AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg9m329g6y8KP43e3dYz9+ScjLrgMTTa5UEiE2e4h4wVhk7GtDrrxPAY4urUbG+02uw67Au7hxSRCeJBkkiVKlC1DCTOhkRgIVhDRoIuaaPABEIUoGidC0C1xsea0p6U9do3nqte1KJ/Pi55z32e/e1uT7+57gQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfq6Fx4ZHxNcNOjR968MHDLX2vc46uvPnAb3suHHgtf7xshEuOG3rQ29vbO+e52TvKh6cURVH62XaWjydVjkvX31n/hc7+o7Cg56Ulx6f8vPHIgTWnP1LXffT+2r6ztcVN6za0tnxsXFGEi2uLztJBXU1RhMW1xX2lg/rSwZLa4pHSwey+g1OLb5cOzl+7ubW5dGJp9PcM/lc0NO4sxg8rthj2p8HQ/nfWf+vOgddRLjlwtQlFuf8rur7/VsVnA07Q/8D1w8LK/qv+DQInVF3/LywYeB3lkv9y/5/81KpXRvrsxP0PXD98XP+QzgjP/8MarXzur3j+nzHCJQf3V9V0HS/1f+ltz84sn5rw7zz/v3v9cHFl/+OGPf+XnuMXDTz/n1IU4ZIxfjvgPaWhcdeR0e7/o/c/YXrFpmZo/2e0b95f6v/xJd97onyqtsr+F41y/x+3tOLXClSnofHLvRX3/yr6Lz4ywiUH+3/7iV8/XOr/sd8/cOaQz6rp/5LK/md1tG2ZtXV713kb2prWt6xv2VQ3e/6cefV18y6YO6vvkaD/6xi/K/DeMLb7fzG5YlNTFC2D+2u6Dzxd6n/ugw/OKZ+aVGX/i0e9/89w/4cRfWhcMXFi0dnU0dFe1/914LC+/2v/Dxuh/yr+/n/WOeUfVlt+rSmKaYP7u868e0Wp/3cOPbu7fGpilf0vGbX/BYM/LxBhjPf/5orNsP4PHnqp7/l/2b0Hzyifqvbv/0tH7f9V938Yi4bGiv/h5z+s1P+u4rLITkOD//4H6eTo/7F3buiJW4dP6B/SydH/7z539Ny4dVimf0gnR/8TNj7wfNw6XKp/SCdH/8unzl8Rtw6X6R/SydH/2lfP/XPcOjTqH9LJ0f85X9rdGbcOy/UP6eTo/6H2Odvi1mGF/iGdHP3/9LSHXotbh8v1D+nk6P/YsXtujFuHK/QP6eTov3vP2T+IW4cr9Q/p5Oj/8nULQ9w6XKV/SCdH/9On/fHxuHW4Wv+QTo7+5/3p76fFrcM1+od0cvR/x+dX7Itbh2v1D+nk6H/89a+8GLcOK/UP6eTof+nZ2xbGrcN1+od0cvTf/JPm3rh1WKV/SCdH/7O+/qMNcetwvf4hnRz9H17+6J64dbhB/5BOjv731BVT4tbhRv1DOjn6/9p3Tz8Utw6f1D+kk6P/3zz15Py4dVitf0gnR//PfeD2b8Stw036h3Ry9H/vmhfPiluHJv1DOjn6f3jv81+MW4c1+od0cvT/xhtt/xe3Dmv1D+nk6H/ypFNfj1uHZv1DOjn6X3jrV9rj1qFF/5BOjv7bdnf/MG4d1ukf0snR/4ePT1sVtw7r9Q/p5Oh/5dy9749bh5v1D+nk6P99yy7cFbcOG/QP6eTo/6Kej14Utw4b9Q/p5Oi/45nPfjVuHW7RP6STo/+9M19bHLcOrfqHdHL0//LqpT+OW4c2/UM6Ofp/69HrNsWtwyb9Qzo5+n/yZ28fi1uHzfqHdHL0//8XLPpr3Dps0T+kk6P/xUveXBu3Dp/SP6STo/+N3f94OW4d2vUP6eTof+bhq5fFrcNW/UM6Ofr/znl1++PWoUP/kE6O/u+8cl993Dps0z+kk6P//QfvujtuHW7VP6STo/83fzFjetw6fFr/kE6O/u+fcujauHXo1D+kk6P/X26qfSZuHbbrH9LJ0f/f9k3dEbcOXfqHdHL0//TrPX+IW4fb9A/p5Oh/9YRfTYxbh9v1D+nk6H9q15b74tbhDv1DOjn6n39P0/lx6/AZ/UM6Ofrf+pcXvhm3Djv0D+ls3d51S1Nra0u7N954483gm5P9JxOQ2rvRn+xfCQAAAAAAAAAAAAAAcCI5/jnRyf49AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8kx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgIAAP//TC7jfQ==") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x4000}) [ 1539.475836][T26833] libceph: connect (1)[c::]:6789 error -101 [ 1539.495304][T26833] libceph: mon0 (1)[c::]:6789 connect error 19:26:43 executing program 4: pselect6(0x40, &(0x7f00000004c0), 0x0, &(0x7f0000000540)={0x5f847a83}, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x800]}, 0x8}) [ 1539.566565][T26833] libceph: connect (1)[c::]:6789 error -101 [ 1539.587849][T26833] libceph: mon0 (1)[c::]:6789 connect error 19:26:43 executing program 4: syz_open_dev$audion(&(0x7f00000016c0), 0x0, 0x480800) [ 1539.655501][ T27] audit: type=1804 audit(1687375603.621:284): pid=30188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1558/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1539.761688][ T27] audit: type=1804 audit(1687375603.651:285): pid=30188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1558/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 19:26:43 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00), 0x8}) [ 1539.894114][T14938] libceph: connect (1)[c::]:6789 error -101 [ 