconnect, device number 37 [ 1511.481759][ T5161] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1511.528276][T21640] cdc_ncm 2-1:1.0: bind() failure [ 1511.554290][T21640] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1511.564646][T21640] cdc_ncm 2-1:1.1: bind() failure [ 1511.586061][T21640] usb 2-1: USB disconnect, device number 39 [ 1511.758101][ T5161] usb 1-1: Using ep0 maxpacket: 8 20:55:00 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 20:55:00 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) 20:55:00 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1511.888831][ T5161] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1511.900230][ T5161] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1511.910769][ T5161] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1511.920848][ T5161] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 20:55:00 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x84, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b3d8d070f2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1f}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0xc1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x0, 0x40, 0xff, 0x5, 0x40, 0x1}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000f40)=@string={0x4, 0x3, "da7d"}}, {0xdd, &(0x7f0000001080)=@string={0xdd, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49adbec62e455a6ba420bc97d35ece8a18f3d0539"}}]}) syz_emit_ethernet(0xd41, &(0x7f0000000000)={@link_local, @random="3a2717f5324b", @void, {@x25={0x805, {0x0, 0x0, 0x0, "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"}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/partitions\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 20:55:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) dup2(r1, r0) 20:55:00 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0x4, &(0x7f0000001040)=@lang_id={0x4}}]}) [ 1512.086422][ T29] audit: type=1804 audit(1702673700.330:313): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1787/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1512.184991][ T4748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1512.187431][ T29] audit: type=1804 audit(1702673700.370:314): pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1787/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1512.278456][ T5161] usb 1-1: string descriptor 0 read error: -22 [ 1512.284994][ T5161] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1512.296324][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.304917][ T5162] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1512.312885][T31840] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1512.479205][ T27] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1512.487154][ T5156] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1512.578156][ T5162] usb 5-1: Using ep0 maxpacket: 8 [ 1512.583437][T31840] usb 6-1: Using ep0 maxpacket: 8 [ 1512.639539][ T5161] cdc_ncm 1-1:1.0: bind() failure [ 1512.650033][ T5161] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1512.661206][ T5161] cdc_ncm 1-1:1.1: bind() failure [ 1512.683415][ T5161] usb 1-1: USB disconnect, device number 33 [ 1512.728407][T31840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.743093][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 1512.750064][ T5162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.765300][T31840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.783847][ T5162] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.797276][T31840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1512.811717][ T5162] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1512.823804][T31840] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1512.835181][ T5162] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1512.845334][ T5156] usb 3-1: not running at top speed; connect to a high speed hub [ 1512.853246][T31840] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1512.863794][ T5162] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1512.873861][T31840] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 20:55:01 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1512.884721][ T5162] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1512.912988][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.930384][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.946810][T31840] usb 6-1: language id specifier not provided by device, defaulting to English [ 1512.962584][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1512.972920][ T5156] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1512.986174][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1512.996597][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1513.008296][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1513.039386][ T29] audit: type=1804 audit(1702673701.290:315): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1788/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1513.072741][ T27] usb 2-1: language id specifier not provided by device, defaulting to English [ 1513.078266][ T29] audit: type=1804 audit(1702673701.290:316): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1788/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1513.082556][T31840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1513.120778][T31840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.129944][ T4763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:01 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0xca, &(0x7f0000001080)=@string={0xca, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49a"}}]}) [ 1513.133423][T31840] usb 6-1: Product: syz [ 1513.143883][T31840] usb 6-1: SerialNumber: syz [ 1513.198992][ T5162] usb 5-1: string descriptor 0 read error: -22 [ 1513.205604][ T5162] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1513.222399][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.231148][ T5156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1513.244764][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.275409][ T5156] usb 3-1: Product: syz [ 1513.287558][ T5156] usb 3-1: Manufacturer: é«ß»í‡½ë“¬ì°¦æ«ìŽˆÏ±è­ï°îŽ‹à¥¯ë¬ˆã…æ¹åƒ²ê˜ æµ´éퟆ쀡à¥ï­†íœ…䭃࢟芧éœë¹ˆè©«ï¿“î»Â±ã·ºá²½í™é·€ë»­ï¡¡åŒŸàº£ì¦´æ…¿æª‡ë»í•Œé¤¨ì¬¥ï³©ï°î‚“╋雾ᬔϮ힒æ¨í—¼å´äš‚뼻⣤ퟀ婂뒉뀂✈濣㷲瀒ᬚ綅휀ë¥ê¿¯î¹¥îš€ï†³Ä—쯃㟶䡯áµãž‰è‚¨á‰ äº½á¾„㾀٫ῡᡪ藳骤ꙕ䊺줋㕽辡Խ [ 1513.322661][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1513.338777][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.346941][ T27] usb 2-1: Product: syz [ 1513.353947][ T27] usb 2-1: SerialNumber: syz [ 1513.360103][ T5156] usb 3-1: SerialNumber: syz [ 1513.478465][T31840] cdc_ncm 6-1:1.0: bind() failure [ 1513.487073][T31840] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1513.497248][T31840] cdc_ncm 6-1:1.1: bind() failure [ 1513.515659][T31840] usb 6-1: USB disconnect, device number 38 [ 1513.548295][ T8] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1513.588372][ T5162] cdc_ncm 5-1:1.0: bind() failure [ 1513.607542][ T5162] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1513.628471][ T5162] cdc_ncm 5-1:1.1: bind() failure [ 1513.643290][ T5162] usb 5-1: USB disconnect, device number 48 [ 1513.649813][ T27] cdc_ncm 2-1:1.0: bind() failure [ 1513.672829][ T27] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1513.698551][ T5156] cdc_ncm 3-1:1.0: bind() failure [ 1513.714234][ T27] cdc_ncm 2-1:1.1: bind() failure [ 1513.726516][ T5156] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1513.763032][ T5156] cdc_ncm 3-1:1.1: bind() failure [ 1513.771236][ T27] usb 2-1: USB disconnect, device number 40 [ 1513.800607][ T5156] usb 3-1: USB disconnect, device number 45 20:55:02 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1513.888553][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 1513.998519][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.018134][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1514.049033][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1514.101031][ T29] audit: type=1804 audit(1702673702.350:317): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1789/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1514.134116][ T8] usb 1-1: language id specifier not provided by device, defaulting to English [ 1514.162536][ T29] audit: type=1804 audit(1702673702.350:318): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1789/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 20:55:02 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) 20:55:02 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1514.208606][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:02 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1514.289104][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1514.328129][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:55:02 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x84, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b3d8d070f2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1f}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0xc1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x0, 0x40, 0xff, 0x5, 0x40, 0x1}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000f40)=@string={0x4, 0x3, "da7d"}}, {0xdd, &(0x7f0000001080)=@string={0xdd, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49adbec62e455a6ba420bc97d35ece8a18f3d0539"}}]}) syz_emit_ethernet(0xd41, &(0x7f0000000000)={@link_local, @random="3a2717f5324b", @void, {@x25={0x805, {0x0, 0x0, 0x0, "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"}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/partitions\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) [ 1514.372698][ T8] usb 1-1: Product: syz [ 1514.385217][ T8] usb 1-1: Manufacturer: é«ß»í‡½ë“¬ì°¦æ«ìŽˆÏ±è­ï°îŽ‹à¥¯ë¬ˆã…æ¹åƒ²ê˜ æµ´éퟆ쀡à¥ï­†íœ…䭃࢟芧éœë¹ˆè©«ï¿“î»Â±ã·ºá²½í™é·€ë»­ï¡¡åŒŸàº£ì¦´æ…¿æª‡ë»í•Œé¤¨ì¬¥ï³©ï°î‚“╋雾ᬔϮ힒æ¨í—¼å´äš‚뼻⣤ퟀ婂뒉뀂✈濣㷲瀒ᬚ綅휀ë¥ê¿¯î¹¥îš€ï†³Ä—쯃㟶䡯áµãž‰è‚¨á‰ äº½á¾„㾀٫ῡᡪ藳骤 [ 1514.546626][ T4776] loop1: detected capacity change from 0 to 2048 [ 1514.632298][ T5156] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1514.764696][ T4776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1515.118470][ T8] usb 1-1: SerialNumber: syz 20:55:03 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:03 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1515.379142][ T5156] usb 6-1: Using ep0 maxpacket: 8 [ 1515.388549][T32503] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1515.506389][ T27] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1515.538186][ T4790] loop1: detected capacity change from 0 to 2048 [ 1515.578388][ T4790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1515.969618][ T8] cdc_ncm 1-1:1.0: bind() failure [ 1516.018166][T32503] usb 5-1: Using ep0 maxpacket: 8 20:55:04 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1516.205214][ T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1516.209059][ T5156] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.250472][T32503] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.272860][ T8] cdc_ncm 1-1:1.1: bind() failure [ 1516.275009][ T5156] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.287906][ T5156] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1516.311785][T32503] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.325212][ T8] usb 1-1: USB disconnect, device number 34 [ 1516.325770][ T5156] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1516.367039][T32503] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1516.377861][ T5156] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1516.382205][ T29] audit: type=1804 audit(1702673704.610:319): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1790/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1516.410968][ T5156] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1516.435984][ T29] audit: type=1804 audit(1702673704.610:320): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1790/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1516.437520][T32503] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1516.500331][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 1516.642328][ T4797] loop1: detected capacity change from 0 to 2048 [ 1516.668348][ T5156] usb 6-1: language id specifier not provided by device, defaulting to English [ 1516.748832][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1516.838783][ T5156] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1516.856278][ T4797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1517.120283][T32503] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1517.130113][T32503] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1517.171640][ T5156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.213925][ T5156] usb 6-1: Product: syz 20:55:05 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:05 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0xca, &(0x7f0000001080)=@string={0xca, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49a"}}]}) [ 1517.240181][ T5156] usb 6-1: SerialNumber: syz [ 1517.338441][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.347546][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:55:05 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0x2, &(0x7f0000001080)=@string={0x2}}]}) [ 1517.401145][ T5156] cdc_ncm 6-1:1.0: bind() failure [ 1517.418635][T32503] usb 5-1: string descriptor 0 read error: -22 [ 1517.431174][T32503] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.431300][ T27] usb 3-1: Product: syz 20:55:05 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1517.455207][ T5156] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1517.484969][ T5156] cdc_ncm 6-1:1.1: bind() failure [ 1517.494790][T32503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.505175][ T27] usb 3-1: Manufacturer: é«ß»í‡½ë“¬ì°¦æ«ìŽˆÏ±è­ï°îŽ‹à¥¯ë¬ˆã…æ¹åƒ²ê˜ æµ´éퟆ쀡à¥ï­†íœ…䭃࢟芧éœë¹ˆè©«ï¿“î»Â±ã·ºá²½í™é·€ë»­ï¡¡åŒŸàº£ì¦´æ…¿æª‡ë»í•Œé¤¨ì¬¥ï³©ï°î‚“╋雾ᬔϮ힒æ¨í—¼å´äš‚뼻⣤ퟀ婂뒉뀂✈濣㷲瀒ᬚ綅휀ë¥ê¿¯î¹¥îš€ï†³Ä—쯃㟶䡯áµãž‰è‚¨á‰ äº½á¾„㾀٫ῡᡪ藳骤ꙕ䊺줋㕽辡Խ [ 1517.563482][ T5156] usb 6-1: USB disconnect, device number 39 [ 1517.614049][ T4808] loop1: detected capacity change from 0 to 2048 [ 1517.627587][ T4808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1517.658211][ T5162] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1517.705503][ T27] usb 3-1: SerialNumber: syz [ 1517.784013][T32503] cdc_ncm 5-1:1.0: bind() failure [ 1517.832804][T32503] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found 20:55:06 executing program 4: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1517.883786][T32503] cdc_ncm 5-1:1.1: bind() failure [ 1517.937437][T32503] usb 5-1: USB disconnect, device number 49 [ 1517.998134][ T5156] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1518.018429][ T5162] usb 1-1: not running at top speed; connect to a high speed hub 20:55:06 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x84, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b3d8d070f2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1f}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0xc1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x0, 0x40, 0xff, 0x5, 0x40, 0x1}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000f40)=@string={0x4, 0x3, "da7d"}}, {0xdd, &(0x7f0000001080)=@string={0xdd, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49adbec62e455a6ba420bc97d35ece8a18f3d0539"}}]}) syz_emit_ethernet(0xd41, &(0x7f0000000000)={@link_local, @random="3a2717f5324b", @void, {@x25={0x805, {0x0, 0x0, 0x0, "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"}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/partitions\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) [ 1518.052143][ T29] audit: type=1804 audit(1702673706.300:321): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1791/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1518.139849][ T27] cdc_ncm 3-1:1.0: bind() failure [ 1518.153373][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1518.514638][ T4817] loop4: detected capacity change from 0 to 2048 [ 1518.534066][ T5162] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.548018][ T27] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1518.555135][ T27] cdc_ncm 3-1:1.1: bind() failure [ 1518.560455][ T5162] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1518.598083][ T5156] usb 6-1: Using ep0 maxpacket: 8 [ 1518.611203][ T4817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1518.931525][ T27] usb 3-1: USB disconnect, device number 46 [ 1518.938176][ T29] audit: type=1804 audit(1702673706.330:322): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1791/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1518.939733][ T5162] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 20:55:07 executing program 4: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1519.069028][ T5162] usb 1-1: language id specifier not provided by device, defaulting to English 20:55:07 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1519.118646][ T5156] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.140993][ T5156] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.182618][ T5156] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1519.217578][ T5156] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1519.245870][ T5156] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1519.262162][ T5156] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1519.273970][ T5162] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1519.293505][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.303176][ T5162] usb 1-1: Product: syz [ 1519.307509][ T5162] usb 1-1: Manufacturer: é«ß»í‡½ë“¬ì°¦æ«ìŽˆÏ±è­ï°îŽ‹à¥¯ë¬ˆã…æ¹åƒ²ê˜ æµ´éퟆ쀡à¥ï­†íœ…䭃࢟芧éœë¹ˆè©«ï¿“î»Â±ã·ºá²½í™é·€ë»­ï¡¡åŒŸàº£ì¦´æ…¿æª‡ë»í•Œé¤¨ì¬¥ï³©ï°î‚“╋雾ᬔϮ힒æ¨í—¼å´äš‚뼻⣤ퟀ婂뒉뀂✈濣㷲瀒ᬚ綅휀ë¥ê¿¯î¹¥îš€ï†³Ä—쯃㟶䡯áµãž‰è‚¨á‰ äº½á¾„㾀٫ῡᡪ藳骤 [ 1519.366218][ T5156] usb 6-1: language id specifier not provided by device, defaulting to English [ 1519.477915][ T4831] loop4: detected capacity change from 0 to 2048 [ 1519.522187][ T4831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1519.637256][ T27] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1519.829933][ T5162] usb 1-1: SerialNumber: syz [ 1520.028540][ T5156] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1520.038289][ T5156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 20:55:08 executing program 4: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1520.068821][ T29] audit: type=1804 audit(1702673708.310:323): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1792/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 1520.072652][ T5156] usb 6-1: Product: syz [ 1520.101253][ T5156] usb 6-1: SerialNumber: syz [ 1520.154826][ T29] audit: type=1804 audit(1702673708.310:324): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1792/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 1520.198997][ T27] usb 3-1: not running at top speed; connect to a high speed hub 20:55:08 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0xca, &(0x7f0000001080)=@string={0xca, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49a"}}]}) [ 1520.278676][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1520.298807][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1520.358527][ T5162] cdc_ncm 1-1:1.0: bind() failure 20:55:08 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1520.386711][ T5162] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1520.436999][ T5162] cdc_ncm 1-1:1.1: bind() failure [ 1520.478642][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1520.501407][ T5162] usb 1-1: USB disconnect, device number 35 [ 1520.508470][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.516491][ T27] usb 3-1: Product: syz [ 1520.560814][ T27] usb 3-1: Manufacturer: é«ß»í‡½ë“¬ì°¦æ«ìŽˆÏ±è­ï°îŽ‹à¥¯ë¬ˆã…æ¹åƒ²ê˜ æµ´éퟆ쀡à¥ï­†íœ…䭃࢟芧éœë¹ˆè©«ï¿“î»Â±ã·ºá²½í™é·€ë»­ï¡¡åŒŸàº£ì¦´æ…¿æª‡ë»í•Œé¤¨ì¬¥ï³©ï°î‚“╋雾ᬔϮ힒æ¨í—¼å´äš‚뼻⣤ퟀ婂뒉뀂✈濣㷲瀒ᬚ綅휀ë¥ê¿¯î¹¥îš€ï†³Ä—쯃㟶䡯áµãž‰è‚¨á‰ äº½á¾„㾀٫ῡᡪ藳骤ꙕ䊺줋㕽辡Խ [ 1520.619942][ T4839] loop4: detected capacity change from 0 to 2048 [ 1520.638593][ T4839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1520.668317][ T5156] cdc_ncm 6-1:1.0: bind() failure 20:55:09 executing program 5: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1520.736850][ T5156] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1520.760039][ T5156] cdc_ncm 6-1:1.1: bind() failure [ 1520.782120][ T27] usb 3-1: SerialNumber: syz 20:55:09 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1520.814809][ T5156] usb 6-1: USB disconnect, device number 40 [ 1520.935608][ T29] audit: type=1804 audit(1702673709.180:325): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1793/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 1521.042602][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1521.047111][ T29] audit: type=1804 audit(1702673709.220:326): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1793/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 1521.102216][ T5162] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1521.536608][ T4850] loop5: detected capacity change from 0 to 2048 [ 1521.858870][ T4852] loop1: detected capacity change from 0 to 2048 [ 1523.249066][ T4852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1523.280781][ T4850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:55:11 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:11 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x84, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b3d8d070f2"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1f}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x2, 0xc1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x0, 0x40, 0xff, 0x5, 0x40, 0x1}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000f40)=@string={0x4, 0x3, "da7d"}}, {0xdd, &(0x7f0000001080)=@string={0xdd, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49adbec62e455a6ba420bc97d35ece8a18f3d0539"}}]}) syz_emit_ethernet(0xd41, &(0x7f0000000000)={@link_local, @random="3a2717f5324b", @void, {@x25={0x805, {0x0, 0x0, 0x0, "0e409a5193f718904320c43844c55795694a0f00c25bdf00a6465e3ed75dc35d897d253b4607450396f58cb9ce3c1055fe9ffe1c607ca190738af40eee165b04417cf7b5cedab860e248a6d2f6f515f1fbbffe1ece571d07a8d8599b893eec5affbcd336d44f50739879a05ff9da98c9c07e45d4aac9bf7106ab20350a1a379f040d4a7fe46fa531d0c8612ad9acb7664b95517896c338b22649e6308220e5b91e08e53272411fb76bd5d98562e795c3b0728bd24dc9c86646573e10c19da6fc3a2db7e6e5310d969eb3a7bba70a228db4774f630ea424f06b4491419e0dc34c2f4ed6a876574b17a9f50a54fe32becd5a72abf71cc48cc6c0cc6b4fead292b92c14334db5534da954ef24a02ff4fb08e61515efbafe3b99161ebb1c040124ff68ace9cd7b808cae7b4ee635c6d3500c2f016f6ef6fa184e708b7599c53c07beab60ec84f1f80c9c3c3682e1f543659002b272180f8e262f5903dc2cf3bd3682af15de10aa55c4c471a01a83263f284b544ce37c825506706dcc39bd926addec28b51fc2773ce8306c57be938eb0d7adf232cce3a97bb0c12d55af045611f8df859b589f45a262a3c632213ccc5138b19ad400ef0d1892f6338278b59be8afcc2bbd73e51b5cba864fd453c35569760815fc59a7b0ce629bd04578c58fb3a5083314bcfc89cad821fe6be9c5f2dbd6b0b2cb0d0c4a1dcfee74d61287dd1c48921900604ec7a2a520d5bca4bcc35fe028018dad79f5b6e2e642b3e201516df2cc317f1152a94a23c893310549806b87987107970dc998e98e2b1e7ec7e4bdf4dde048694a3777196cf004c161ac18f28844c63905d2027fc8d1da6022ea7f5973d09c040610281e694f1d3c21f14b52a0cdbf16a16c89566b0bcfdff2e1ea9db2c97a872984c7599d66f98607faa3bfdc8c27d2803e19cc5bbb6065aca9e9b51829e9e79bbd61db9309d328a5f96b02f49e83b927f662aa0a7b20ceaa7ab9ac376e6e0bd43e5e8c2b6fd3e1718f33b16f4a70911eafdacdc0316f095ede8d097b155f7c3d1755003364326f5171461af19d858d53c0c27cfe6ae59b6be5d794f5b898fd7f4d6ad53bc44d5b746f73e0f905a4d2ad178f09eb7813cd655a6a5c1a55b97492aa024d8199e96e8a0b74faa74481e320f7cd3b8f0d2572a35643b8b7e748af0e6415af928435727df9a28b4e4f8c3f860fc33eda385b53ac343fd21e9c7814ef5820acd3b7f67b9016e6873f89e58bbf044bc135880b3a4122164aba4cb68d9121f837d2b9f105a5c632f6ccb439e87e249c15c928db934b4401616b3c78acc3784ab609913d425bef0f79b7cb9b02f629e3913496e6001b6330eeb20a7d94647dbb271bab96a3f4eaa304018451eb8d2a44cff9f8a99173dc6d20da256a32095a970b3918f002970fb53bfcade24326b8c8172d881336c6636a269f8cf624d3f6236542318b2167bd1e892fcab9870a98e06001040000f65d1e3f0bb67989ee09d11658c0ccd723cfd0727117ae6024610d9e1ec711affe3db07c2ebc017e6deacfef39faf6ea657e2df46a82f454fa2c3404246896bc50994235a44fb0da0729b5e41397dd18170b1467d4ac49f109a63b06ee879af8ccfd09b3b9bf9b383509281455668d55baacaaaebcc2e4c3572a0b8763f038b8e963ba0fd7151e8420f53d0906ceea3d3f643789a631767e7ec6f71287e3f25f2cda48824a54cfa1121f484de152d307f266b5d1bb71201e00edd42633eb8b8885de8756ce7b0c7b6f5483e135f37eb08b169c49ac02f7ea712226f2c69a7e9cab81c4ce64e5947e0187945b2101b1b93032665ec523461e1b35a02de163ff369c206a56f79dd58dc669240ccfdc9ead92290e8e8a7c489739c8d79248c8c92bb5b0d94c88d193ec787a624003503763204558a219b449543e3066ce5a1f9661d03c1323ac037f73a2640270c871c30b2bc47a3b3b48215df19632a15d2764427281672fbd8d21dc9c0cf4bc9fd8f6240340f7b0f73ba3bb300244b7217bd930acfd6461950471f3286cda9d0b9863b5b28cee095f6354a493e3341841612296717f3756251e4665d69e72cbca7e5f82761362880c30e08ea65ee07dd5ed8c142a08b1701d72ffb240f925a6df24f0304eb7d5540a07638a9f0c6a4d0a1086caf58d78078525aebb62bbd82f8304dcd98cbbfa7c9900e88ba8e519c9f20802cc1d6020186842b7aa9bd65dbcd97706f4213f256bda498963b70a381e04786e128aff49e9b3f4af51f1d0d411ab38ca603a6aebd5fa6b15baa540918fc91787fdc68b6bf72f10d91c4a6195a9ffe540fe1eefc542ed668a8a0c83c40a2d0474ba684a0385f2b4d20f67c3ad8b612afe871243f3d9466cee463ea9ab1284b188f462b4bc266cf9b910a6fff27eb217663eaed9f2cfe389596c1f5d71fe05a255b44ff5c293580f3d5bce49c847af1e7a39a186e60b036f104f0b12a5615265762c7f7fc61c48a7681598ce7336e4624247c1d4b66d32023656dc4b81889717ddda9409c6ac69288b8380dd15701bf44dc62e2c171e39fba32d825ace6013766309b3d53e45d068a2fbabf132fb1cc50ff433d232dc8a8960b8986ffc90a764008cd3a996f4e7e6c4f8b83bec6d128329f9292648f6ebabde207418c29aab29d576e2ff3850bb8ee91741399cb3917ad0b7302ce9301a752ef452eb8f770cff1cdc1e8945bce0c3f450f3309094e7ccb207e377d98e023b4c0bd83e56f6532a55b338eb8f7babda5866c0a0e9ae63bb14a839bb56d6dab64df8400dce4c9d4879367ac2fd9fd362fdfbd021cd3970c9ad8178c931fedb7a6c2ff200ea256e1361ecba09b6a499244bad5bffcf443a498a796c7730bd57eb639818dc8694b1bd92ee4526354b71a3f55fc3b7e88d21fbcc906783132510bdcd1f67b4f557d23e8abf4666833c3d7f6079ccf52599de72f8da1c165d4a75b0f748598c6f07e8a8da3afce4424f4e893ba0b2bd16dcb598954f43a9fda0fb4b7064042388f77d994d1e87a12dcd1b9a6741db4c47469e88026131dc7bd250a41a92fc5b038ebb9347ee1850455273d220c9caafa769ee13f33e1c44f41f066927ac5b2c4f940d55df3c062d608d82b18d3edbad4f012f1e8b901d23c189e7c094fea75230b3c5eab9db33a5b285e6b3d3985ad6b6cd32dd4698264004ea055eed097f952cfb3de58316cb7c4f23b3ae8ad4f2a08c4b506c9b742faee3fc10886a8956071253f6c23ded2e299d9db610fb09980a5b39ac18fb41c837f619d5ca1014bc34b5ed2f76af1b852a166c354d199b6830fca5764d772c462d7186ab4ecf6c8c715778fe559e7859e232a5f2ddc58f17ccc2536a2af09c0eb352745185e018eb3346adf392732959095666c987cff1421a94a4ebcb607c4b9ec067c8bec7ea9baaac5bbc0291b6366f224c3af29fc5832f561f54cb877ac04a2dd0dbd38bb839c7404eceef9fc7e7b238dc06ca62dfe748996117374f09624e234c3861d201569e48fb2a04956d8f56747d18d0d8d6384305c12d96a2e9081dd5cdfb15a72584ea4dc3cd4fba65216bfde5aef9aee03a0f2a14c8f0ec678da50a515fffb963124996df76a520d35fbf2a8ed769ee2b2940b5750e0b6b76a88400785304093b166656f882254e7603c5d6c97cd2c6e1368a6d25b6ddf727e4b628f1e6a17c0c9c52566ab8d7393235fcd10baaf7fb2b6c5bb692c188cf0bf08aa08a905576dd6c9e617410fd1935c344ffc31847e4a3d0d4c067a8c023daad6c2f662496a636a5387166e3758aa6e2cedbfde7293894dfc1438bceb5dcaecc94ba97fd323bf852f2373ec82f05845f039a7b5917743d764fa3f5e7643ee270e4533427762f6703703f17fa6556d7aa901c3fe7a0a2ae4d9ee4e6832d66c74a0b28c4213363d4323bd2c1557484bb3a4d70489f1cdf72d52b543cd6c18dd7aa158b034ed6a50a0c89a43869a72cf294ee328d03ec3d9510624ac5fe02353ef72149114f6c67967e5af37a60c8e69f1b5a0ae72c279d6312cd3488d6c8be74b608b0db2869db46766385ab0a3af3c3a333dadba070766fac289ea6d7534b69e118f9e193158151327eaeac55ff75fd358d27579a8c5f0ee8c7d70e8c0c3fe16cba5dd48e285ba0d785c1efdd57dca905c3d864b33e320f67a1dde831eac55b4ca50c5e8d015e427bb45ba1d1d35454874bb696c405363a42e16c2d3690ff3aac74c3c153c51446a169b8cb1438b177ec013a305f70bcfd97885a8e97ecc64b1cbbf668718197152be25ae1a1756bf8e5fdaf8a3e58fafaa1e915e39d376c5763b7c0f9e703885a268cddef4505671d4c1c2ad5183a157a222b7688748ae2f291ceb0b58d53a6ebbc6fb9b08f41b83b6aeed5ed9433585d75ca9370c5946b9e61e227429fda831b211103b1efbdf12805fcd44c214d5f9002d7912edfe0b3ed5fd5d74a1655a1774e9bf7a18168ae8539da5ad389b84208154bf727ab290ca7d14b8241ab92e7f4bdb8c0761e8135067b5ba3c775753ec05934db8242a74283d9a6540a922b45ab78cdd57fc1602db5bf06304acf62bd0c96c0ee8ed7cea45fff7e46e10220bbc9fccab0781dc03089ca01eba12ef12789579e82ed8f5838749033e5dd00333024a657ab353b041c2c70b3622d0daaf3fef8a06d01c3705068df0e364369ff9c85c856c6c3b031f1045595f3b94bd93bc7225692624e48a0e3776490684b68dd0a62866959f959dd171908fd17b9fd93bee621c5905b205df7220b90843a"}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/partitions\x00', 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) [ 1523.508629][ T27] cdc_ncm 3-1:1.0: bind() failure 20:55:11 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:11 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000f40)=@string={0x2}}, {0xca, &(0x7f0000001080)=@string={0xca, 0x3, "c19afb07fdd1ecb426cc2b6488c3f1036d8710fc8be36f0908bb05345d6ef25020a6746d4d93c6d721c04d0946fb05d7434b9f08a7825c9348be6b8ad3ff7be0b100fa3dbd1c5dd6c09dedbe61f81f53a30eb4c97f61876addbe4cd5289925cbe9fc1dfc93e04b25fe96141bee0392d753e46867fcd5cedbf45382463bbfe428c0d7425a89b433f302b058f20827e36ff23d12701a1b857d00d750b9efaf65ee80e6b3f11701c3cbf6376f484d1d8937a8806012bd4e841f803f6b0625e1e11f6a18f38562dda49a"}}]}) [ 1523.543634][ T27] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1523.603822][ T27] cdc_ncm 3-1:1.1: bind() failure 20:55:11 executing program 5: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$eJzs3UFsHNd5B/DvDUmTkotk61iykxrB2gUcVWlUkootGwxQq2aJplFs1hSTtu7BK3GlbkUtFyTlyEabuCcfWqBsCvTSFChQpDB6CNhDDu0pBQr0ShS5FQXUNHVdFAX2ECOXwixm9i25kmiLEEVRkn8/QPoPZ7+3O/Peema4b8cKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiV3719PhEOuitAADuppfmXhmfdP4HgI+Vs37/BwAAAAAAAAAAAACAe12KIt6LFN94opteq37uGTvTal+5Oj89s3OzQ6lqOVTVl3/GJiZPfvGZZ08918+Pbn+nfTpenjt7uv7i0uXOcnNlpblQn2+3zi8tNHf9DHttf6PjVQfUL1+6snDhwkp98sTJ6x6+Wnt39OGjtalTE68e6dfOT8/MzA3UDI/c9qvf5MPu8HgoirgQKS69815qREQRe++LW7x39tuhaieOVzsxPz1T7chiq9FeLR+c7XdEEVEbaPRCv4/uwljsST3irXLzyw0+Xu7eXKex3Di32KzPNpZXW6utpfZs6m1tqsqLeC5FdCKiO3rz041EEd+MFG9/p5vORcRQvx8+X90YfOvtKfZhH3dhOCJqIxEbxX0wZvew0Sjie5Hi298aj/O5X6tuezriq2UejbhS5rWItTI/G5HKN8ijEe/v8H7i/jIcRfxRpPjJVDct9Me+Oq6c+Vr9y+0LSwO1/ePKfX9+uJvu8WPTWBTRqI743XT7FzsAAAAAANx7ivjTSPHkD4+lTgzOKbbaF+tnG+cWe58K9z/7r+dWm5ubm7XUy/Gcszk7OddyrufcyNnNWSty+5yzOTs513Ku59zI2c1ZG8rtc87m7ORcy7mecyNnN2dtOLfPOZuzk3Mt53rOjZzd4QMcLgAAAAAAAADYwaEo4uuR4ulfer26rziq+9I/OXXqlRO/PnjP+OO3eJ6y9kRErBe7uyf3oXzr8GyaTemA7iGmd//fH+T7//7woDcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4UEUU8VSkeP373RQpIuoRr0Uvr40e9NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3wlgq4v1I8edfGat+3igifjsiPtj8YDMirn2weacd9B4DAAAAAAAAwAMoFfFGpHjqlW6qRcTV2rujDx+tTZ2aePXIUAxFKksG61+eO3u6/uLS5c5yc2WluVCfb7fOLy00d/tyY2da7StX56dn9mVnbunQPm//obEXlzpvLLcu/u7qjo8fHjt9bmV1uXF+54fjUBQR9cE1x6sNnp+eqTZ6sdVoV01n0263GAAAAAAAAICPg5FUxAeR4u2/eWdr3nm4N+c/fGPtd78UUeTl6Tz/vDUNXX1v4BPV9wZ6y5+cOvUbk58ZXN5xyvp4NaFen5+emZkbWD08cnPpWH7d8b3tMgPK8V+NFH/8l/X0ZF53/fgPbdV+9/e3x/utG5/oQ8Z8r+P/swPrytdMqYi/ixQ/95uPx5PVdh6Om74zkeu+Eil+a/2JXBcPlXVP5ccfqf4eu9BabI6XtVcjxT9eub726Vz7qe3aiV137H2iHP+nIsX//M76Vt/k8c8jsD1qg+P/mRvfHfs0/o8MrKvl1/35O7PrRMTKG29eaiwuNpctWLBgYWvhoI9M3A3l+f/rkeIf/uxft6538vn/Z3o/bV///fSb2+f/qRufaJ/O/58aWDeVr0ZGhiPGVi93Rh6LGFt5480vtC43LjYvNtsnTz3/7OT48xPjJ0ce6l/cbS/tua8eROX4/16k+N6P/jY+l9ddf/238/X/4RufaJ/G/9GBdYevu17Z866Tx///IsU/T/8gjuV1H3X93//9/1i+CN+6Pt+n8T8ysK76He8TEb8wsO7YkYgH7pcyAAAAuMNSKuIHeT51/Bbzqf8UKd7871/MdeloWfdCfrxW/T320lL7C6cXF5fON1Yb5xab9blO43yzbPvjSNH96ydy26KaX+3PN/fmeLfnYv8lUjz/a/3a3lxs/7OpR7drJ8raE5HiT166vrb/OcaR7drJsvbfIsXEqzvXHt2uPVnW/lek+Olf1Pu1h8vaL+Xax7ZrT5xfWlzYh2EBAAAAAIA9GUlFPBsp/v7kcOp/vr2b73/e9KH3Pn3/77GBdQt36X6VPXcqANzjyvP/sfKs/st/tTWXf/35f/v/AzB4/r/R4L8b8GHLt3P+r92Z3QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD42ElRxFKk+MYT3XRttPy5Z+xMq33l6vz0zM7NDqWq5VBVX/4Zm5g8+cVnnj31XD8/uv2d9ul4ee7s6fqLS5c7y82VleZCfb7dOr+00Nz1M+y1/Y2OVx1Qv3zpysKFCyv1yRMnr3v4au3d0YeP1qZOTbx6pF87Pz0zMzdQMzxy269+k/Qh6x+KIv43Ulx6573076MRRey9L27x3tlvh6qdOF7txPz0TLUji61Ge7V8cLbfEUVEbaDRC/0+ugtjcfve2loqyg0+Xu7eXKex3Di32KzPNpZXW6utpfZs6m1tuT/1KOK5FNGJiO7ozc84EkWMRIq3v9NNPxqNGOr3w+dfmntlfPLWm1Tc0R3cteGIqI1EbBT3+pjd20ajiGcixbe/NR7/Mdrr16rbno74aplHI66UeS1irczPRqTyDfJoxPs7vJ+4vwxHEY9Eip9MddOPR/PYV8eVM1+rf7l9YWmgtn9cue/PD3fTPX5sGosi3quO+N30n/57BgAAAAB4gBTxeKR48ofHUjU/uDWn2GpfrJ9tnFvsfazf/+y/nlttbm5u1lIvx3PO5uzkXMu5nnMjZzdnrcjtc87m7ORcy7mecyNnN2dtKLfPOZuzk3Mt53rOjZzdnLXh3D7nbM5OzrWc6zk3cnaHD3K8AAAAAAAAAHZWRBGfixSvf7+bNkd7E7yvRS+vuR/ogff/AQAA///PjVta") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1523.634523][ T27] usb 3-1: USB disconnect, device number 47 [ 1523.739513][ T5162] usb 1-1: device not accepting address 36, error -71 [ 1523.793143][ T29] audit: type=1804 audit(1702673712.040:327): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1794/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 1523.863370][ T29] audit: type=1804 audit(1702673712.080:328): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1794/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 1523.893175][ T4860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1524.423564][ T4871] loop1: detected capacity change from 0 to 2048 [ 1524.426901][ T4872] loop5: detected capacity change from 0 to 2048 [ 1525.736193][ T4871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1525.954328][ T5162] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1525.975590][ T4872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:55:14 executing program 1: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1526.145617][ T27] usb 3-1: new full-speed USB device number 48 using dummy_hcd 20:55:14 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1526.358517][ T5162] usb 1-1: not running at top speed; connect to a high speed hub [ 1526.571006][ T4885] loop1: detected capacity change from 0 to 2048 [ 1526.629118][ T4885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1527.138741][ T5162] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.149064][ T5162] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1527.164301][ T5162] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 20:55:15 executing program 5: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:15 executing program 2: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:15 executing program 0: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:15 executing program 4: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1527.268187][ T29] audit: type=1804 audit(1702673715.500:329): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1795/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1527.298308][ T5162] usb 1-1: string descriptor 0 read error: -71 20:55:15 executing program 1: llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 1527.314185][ T5162] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1527.349011][ T27] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1527.356915][ T27] usb 3-1: can't read configurations, error -71 [ 1527.373653][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.396152][ T29] audit: type=1804 audit(1702673715.500:330): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1795/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1527.446065][ T5162] usb 1-1: can't set config #1, error -71 [ 1527.472868][ T5162] usb 1-1: USB disconnect, device number 37 [ 1527.675859][ T4897] loop5: detected capacity change from 0 to 2048 [ 1527.906407][ T4897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:55:16 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 20:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) [ 1528.490451][ T4912] loop4: detected capacity change from 0 to 2048 [ 1528.851008][ T4912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:55:17 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netfilter}, 0x40) 20:55:17 executing program 4: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:17 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) 20:55:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) [ 1529.823702][ T4932] loop4: detected capacity change from 0 to 2048 [ 1529.955888][ T4932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:55:18 executing program 4: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1530.403380][ T29] audit: type=1804 audit(1702673718.650:331): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1796/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1530.524244][ T29] audit: type=1804 audit(1702673718.680:332): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1796/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1530.914411][ T4942] loop4: detected capacity change from 0 to 2048 [ 1530.944953][ T4942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 20:55:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 20:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 20:55:19 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:19 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) 20:55:19 executing program 0: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:19 executing program 2: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0xffffff1f, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) sendfile(0xffffffffffffffff, r0, 0x0, 0x10e000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000052340)={{0x0, 0x0, 0x0, 0x80000001}}) close_range(r1, 0xffffffffffffffff, 0x0) [ 1533.342964][ T29] audit: type=1804 audit(1702673721.560:333): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1797/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 20:55:21 executing program 0: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') 20:55:21 executing program 2: socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) syz_mount_image$udf(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x1, 0xbee, &(0x7f0000000cc0)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x77f, 0x1) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x66) write$UHID_CREATE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) fdatasync(0xffffffffffffffff) pwrite64(r5, &(0x7f0000000180)="13", 0x1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') [ 1533.667530][ T29] audit: type=1804 audit(1702673721.880:334): pid=4947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1797/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 20:55:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 20:55:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 20:55:24 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:25 executing program 0: rmdir(&(0x7f0000000000)='./file0\x00') 20:55:25 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20003, 0x0) 20:55:25 executing program 2: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0) 20:55:25 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x6, 0x3, &(0x7f0000002340)=@framed, &(0x7f0000002440)='syzkaller\x00', 0x8}, 0x90) 20:55:25 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000140)) 20:55:25 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x6, 0x3, &(0x7f0000002340)=@framed, &(0x7f0000002440)='syzkaller\x00', 0x8}, 0x90) 20:55:25 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 20:55:25 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001d40)={'sit0\x00', &(0x7f0000001d00)={@private1, @rand_addr, 0x1f}}) [ 1537.111516][ T29] audit: type=1804 audit(1702673725.360:335): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1798/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 20:55:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) [ 1537.190074][ T29] audit: type=1804 audit(1702673725.370:336): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1798/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1537.218141][T32503] usb 3-1: new full-speed USB device number 50 using dummy_hcd 20:55:25 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000580)=0xfffffffc, 0x4) [ 1537.380622][ T5015] tipc: Trying to set illegal importance in message [ 1537.598269][T32503] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 20:55:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000240)) [ 1537.768564][T32503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1537.785108][T32503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.804742][T32503] usb 3-1: Product: syz [ 1537.811388][T32503] usb 3-1: Manufacturer: syz 20:55:26 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:26 executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002200), 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000025c0)={{r0}, &(0x7f0000002540), &(0x7f0000002580)}, 0x20) 20:55:26 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000003e"], 0x10}, 0x0) [ 1537.823724][T32503] usb 3-1: SerialNumber: syz [ 1537.988777][ T29] audit: type=1804 audit(1702673726.240:337): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1799/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1538.021368][ T29] audit: type=1804 audit(1702673726.260:338): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1799/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1538.097273][T32503] usb 3-1: USB disconnect, device number 50 20:55:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x20}}, 0x0) 20:55:26 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000800)='ns/uts\x00') 20:55:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 20:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x12}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000280)=0x40, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket(0x9, 0x6, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 20:55:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:26 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000001980)={&(0x7f0000000740)=@can, 0x80, 0x0}, 0x0) 20:55:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xd}]}]}}, 0x0, 0x2e}, 0x20) 20:55:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{}, {}, {}, [@cb_func]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) 20:55:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1e, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) 20:55:27 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) 20:55:27 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x410100, 0x0) 20:55:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:27 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001bc0)=@o_path={&(0x7f0000002580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4008}, 0x18) [ 1539.173892][ T29] audit: type=1804 audit(1702673727.420:339): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1800/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1539.201392][ T29] audit: type=1804 audit(1702673727.420:340): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1800/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 20:55:27 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)='\n', 0x1}], 0x1}, 0x20004845) 20:55:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000011c0)={r0}) 20:55:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x12, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) 20:55:27 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 20:55:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 20:55:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}}, 0x0, 0x32}, 0x20) 20:55:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 20:55:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x6}}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) 20:55:28 executing program 0: socketpair(0x2c, 0x3, 0x3ff, &(0x7f0000000bc0)) 20:55:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 20:55:28 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 20:55:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 20:55:28 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003100)={0x6, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="1800000000000000000000000000120095"], &(0x7f0000002e40)='syzkaller\x00'}, 0x90) 20:55:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}, 0xbb) 20:55:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) [ 1540.102101][ T5109] xt_CT: You must specify a L4 protocol and not use inversions on it 20:55:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 20:55:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 20:55:28 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x40) 20:55:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@txtime={{0x18}}], 0x18}, 0x0) [ 1540.268194][ T29] audit: type=1804 audit(1702673728.510:341): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1801/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 20:55:28 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) [ 1540.317305][ T5163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1540.370415][ T29] audit: type=1804 audit(1702673728.570:342): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1801/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1540.421508][ T5129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:29 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:29 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 20:55:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x19, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) 20:55:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 20:55:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 20:55:29 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0}, 0x0) 20:55:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x410, 0x0, 0x2}, 0x48) 20:55:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4}, {0x7}, {0x1}, {0xb, 0x5}]}, @var]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x59, 0x0, 0x1}, 0x20) [ 1540.984976][ T5173] xt_CT: You must specify a L4 protocol and not use inversions on it 20:55:29 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:29 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 20:55:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000100)="7663fd5d51ee55bfa595e07dac297c7ba06f37371c94b0dcfe111eb90afff9c08bc766e9e5378654ca03c9f0c05a866f653d339a5da7ec678cdf62357206302fb3bed69f600bd34c91c39fd6c7de3960c0b5c3b29caf13a76237844b22a63c0bd9bcf4a49ab096c54cd272832e2415a8985f8b5fc990a2db587feb1ee1d84c7caecea7f74b185fc51d0ee820f9df77b511e06526a149fa6e12221af6c18cc4cc0f1330f7504fffaa0b203679cda9078bbece51b774521e1186478658be0af32dc403a86bf57bf06a13dde882ac043a494dd88ca10b95384615b4a6637e63f5108d5512e8c45e46d897745ceb64aa04d93e33ad60d6a18a19f0f675d6a111aeef10cfa35d99276a3fba1d040a9557621ac00bfcf3951d346a6eaef0c8890cefcf2f020685e8709c0991011aaac92ff0c9f5630cc89d9a3d06e40cd63043184069dd4fac85233e3a707c1da8f2a28d4ff68c8ba1ec3ae52b9834c82fe49f2fceb900727ebdf7eb41ead58c208d526e1e1659fe61cfd5006765515157696c349459ef35e6e9dc4751b7c7eef54a536de2e69de0b797f04c024f2b6d252c774ca646c59ec3ba73c8e7e35deea5bff9510e25f6951030c63cb1068bb5aa9d9f7bfc2c2d0497b608394b3d3c6e98b87a1fea2b53fc0eeae792452ff6e8f8309728621b99f3b428bda05164a508e80af57d316438514ce9445411a41d6006942c6562c82669e99ac5a2f791bffe1805cb1701f73e1dc68d6e5f627af5cac3e8285c8961e19fd6ba96d456ece5312c8f42132a997e796d3c4d394204c9483de21f154d645416cb85747a7652d092728c4050862aea87506e13ac36c3784648a6047fe1c5598ae8f3da90a5d12e1445db0e1cab6e2837a99b52a7c740fbf4462a8d4c2ea9dec0e747075b5432691b4118c4f3a4fa9723cf4491c8aedd962a246851839c96a5738018a2c3999413ca44ed0bb0ac66fb89515f6a866f491ae23ac766355ce8e1ea3aaae05d02fed9fd39d9c1b424948cb8636046aa14a4bc288c7990c79b98fafbf35a024657633ede09f20f0fde73fcff1a5572b70e6487c0feaa97b94a417769499d3843fe1cc453d9d33d33f0209778215dece4b47ed84657d710bf45c6fae688bb095fca7558de4c6fec63a5d63a6d40e250cf1a6ca18c94abf33724b8ee9062319b9411d9782634a18c24ee8b980177a127fe9467494668139eef3f96fa8ee5e9957eecf1e17d50defe669aa2d1557e7e110ffa137f1edccee8fdecda712fbd920beeb05842159e0f5a7d15240dea8884e14461393f404b8530045c814943a9f382cb392bfb3f1cc6f5a07929214660bbfece5ccd5c42aee31cd96aadd97a46484aac7045d63b6f8c36844cb6e643ba0faa48c3544f3167a50d560e13ca72a240a79761dc92b173e0e773ad3878b292e3a7059683d0630a803eb556a311bfba8e1d599b6c532c80f8fba6df40d6879910daea4a8ad26ff0784f3a601d252e2e29963721f0ed70ffd1f6faea98c208d0704e4e8fc05d510ee4984e7e3fcaee96fd82a233bf7489978a29249c5c093b79a686ac382e397eba6007efec15f5819b3d441e8f5466624b342b9fe67eb4c01b5349f7f9e2bba465793a87c87b41a710155267fce045acae1fe212976b53de6b0acb4ef27aa17ff7be24a7e2693bd970fdff589732cbb1cc8cd5b72f47099ab2bda0b98fb17143e52046d766d3b40a3a3a4ba3a08be1a11ebc00c74793e4831598ef12ec6b391c66fdd9642e2b77ce8ac16bff7a2c6f90492b98b250a5379ab633095675f806b619c463840952acf8ca35a74099a94d14501631eb1c512d621f24148ca3b54e8df4e62e588ec02b10327a6ddce823870b48b22d73cfecd6888e74d4abdbdd187aea8f989192e593b563d3b6a5b1cd9e66431ef476c27b3fe54408b49106ba8073332e44736613c653d8b2ea85c9fd821352f894f710838d16df8721f89d689bbd395bf37066e0643d7c25b3136d51c0081452dce05d02e9818a61e46dd49d6cd958a25606cb85fbb510069edd286ba1d52184e213327a6ab27a97fb94c0e07833c56a7b154e29d6ee84473b8caa702fc221e486e179372833884b4a45b71faabe7006baeda1b8c2a1162187a06a2e80d82bc07aee893c1500536b06cc38b96cbb157a30f5339ae9e18d38fe42817137227d0f64ddad2a990cb4c804040ef5ecfcf86def9b98f6cc74aa6ad084d179f0be1a2a6a7a0e7504e520dcc231303754efb156093b87995e78c9360c36876d8f8c5ad10245ca0a9726990ad84d288231a9e782d44a1ad33bf973616150fe59e7006b2fd423b43c9b5f63b29c340f9c6c738ca232f41535b1bb4076bf43e98ad99a8e2f55de0928e934adca7342d3cba3cfedaca15b2028f17f7f0d03182c4827036381c7f263d5c1755b96b3d70c62ea5c352873cf2827fc06efbfb68be82642c368f10a619302eaf142cd3f346e6514953b5c6b4e5dbbdf3948dbb34726fccc59dd53195158f5972eace26f7a1b0bae789650675c57c41586fd53c49dff046b3947eb325f3c3d359b9e2df28df4f3b41d43c3e6cbb06234d347ff6ca490ef970ab9f935372e7d79e10d9a7cbdf00b9557bbf38e99a585448ea78bdb3c5d9fc89e1b4a085ae1bf3414abd28c822e8e24a950be550c987703625c414b72f7769682bf196ef19c48365a1d87ee04054ce6dbe6998763e4e04dcddad18e845897a8b525b91602e0ecbe403014219a200104c32a27c1e7c39dde4d07647025107232e6ede22363d65f0d3587349f0ad2adbc5b32a8f42d062a289927461b7dd58e753c54c9208452b53ddb8d11b753f383e47b1f5b627041f73f6616f5e1ac862f6e29e7173cc951463d6a9b2c4887e593d524fb345ae4d754aaa7354abf97e5bce0cffd796399d7c276901df8e7847d773831a4c2008089122bb9e3d9ba9cfd24b5d601caa56003d995bd1e924523c43aae081173e6d6eff11f9002943be6ec71e3c11736e118d5bb8698faad5814f6ca5ade184b3f3cf4cba0c24daa150ef365b0a1b8b59c03373184b72b60465968e3738fefaeb407e768bce1c5ee0cc07ef60a0105511496d8e8c56daa9c02bfbcad86590b2ef59d9c3e6487773d4aa908af8d5f952d6d8cf25bc47857e0b199a7411c1969c22c3e3712588097e9849d63baad278b06cba96aa18a8b4cc47b2a1a420102df87bd36b904707e514c54a0decc1e73ab74396b992b2ced318a38b57729fe5bd688735cf143c5bc779f4475cf0d9639a6c327beb998c9063ee922cbf9cf1816f871488bc0d3c8664fd484d0abc03ba022af24938273046d86220e290212b9f0326c19021be213de98d1d96b1f90948b5c2bc53ecc8720cb72720e56f29aea79117e9239dcea4183ebbe4a57186204a2c94aab7c792a663ef03f370901a882f3649f804d666b04ccb79705d649ffee2c8824e6e384614ac97b41abfccb144dc6f494eaba1c1d776df986d9605e844ba1a41488d75dd053105903bf78382c59de1deb390504f5bd20b9a353a8103ec3db32d7b3c9866e6d760885ed8ae94a9594c1126aaf89b76f645cdb48d3c2c2f727bcf5899e227745a09273e775a2e38f489a6d5bfd0977783451a1af4827a910ec3efaec4abbfe784df116a917228b68c9e19bf02ee8e232f14c5a67f75a6f0c6ddf19f59b41feae5677072877538f3b5afb851f658bc2da1b6267ce9558703ca1086f356a48584daf0ae158bffef5b58fc0b60f9d93762f5516310af312d36ae7f375176afc537a5f7cd243c8cf5094a864c9cb348fa4e34918aadc352eb77e83be0aff8327fb29225efdbac911f70800a06efbd6d4a3f14c5db728976eaed565fcd6acbf76a2b5721a519acf2ab96264ece4507da2fd92a1bb6f12b2dee8cd1193b9ee703689ade88100fcbb8c83cdb28ae7de9b32424f326414456c81f44b9ae6d6a843984f2519005e9a0481481c0356b19225dd87febcdedd1df0243042257507fa4d58cdefcf14033b578a43c379ae6b38245c147e0f3676b40dd1d0b3f3d0ad445bcf726d7eb5c78581395c71ebf49d50ae9fb17c00a3cca706447102e7cf35f0b990b7b00ca69a1d46be57cc122a7ccc26ad0e15c44e4f5628cc952f5c53e775c9365c7c6d3f38fd03c32be963583b01d83dc5b9ca3300a2ee880af1b758885d4ea89411696b26d3de48e7a7b1f0d70c1b663adac2f33869da5aa583642b66adc75df56e63bf6c0d1b325828e7e38f1089aab825a03164a8b3322f5c2baf9861c9a7083c82e1f279145a60dc32b1140654dc3a55658086d646bb7ab055d770ca63fd7c0ccb7310111180cfbb3f2ed090c4600fbc1e9fd9bef989cde9c017de88f0f6309858c09d56551d7e0e5f10ae0cfe4315eea97367ab4b954d1ff5516234bf92c98a869524009e57676475063a5dce123fd7ca59fe9b474431832de07e3b7225e5520f738b414aead4ba9d542a32f93008eb01ae56e344efcf430a0c16c68825265b06dbf86779b4355f11f744155eab684ec8c7a6305873cf98c97c4ed742d6ec1c31d15c78f67dc465ec3c78eee81183b074d13abc2c4f8488b02025415573b3eae4a34cf767cf1035431b3b03403d8c4b8595c96020ee9c3f1b5cfbf90cdc2517a173742c7704c6d8c0f57bccf16d8b52542cbd28a7cbd9e49a3cb0982d50055cb4623a4fe83dc37a50c3d3469f06eec969829ba87fbf5534b716db9006661682d66f3aa9e9b3eb31d6a5675c2bed88d253c7d250343eeb8fa219fe1f4387f1fe6fa9702337ce6200a9dd30fe6702e1fbef9bdb908293a2024a4bae7df51d3858d728f4021c8f6034d9df73a418fa24a130ec907c667a2cf92fa44f788bc720d80004e9ad6d88b249f275453a229ca336927c9005394968292fbe3c9fe5d019e703904c2869b4e5bb8d67ccfc76f353ecc0fe7962bc6880ab34222d317fa0c18f560fef807b831c97b22ced4cef6389783834fa74c4fdff6c882b9105399dbafa8abd93cd234bd8ff98575ed337d296ef4ba21662b582f57e304952c975857ff4be7b009c708e738ad47149cbfe682ac850edcb15aa8dc128a5b6719aa494755288d58fb6dad8e73d174726643bbe8cb7b33b18eddc180f17e16e06300433290ab34640e7ab951a1e41b62053fb7ddd567ef680b6deb27eb7d71aa793fbe40ead6fffacec10514ee2301bdb73de05d956f8b1e7ed8ce979214bb868639a49937d61ce43e599e4898c09ddb14dbca1b5ca4c68b03442baa8a89a55aa04cdec262acbb77d2e5ca0aedd2f691c0ab125a8e341022b936c9a38129b0ba33f225c46625f4b3fc34c90221d005f552762888bc33d", 0xec2}], 0x1}, 0x20004845) [ 1541.210451][ T5190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1541.264857][ T29] audit: type=1804 audit(1702673729.510:343): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1802/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1541.341826][ T29] audit: type=1804 audit(1702673729.590:344): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1802/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1541.401165][ T5179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:30 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000100)='v', 0x1}], 0x1}, 0x20004845) 20:55:30 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x65580f00, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081074e81f782db4cb904021d080006007c09e8fe0ba10a0015000400142603600e1210000f0000000401a8001600200006400506027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 20:55:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'ip6erspan0\x00', 0x5}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 20:55:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@abs, 0x6e, 0x0}, 0x0) [ 1541.992348][ T5203] netlink: 'syz-executor.5': attribute type 21 has an invalid length. 20:55:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:30 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x11}}}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) 20:55:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00'}) [ 1542.033339][ T5203] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 1542.078209][ T5203] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.5'. 20:55:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:30 executing program 4: syz_clone(0x14281400, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 20:55:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x39, 0x5, &(0x7f00000015c0)=@raw=[@tail_call], &(0x7f0000001600)='GPL\x00'}, 0x90) [ 1542.217174][ T29] audit: type=1804 audit(1702673730.460:345): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1803/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1542.288806][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1542.307510][ T29] audit: type=1804 audit(1702673730.460:346): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1803/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:55:31 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x300, 0x32, 0x0, 0x0) 20:55:31 executing program 1: syz_clone(0x4402d080, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x0) 20:55:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) 20:55:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'ip6erspan0\x00', 0x5}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 20:55:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x65580f00, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081074e81f782db4cb904021d080006007c09e8fe55a10a000b000400142603600e1210000f0000000401a8001600200006400506027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 20:55:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000c40)) [ 1543.108636][ T5234] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1543.128915][ T5234] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 1543.145917][ T5234] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. 20:55:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x65580f00, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081074e81f782db4cb904021d080006007c09e8fe55a10a0007000400142603600e1210000f0000000401a8001600200006400506027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 20:55:31 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) [ 1543.230516][ T29] audit: type=1804 audit(1702673731.470:347): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1804/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 1543.332815][ T29] audit: type=1804 audit(1702673731.500:348): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1804/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 1543.392329][ T5247] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1543.421155][ T5247] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 1543.448119][ T5247] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. 20:55:32 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x8000}) 20:55:32 executing program 4: socketpair(0xa, 0x1, 0x48, &(0x7f0000000000)) 20:55:32 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003100)={0x6, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="180000000000000000000000000012009580"], &(0x7f0000002e40)='syzkaller\x00'}, 0x90) 20:55:32 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 20:55:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xb, &(0x7f00000000c0)=@ringbuf={{}, {}, {}, [@cb_func]}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) 20:55:32 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x8}]}]}}, &(0x7f0000000480)=""/108, 0x32, 0x6c, 0x1}, 0x20) 20:55:32 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x4, 0x0, 0x0, @prog_id}, 0x20) 20:55:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) 20:55:32 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001380)='ns/user\x00') 20:55:32 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) [ 1544.328370][ T29] audit: type=1804 audit(1702673732.570:349): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1805/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:55:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x6712, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48) 20:55:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) [ 1544.435006][ T29] audit: type=1804 audit(1702673732.570:350): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1805/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:55:33 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000001200000008000300", @ANYRES32, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 20:55:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'ip6erspan0\x00', 0x5}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) 20:55:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:33 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x37, 0x1004, 0x0, @prog_id=0xffffffffffffffff}, 0x20) 20:55:33 executing program 5: socketpair(0x1d, 0x0, 0x40, &(0x7f0000000000)) 20:55:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x4}, {}, {}, [@cb_func]}, &(0x7f0000000200)='syzkaller\x00'}, 0x90) 20:55:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 20:55:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:33 executing program 5: syz_clone(0x8009400, 0x0, 0x0, &(0x7f0000000f80), 0x0, 0x0) 20:55:33 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x8, 0x84, 0x0, @ipv4, @private1, {[@hopopts]}}}}}, 0x0) 20:55:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0x11, 0x0, 0x0, 0x20}, 0x48) [ 1545.344563][ T29] audit: type=1804 audit(1702673733.590:351): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1806/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1545.453168][ T29] audit: type=1804 audit(1702673733.590:352): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1806/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1545.503163][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 20:55:34 executing program 4: r0 = socket(0x2a, 0x2, 0x0) bind$can_j1939(r0, &(0x7f0000000000), 0x18) 20:55:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:34 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x28, r1, 0x203, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 20:55:34 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x18, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x2}, @pad1]}]}}}}}, 0x0) 20:55:34 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:34 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000000)='d', 0x1) 20:55:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="c6", 0x1, 0x840, &(0x7f0000000000)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 20:55:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x20, r1, 0x411, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 20:55:34 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x18, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x2}, @pad1]}]}}}}}, 0x0) 20:55:34 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) 20:55:34 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="64dacd3d", 0x4) 20:55:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0x14}, 0x48) 20:55:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:34 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x18, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x2}, @pad1]}]}}}}}, 0x0) 20:55:34 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000000)="64dacd3d", 0x4) [ 1546.294268][ T29] audit: type=1804 audit(1702673734.540:353): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1807/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1546.395358][ T29] audit: type=1804 audit(1702673734.580:354): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1807/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1546.440954][ T5333] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="22000000824799"], 0x33fe0}}, 0x0) 20:55:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x48, r1, 0x103, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}]}, 0x48}}, 0x0) 20:55:35 executing program 1: syz_emit_ethernet(0x222, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000aa"], 0x0) 20:55:35 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x18, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x2}, @pad1]}]}}}}}, 0x0) 20:55:35 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:35 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @random="88b8105592d2", @broadcast}}}}, 0x0) 20:55:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:35 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 20:55:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x1c, r1, 0x411, 0x0, 0x0, {0x7}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 20:55:35 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000b80), 0x18) 20:55:35 executing program 1: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 20:55:35 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 20:55:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:35 executing program 5: socketpair(0x2, 0x3, 0x4, &(0x7f0000000000)) 20:55:35 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x8, 0x2c, 0x0, @ipv4, @private1, {[@hopopts]}}}}}, 0x0) [ 1547.271092][ T29] audit: type=1804 audit(1702673735.520:355): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1808/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:55:35 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) [ 1547.377202][ T29] audit: type=1804 audit(1702673735.600:356): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1808/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1547.452833][ T5359] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:36 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 20:55:36 executing program 1: r0 = socket(0x18, 0x0, 0x1) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 20:55:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) 20:55:36 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x0, 0x0, 0x0, @ipv4, @private1}}}}, 0x0) 20:55:36 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0xa, 0x1, 0x5, 0x20}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 20:55:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x501, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 20:55:36 executing program 1: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r0) 20:55:36 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x0, 0x0, 0x0, @ipv4, @private1}}}}, 0x0) 20:55:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x0) 20:55:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0x13}, 0x48) 20:55:36 executing program 4: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 20:55:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x0) 20:55:36 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000)='d', 0x1) 20:55:36 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x0, 0x0, 0x0, @ipv4, @private1}}}}, 0x0) [ 1548.111258][ T29] audit: type=1804 audit(1702673736.350:357): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1809/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:55:36 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) [ 1548.218130][ T5404] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1548.218922][ T29] audit: type=1804 audit(1702673736.370:358): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1809/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 20:55:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) 20:55:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, r1, 0x203, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x0) 20:55:37 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x10, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x2}]}]}}}}}, 0x0) 20:55:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x0) 20:55:37 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0xa, 0x1, 0x5, 0x20}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) 20:55:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000027c0)) 20:55:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 20:55:37 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x10, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x2}]}]}}}}}, 0x0) 20:55:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 20:55:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0x16, 0x0, 0x0, 0x20}, 0x48) 20:55:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x28}}, 0x0) 20:55:37 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x10, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x2}]}]}}}}}, 0x0) 20:55:37 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x11e, 0x3, 0x0, 0x0) [ 1549.062380][ T29] audit: type=1804 audit(1702673737.310:359): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1810/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:55:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 20:55:37 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) [ 1549.196087][ T29] audit: type=1804 audit(1702673737.350:360): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1810/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1549.202379][ T5431] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:37 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 20:55:37 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x10, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) 20:55:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000015c0)={'syztnl0\x00', 0x0}) 20:55:37 executing program 4: r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="64dacd3d", 0x4) 20:55:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 20:55:37 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:38 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x6, 0xd, 0x0, 0x300) 20:55:38 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x10, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) 20:55:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x28, r1, 0x203, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) 20:55:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 20:55:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 20:55:38 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x10, 0x0, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x0, '\x00', [@pad1]}]}}}}}, 0x0) [ 1549.926013][ T5473] netlink: 'syz-executor.4': attribute type 16 has an invalid length. 20:55:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) [ 1549.951076][ T29] audit: type=1804 audit(1702673738.200:361): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1811/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:55:38 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 20:55:38 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 20:55:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000e40)=""/240, 0x26, 0xf0, 0x1}, 0x20) [ 1550.029235][ T29] audit: type=1804 audit(1702673738.230:362): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1811/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 20:55:38 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x21, 0x0, 0x0) [ 1550.108984][ T5472] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 20:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x28, r1, 0x411, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 20:55:38 executing program 4: pipe(&(0x7f0000000900)={0xffffffffffffffff}) connect$vsock_stream(r0, 0x0, 0x0) 20:55:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000003780)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 20:55:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r1, 0x203, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}}, 0x0) 20:55:38 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x2}, 0x0) 20:55:38 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)) [ 1550.603491][ T5495] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 20:55:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:38 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000c80)={0x2, 0x0, @dev}, 0x10) [ 1550.653859][ T5495] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 20:55:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}]}, 0x3c}}, 0x0) 20:55:39 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000e40)=""/240, 0x2e, 0xf0, 0x1}, 0x20) 20:55:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0x7, 0x0, 0x0, 0x20}, 0x48) 20:55:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) [ 1550.829357][ T29] audit: type=1804 audit(1702673739.080:363): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1812/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 20:55:39 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 20:55:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1550.928465][ T29] audit: type=1804 audit(1702673739.080:364): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1812/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 1550.976247][ T5506] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:39 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0xa, 0x5300, 0x5, 0x20}, 0x48) 20:55:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) 20:55:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x17, &(0x7f0000000000)="64dacd3d", 0x4) 20:55:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) 20:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800060000000000060001004e21000008000b001414"], 0x3c}}, 0x0) 20:55:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:39 executing program 5: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000000)="64dacd3d", 0x4) 20:55:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) [ 1551.753988][ T5542] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 20:55:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:40 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:40 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x100, 0x0, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x1) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000050}, 0x11) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x40040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24000085) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={0x0}}, 0x48000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:55:40 executing program 0: socket$inet(0x2, 0x0, 0x10001) 20:55:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) 20:55:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:40 executing program 0: syz_emit_ethernet(0x20a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd607e285901d0000000000000000000000000ffff00000000fc0100000000000000000000000000906e1b9a"], 0x0) 20:55:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:55:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:40 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f0000001700), 0xffffffffffffffff) 20:55:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1552.787309][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1552.787324][ T29] audit: type=1804 audit(1702673741.030:368): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1814/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 1552.862856][ T29] audit: type=1804 audit(1702673741.080:369): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3025375072/syzkaller.eyuZFm/1964/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1552.890254][ T29] audit: type=1804 audit(1702673741.080:370): pid=5567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1814/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 20:55:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0x5, 0x1, 0x5, 0x20}, 0x48) 20:55:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000007bc0)=@base={0xa, 0x1, 0x9, 0x20}, 0x48) 20:55:41 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:41 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010500000000000000", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1553.317821][ T29] audit: type=1804 audit(1702673741.560:371): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1815/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 20:55:41 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x0, 0x2f, 0x0, @ipv4, @private1}}}}, 0x0) 20:55:41 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 20:55:41 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x50, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x50}}, 0x0) 20:55:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) [ 1553.357034][ T29] audit: type=1804 audit(1702673741.600:372): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1815/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 20:55:41 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:55:41 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) 20:55:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="c6", 0x1, 0x840, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 20:55:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x14, r1, 0xa03}, 0x14}}, 0x0) [ 1553.757477][ T29] audit: type=1804 audit(1702673742.000:373): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3025375072/syzkaller.eyuZFm/1965/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 20:55:42 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0105000000000000000012000000", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:42 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000000)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "7e28d9", 0x18, 0x2f, 0x0, @ipv4, @private1, {[@hopopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}]}}}}}, 0x0) 20:55:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:55:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x9}, 0x0) [ 1554.217050][ T29] audit: type=1804 audit(1702673742.460:374): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1816/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1554.244305][ T29] audit: type=1804 audit(1702673742.460:375): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1816/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1554.282409][ T5619] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) 20:55:42 executing program 0: r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 20:55:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x1}, 0x48) 20:55:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 20:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:42 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1554.716234][ T29] audit: type=1804 audit(1702673742.960:376): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3025375072/syzkaller.eyuZFm/1966/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 20:55:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x2c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}]}]}, 0x2c}}, 0x0) 20:55:43 executing program 0: socketpair(0x28, 0x2, 0x0, &(0x7f0000000180)) 20:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:43 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:43 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0105000000000000000012000000", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) [ 1555.294931][ T29] audit: type=1804 audit(1702673743.540:377): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1817/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 20:55:43 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000002) 20:55:43 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 20:55:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x2c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}]}]}, 0x2c}}, 0x0) 20:55:43 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) [ 1555.357234][ T5645] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800060050"], 0x3c}}, 0x0) 20:55:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x0) 20:55:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x2c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac7db915d2e81501"}]}]}, 0x2c}}, 0x0) 20:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) [ 1555.523879][ T5658] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 20:55:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800060050"], 0x3c}}, 0x0) 20:55:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x0) [ 1555.707801][ T5667] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 20:55:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x44, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x44}}, 0x0) 20:55:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000002) 20:55:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x0) 20:55:44 executing program 0: r0 = socket(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xa, &(0x7f0000000000)='d', 0x1) 20:55:44 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0105000000000000000012000000", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x44, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x44}}, 0x0) 20:55:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:55:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x15, 0xf, &(0x7f00000000c0)=@ringbuf, 0x0}, 0x90) 20:55:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:55:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202080, 0x0) close(r0) 20:55:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x44, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b758465970002841fba3fb1be2819e2f01172df4650afa5a9deeaee9411868ee"}]}]}, 0x44}}, 0x0) 20:55:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000002) 20:55:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 20:55:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd5a220d17783b2bb, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000180)='syzkaller\x00'}, 0x90) [ 1556.653336][ T5690] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:45 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01050000000000000000120000000800", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:45 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x3b}, 0x80, 0x0}, 0x840) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r2}) 20:55:45 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fffffff, 0x6712, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 20:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:55:45 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000002) 20:55:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0}, 0x40) [ 1557.229807][ T5711] ipvlan0: entered allmulticast mode 20:55:45 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 1557.269605][ T5711] veth0_vlan: entered allmulticast mode 20:55:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000005c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 20:55:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 20:55:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end]}}}}}) [ 1557.508617][ T5718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:46 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01050000000000000000120000000800", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:46 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000002) 20:55:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) 20:55:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:46 executing program 2: io_setup(0x10000, &(0x7f0000000140)) 20:55:46 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r1], 0x4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, 0xffffffffffffffff, 0x0, 0x100000002) [ 1558.307638][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1558.307652][ T29] audit: type=1804 audit(1702673746.550:386): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1820/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 20:55:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000005c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8c43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a521187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 20:55:46 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1558.430394][ T29] audit: type=1804 audit(1702673746.570:387): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1820/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1558.466005][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:55:47 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01050000000000000000120000000800", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:47 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}) 20:55:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:47 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r2], 0x2c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) 20:55:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:47 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x2e) 20:55:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) [ 1559.288182][ T29] audit: type=1804 audit(1702673747.520:388): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3025375072/syzkaller.eyuZFm/1973/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 1559.417846][ T5779] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1559.452241][ T29] audit: type=1804 audit(1702673747.530:389): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1821/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1559.539206][ T29] audit: type=1804 audit(1702673747.540:390): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1821/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 20:55:47 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000280)='-^^\x00', &(0x7f00000002c0)='./file0\x00', r0) 20:55:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 20:55:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40049409, &(0x7f00000007c0)={'syztnl2\x00', 0x0}) 20:55:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000005c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 20:55:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x501}, 0x14}}, 0x0) 20:55:48 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:48 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0105000000000000000012000000080003", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r2], 0x2c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) 20:55:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x501}, 0x14}}, 0x0) 20:55:48 executing program 2: sync() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) 20:55:48 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:48 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) [ 1560.198875][ T29] audit: type=1804 audit(1702673748.440:391): pid=5797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3025375072/syzkaller.eyuZFm/1974/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 20:55:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x501}, 0x14}}, 0x0) [ 1560.308338][ T5809] ================================================================== [ 1560.316452][ T5809] BUG: KASAN: null-ptr-deref in do_journal_end+0x1412/0x4f10 [ 1560.323856][ T5809] Read of size 8 at addr 0000000000000000 by task syz-executor.2/5809 [ 1560.332034][ T5809] [ 1560.334361][ T5809] CPU: 1 PID: 5809 Comm: syz-executor.2 Not tainted 6.7.0-rc5-syzkaller-00134-g3f7168591ebf #0 [ 1560.344702][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1560.354777][ T5809] Call Trace: [ 1560.358075][ T5809] [ 1560.361011][ T5809] dump_stack_lvl+0xd9/0x1b0 [ 1560.365626][ T5809] kasan_report+0xda/0x110 [ 1560.370080][ T5809] ? do_journal_end+0x1412/0x4f10 [ 1560.375127][ T5809] ? do_journal_end+0x1412/0x4f10 [ 1560.380174][ T5809] kasan_check_range+0xef/0x190 [ 1560.385041][ T5809] do_journal_end+0x1412/0x4f10 [ 1560.389912][ T5809] ? reacquire_held_locks+0x4c0/0x4c0 [ 1560.395301][ T5809] ? mark_held_locks+0x9f/0xe0 [ 1560.400074][ T5809] ? queue_delayed_work_on+0xca/0x130 [ 1560.405447][ T5809] ? lockdep_hardirqs_on+0x7d/0x110 [ 1560.410660][ T5809] ? reiserfs_prepare_for_journal+0x2b0/0x2b0 [ 1560.416734][ T5809] ? reiserfs_check_lock_depth+0x65/0x90 [ 1560.422365][ T5809] ? journal_mark_dirty+0x858/0xd60 [ 1560.427567][ T5809] ? vfs_fsync_range+0x220/0x220 [ 1560.432506][ T5809] reiserfs_sync_fs+0x10e/0x140 [ 1560.437361][ T5809] ? handle_quota_files+0x3b0/0x3b0 [ 1560.442555][ T5809] ? spin_bug+0x1d0/0x1d0 [ 1560.446879][ T5809] ? reacquire_held_locks+0x4c0/0x4c0 [ 1560.452259][ T5809] ? handle_quota_files+0x3b0/0x3b0 [ 1560.457454][ T5809] sync_fs_one_sb+0x10c/0x150 [ 1560.462135][ T5809] iterate_supers+0xfb/0x230 [ 1560.466729][ T5809] ksys_sync+0x9b/0x150 [ 1560.470883][ T5809] ? vfs_fsync+0x200/0x200 [ 1560.475297][ T5809] ? kcov_ioctl+0x25a/0x720 [ 1560.479810][ T5809] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1560.485790][ T5809] ? lockdep_hardirqs_on+0x7d/0x110 [ 1560.491000][ T5809] __do_sys_sync+0xe/0x20 [ 1560.495328][ T5809] do_syscall_64+0x40/0x110 [ 1560.499841][ T5809] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1560.505731][ T5809] RIP: 0033:0x7fba3547cba9 [ 1560.510139][ T5809] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1560.529752][ T5809] RSP: 002b:00007fba362460c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1560.538174][ T5809] RAX: ffffffffffffffda RBX: 00007fba3559bf80 RCX: 00007fba3547cba9 [ 1560.546143][ T5809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.554105][ T5809] RBP: 00007fba354c847a R08: 0000000000000000 R09: 0000000000000000 [ 1560.562068][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.570031][ T5809] R13: 000000000000000b R14: 00007fba3559bf80 R15: 00007ffc2edcba58 [ 1560.578007][ T5809] [ 1560.581019][ T5809] ================================================================== [ 1560.598589][ T5809] Disabling lock debugging due to kernel taint [ 1560.610108][ T5809] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1560.621865][ T5809] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1560.630303][ T5809] CPU: 0 PID: 5809 Comm: syz-executor.2 Tainted: G B 6.7.0-rc5-syzkaller-00134-g3f7168591ebf #0 [ 1560.642136][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 1560.652213][ T5809] RIP: 0010:do_journal_end+0x1423/0x4f10 [ 1560.657894][ T5809] Code: ff be 08 00 00 00 48 89 c3 48 89 c7 48 89 84 24 80 00 00 00 e8 1e 50 b2 ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 d2 37 00 00 4c 8b bc 24 80 00 00 00 31 ff 49 8b [ 1560.665613][ T5810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1560.677507][ T5809] RSP: 0018:ffffc90003167bb0 EFLAGS: 00010256 [ 1560.677529][ T5809] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b4c7000 [ 1560.677543][ T5809] RDX: 0000000000000000 RSI: ffffffff81de1c77 RDI: 0000000000000007 [ 1560.677555][ T5809] RBP: ffff88801b628878 R08: 0000000000000007 R09: 0000000000000000 [ 1560.677568][ T5809] R10: 0000000000000000 R11: fffffffffffd2048 R12: 000000000000001e [ 1560.677580][ T5809] R13: 0000000000000001 R14: ffffc90003167da0 R15: ffffc90014dd3000 [ 1560.677597][ T5809] FS: 00007fba362466c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1560.677617][ T5809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1560.677631][ T5809] CR2: 00000000200bb030 CR3: 000000007f4de000 CR4: 0000000000350ef0 [ 1560.677647][ T5809] Call Trace: [ 1560.677655][ T5809] [ 1560.677663][ T5809] ? show_regs+0x8f/0xa0 [ 1560.677701][ T5809] ? die_addr+0x4f/0xd0 [ 1560.677729][ T5809] ? exc_general_protection+0x155/0x230 [ 1560.677774][ T5809] ? asm_exc_general_protection+0x26/0x30 [ 1560.677803][ T5809] ? end_report+0x87/0x150 [ 1560.677837][ T5809] ? do_journal_end+0x1423/0x4f10 [ 1560.677872][ T5809] ? reacquire_held_locks+0x4c0/0x4c0 [ 1560.773691][ T29] audit: type=1804 audit(1702673748.860:392): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1822/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 1560.776621][ T5809] ? mark_held_locks+0x9f/0xe0 [ 1560.776674][ T5809] ? queue_delayed_work_on+0xca/0x130 [ 1560.833635][ T5809] ? lockdep_hardirqs_on+0x7d/0x110 [ 1560.838860][ T5809] ? reiserfs_prepare_for_journal+0x2b0/0x2b0 [ 1560.844936][ T5809] ? reiserfs_check_lock_depth+0x65/0x90 [ 1560.850572][ T5809] ? journal_mark_dirty+0x858/0xd60 [ 1560.855776][ T5809] ? vfs_fsync_range+0x220/0x220 [ 1560.860709][ T5809] reiserfs_sync_fs+0x10e/0x140 [ 1560.865555][ T5809] ? handle_quota_files+0x3b0/0x3b0 [ 1560.870748][ T5809] ? spin_bug+0x1d0/0x1d0 [ 1560.875068][ T5809] ? reacquire_held_locks+0x4c0/0x4c0 [ 1560.880445][ T5809] ? handle_quota_files+0x3b0/0x3b0 [ 1560.885633][ T5809] sync_fs_one_sb+0x10c/0x150 [ 1560.890309][ T5809] iterate_supers+0xfb/0x230 [ 1560.894899][ T5809] ksys_sync+0x9b/0x150 [ 1560.899053][ T5809] ? vfs_fsync+0x200/0x200 [ 1560.903459][ T5809] ? kcov_ioctl+0x25a/0x720 [ 1560.907963][ T5809] ? syscall_enter_from_user_mode+0x7f/0x120 [ 1560.913939][ T5809] ? lockdep_hardirqs_on+0x7d/0x110 [ 1560.919148][ T5809] __do_sys_sync+0xe/0x20 [ 1560.923473][ T5809] do_syscall_64+0x40/0x110 [ 1560.927981][ T5809] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 1560.933868][ T5809] RIP: 0033:0x7fba3547cba9 [ 1560.938274][ T5809] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1560.957896][ T5809] RSP: 002b:00007fba362460c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1560.966318][ T5809] RAX: ffffffffffffffda RBX: 00007fba3559bf80 RCX: 00007fba3547cba9 [ 1560.974294][ T5809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.982286][ T5809] RBP: 00007fba354c847a R08: 0000000000000000 R09: 0000000000000000 [ 1560.990258][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.998228][ T5809] R13: 000000000000000b R14: 00007fba3559bf80 R15: 00007ffc2edcba58 [ 1561.006205][ T5809] [ 1561.009219][ T5809] Modules linked in: [ 1561.038218][ T29] audit: type=1804 audit(1702673748.860:393): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1822/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 20:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 20:55:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}}, 0x0) 20:55:49 executing program 3: writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)="694e83fc79056381d5c3f87847ade9b8027658d184223c4ee40a24d5693924372966219b0473a1d35c3bad83dbe54820d4", 0x31}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0105000000000000000012000000080003", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c004300fe"], 0x34}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r2, r1, 0x0, 0x10000a006) 20:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 20:55:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000005c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 20:55:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d0100000000010000000000000008000300", @ANYRES32=r2], 0x2c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100000002) [ 1561.267982][ T5809] ---[ end trace 0000000000000000 ]--- [ 1561.287081][ T5809] RIP: 0010:do_journal_end+0x1423/0x4f10 [ 1561.324154][ T5809] Code: ff be 08 00 00 00 48 89 c3 48 89 c7 48 89 84 24 80 00 00 00 e8 1e 50 b2 ff 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 d2 37 00 00 4c 8b bc 24 80 00 00 00 31 ff 49 8b 20:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r1, 0x501, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 1561.387575][ T29] audit: type=1804 audit(1702673749.630:394): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1823/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 1561.438084][ T5809] RSP: 0018:ffffc90003167bb0 EFLAGS: 00010256 [ 1561.453085][ T5809] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000b4c7000 [ 1561.462841][ T29] audit: type=1804 audit(1702673749.670:395): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3311344978/syzkaller.sF3QEy/1823/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 1561.491762][ T5828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1561.492796][ T5809] RDX: 0000000000000000 RSI: ffffffff81de1c77 RDI: 0000000000000007 [ 1561.511566][ T5809] RBP: ffff88801b628878 R08: 0000000000000007 R09: 0000000000000000 [ 1561.528860][ T5809] R10: 0000000000000000 R11: fffffffffffd2048 R12: 000000000000001e [ 1561.537467][ T5809] R13: 0000000000000001 R14: ffffc90003167da0 R15: ffffc90014dd3000 [ 1561.558504][ T5809] FS: 00007fba362466c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1561.579126][ T5809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1561.606192][ T5809] CR2: 0000000020055030 CR3: 000000007f4de000 CR4: 0000000000350ef0 [ 1561.620862][ T5809] Kernel panic - not syncing: Fatal exception [ 1561.627416][ T5809] Kernel Offset: disabled [ 1561.631741][ T5809] Rebooting in 86400 seconds..