1539.936999][T14938] libceph: mon0 (1)[c::]:6789 connect error [ 1540.059122][T30179] ceph: No mds server is up or the cluster is laggy 19:26:44 executing program 5: r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) gettid() poll(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 19:26:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1540.476670][T14938] libceph: connect (1)[c::]:6789 error -101 [ 1540.485169][T14938] libceph: mon0 (1)[c::]:6789 connect error [ 1540.583656][ T27] audit: type=1804 audit(1687375604.551:286): pid=30201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1559/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1540.653640][ T27] audit: type=1804 audit(1687375604.581:287): pid=30201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1559/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 19:26:44 executing program 4: syz_open_dev$audion(&(0x7f0000001280), 0x0, 0x0) [ 1540.761360][T26833] libceph: connect (1)[c::]:6789 error -101 [ 1540.767547][T26833] libceph: mon0 (1)[c::]:6789 connect error [ 1540.916064][T30186] loop0: detected capacity change from 0 to 32768 [ 1540.946400][T30186] /dev/loop0: Can't open blockdev [ 1541.259966][T30197] ceph: No mds server is up or the cluster is laggy [ 1541.322272][T14938] libceph: connect (1)[c::]:6789 error -101 [ 1541.328361][T14938] libceph: mon0 (1)[c::]:6789 connect error 19:26:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 19:26:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:26:45 executing program 5: syz_open_dev$media(&(0x7f0000001e40), 0x0, 0x2) 19:26:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:26:45 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0)={0x77359400}, &(0x7f0000000d40)={&(0x7f0000000d00)={[0xfff]}, 0x8}) [ 1541.742359][T30183] loop1: detected capacity change from 0 to 65536 [ 1541.826458][T30183] XFS (loop1): Mounting V4 Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 [ 1541.971973][T30183] XFS (loop1): Ending clean mount [ 1541.977940][T30183] xfs filesystem being mounted at /root/syzkaller-testdir934896706/syzkaller.jr1LXM/1322/file0 supports timestamps until 2038-01-19 (0x7fffffff) 19:26:46 executing program 1: sched_rr_get_interval(0x0, 0x0) sched_rr_get_interval(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001c00)={0x1, &(0x7f0000001bc0)=[{0xd7}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)) sched_getattr(0x0, &(0x7f0000001d80)={0x38}, 0x38, 0x0) 19:26:46 executing program 5: sched_rr_get_interval(0x0, 0x0) sched_rr_get_interval(0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000001c00)={0x1, &(0x7f0000001bc0)=[{0xd7}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, 0x0) [ 1542.193664][ T5074] XFS (loop1): Unmounting Filesystem 5e6273b8-2167-42bb-911b-418aa14a1261 19:26:46 executing program 4: futex(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, 0x0) 19:26:46 executing program 5: futex(&(0x7f0000000400), 0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) 19:26:46 executing program 0: syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x1bc, &(0x7f00000023c0)="$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") 19:26:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1542.687090][T30237] loop0: detected capacity change from 0 to 8 [ 1542.731344][T30237] /dev/loop0: Can't open blockdev 19:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r0) syz_open_dev$audion(&(0x7f0000001280), 0x0, 0x0) [ 1542.897260][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1542.897282][ T27] audit: type=1804 audit(1687375606.861:292): pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1561/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 1542.999521][ T27] audit: type=1804 audit(1687375606.901:293): pid=30239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1561/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:26:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) mmap(&(0x7f0000855000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xd1d93000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007540)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000540)=""/222, 0xde}, {&(0x7f0000000700)=""/81, 0x51}], 0x3, &(0x7f0000002ec0)=""/4096, 0x1000}, 0x80000000}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000940)=""/79, 0x4f}, {0x0}, {&(0x7f0000003ec0)=""/4096, 0x1000}], 0x4}, 0xfff}, {{&(0x7f0000001180)=@alg, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f00000012c0)=""/236, 0xec}, {0x0}, {&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000001500)=""/164, 0xa4}, {&(0x7f00000015c0)=""/168, 0xa8}], 0x6, &(0x7f0000005ec0)=""/95, 0x5f}, 0xb1}, {{&(0x7f0000005f40)=@xdp, 0x80, &(0x7f00000070c0)=[{0x0}, {&(0x7f00000060c0)=""/4096, 0x1000}], 0x2, &(0x7f0000007100)=""/100, 0x64}, 0x1000}, {{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000007180)=""/37, 0x25}, {&(0x7f00000071c0)=""/50, 0x32}, {&(0x7f0000007200)=""/49, 0x31}], 0x3, &(0x7f0000007280)=""/249, 0xf9}, 0xda1}, {{&(0x7f0000007380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000007500)=[{&(0x7f0000007440)=""/43, 0x2b}, {&(0x7f0000007480)=""/79, 0x4f}], 0x2}}], 0x6, 0x40, &(0x7f00000076c0)) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x29000) 19:26:47 executing program 0: pselect6(0x0, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0) 19:26:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:26:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 19:26:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX, @ANYRES16=r0], 0x0, 0x9e6f, &(0x7f000000a400)="$eJw0mmPwZ1ewdv9JJpOJbdtYsW3btu0V53dsxLZtZ2Lbtm3PW/Pee/vbqTr1VD+9uqt29d63DfD2Ad4xwDsHeNcA7x7gPQO8d4D3DfD+AT4wwAcHOHKADw3w4QE+MsBHB/jYAB8f4BMDfHKATw3w6QE+M8BnB/jcAJ8f4AsDfHGALw3w5QG+MsBXB/jaAF8f4BsDfHOAbw3w7QG+M8B3B/jeAN8f4AcD/HCAHw3w4wF+MsBPB/jZAD8f4BcD/HKAXw3w6wF+M8BvB/jdAL8f4A8D/HGAPw3w5wH+MsBfB/jbAH8f4B8D/HOAfw3w7wH+M8B/B/jfAEcNcCjAMQIcM8CxAhwW4NgBDg9wnABHBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwRIgIsGuFiAiwe4RIBLBrhUgEsHuEyAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBsM9LMDDAzwiwCMDPCrAowM8JsBjAzTA4wI8PsATAsYazf6kAE8O8JQATw1wEGAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2Af4GkBnh7gGQGeGeBZAZ4d4DkBnhvgeQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeA1AV4b4HUBXh/gDQHeGOBNAd4c4C0B3hrgbQHeHowYGhrCOwO8K8C7A7wnwHsDvC/A+wN8IMAHAxwZ4EMBPhzgI6PnIBwaemw02y+H/n88GeBTwbD/r/dMgM+Ort3/hC8E+GKALwX4coCvBPhqgK8F+HqAbwT4ZoBvBfh2gO8E+G6A7wX4foAfBPhhgB8F+HGAnwT4aYCfBfh5gF8E+GWAXwX4dYDfBPhtgN8F+H2APwT4Y4A/BfhzgL8E+GuAvwX4e4B/BPhngH8F+HeA/wT4b4D/BTgqwKEQxwhxzHC0bxwW4tghDg9xnBBHhDhuiOOFOH6IE4TMOWGIE4U4cYiThDhpiJOFOHmIU4Q4ZYhThTh1iNOEOG2I04U4fYgzhDjj/+rOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiES4qIhLhbi4iEuEeKSIS4V4tIhLhPisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4y5tDQaA67hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIiGeFyIx4d4QognhnhSiCeHeEqIp4Y4CDEIMQwxCjEOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EP8bQQTw/xjBDPDPGsEM8O8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8ezW6L+YfGGBoaui3E20O8I8Q7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniQyE+HOIjo/t9CB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxVIhDEY4R4ZgRjhXhsAjHjnB4hONEOCLCcSMcL8LxI5wgwgkjnCjCiSOcJMJJI5wswskjnCLCKSOcKsKpI5wmwmkjnC7C6SOcIcIZI5wpwpkjnCXCWSOcLcLZI5wjwjkjnCvCuSOcJ8J5I5wvwvkjXCDCBSNcKMKFI1wkQiJcNMLFIlw8wiUiXDLCpSJcOsJlIlw2wuUiXD7CFSJcMcKVIlw5wlUiXDXC1SJcPcI1IlwzwrUiXDvCdSJcN8L1Ilw/wg0i3DDCjSLcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdItwxwp0i3DnCXSLcNcLdItw9wj0i3DPCvSLcO8J9Itw3wv0i3D/CAyI8MMKDIjw4wkMiPDTCwyI8PMIjIjwywqMiPDrCYyI8NkIjPC7C4yM8IcITIzwpwpMjPCXCUyMcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeFqEp0d4RoRnRnhWhGdHeE6E50Z4XoTnR3hBhBdGeFGEF0d4SYSXRnhZhJdHeEWEV0Z4VYRXR3hNhNdGeF2E10d4Q4Q3RnhThDdHeEuEt0Z4W4S3R3hHhHdGeFeEd0d4T4T3RnhfhPdH+ECED0Y4MsKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8K3Inw7wncifDfC9yJ8P8IPIvwwwo8i/DjCTyL8NMLPIvw8wi8i/DLCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcI/Ivwzwr8i/DvCfyL8N8L/IhwV4VCMY8Q4ZoxjxTgsxrFjHB7jODGOiHHcGMeLcfwYJ4hxwhgninHiGCeJcdIYJ4tx8hiniHHKGKeKceoYp4lx2hini3H6GGeIccYYZ4px5hhniXHWGGeLcfYY54hxzhjninHuGOeJcd4Y54tx/hgXiHHBGBeKceEYF4mRGBeNcbEYF49xiRiXjHGpGJeOcZkYl41xuRiXj3GFGFeMcaUYV45xlRhXjXG1GFePcY0Y14xxrRjXjnGdGNeNcb0Y149xgxg3jHGjGDeOcZMYN41xsxg3j3GLGLeMcasYt45xmxi3jXG7GLePcYcYd4xxpxh3jnGXGHeNcbcYd49xjxj3jHGvGPeOcZ8Y941xvxj3j/GAGA+M8aAYD47xkBgPjfGwGA+P8YgYj4zxqBiPjvGYGI+N0RiPi/H4GE+I8cQYT4rx5BhPifHUGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMY6M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a3R9R7Cd2J8N8b3Ynw/xg9i/DDGj2L8OMZPYvw0xs9i/DzGL2L8MsavYvw6xm9i/DbG72L8PsYfYvwxxp9i/DnGX2L8NcbfYvw9xj9i/DPGv2L8O8Z/Yvw3xv9iHBXjUIJjJDhmgmMlOCzBsRMcnuA4CY5IcNwEx0tw/AQnSHDCBCdKcOIEJ0lw0gQnS3DyBKdIcMoEp0pw6gSnSXDaBKdLcPoEZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSZAEF01wsQQXT3CJBJdMcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03QBI9L8PgET0jwxARPSvDkBE9J8NQEBwkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2CZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJjkzwoQQfTvCRBB9N8LEEH0/wiQSfTPCpBJ9O8JkEn03wuQSfT/CFBF9M8KUEX07wlQRfTfC1BF9P8I0E30zwrQTfTvCdBN9N8L0E30/wgwQ/TPCjBD9O8JMEP03wswQ/T/CLBL9M8KsEv07wmwS/TfC7BL9P8IcEf0zwpwR/TvCXBH9N8LcEf0/wjwT/TPCvBP9O8J8E/03wvwRHJTiU4hgpjpniWCkOS3HsFIenOE6KI1IcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSJMVFU1wsxcVTXCLFJVNcKsWlU1wmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU0xS3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2RVM8LsXjUzwhxRNTPCnFk1M8JcVTUxykGKQYphilGP9vvmmKWYp5ikWKZYpVinWKTYptil2KfYqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgiiNTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7FUaNGjXohxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFT1P8LMXPU/wixS9T/CrFr1P8JsVvU/wuxe9T/CHFH1P8KcWfU/wlxV9T/C3F31P8I8U/U/wrxb9T/CfFf1P8b3T+KQ5lOEaGY2Y4VobDMhw7w+EZjpPhiAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2sXD2DOfIcM4M58pw7nxoaHR+82Y4X4bzZ7hAhgtmuFCGC2e4SIZkuGiGi2W4eIZLZLhkhktluHSGy2S4bIbLZbh8hitkuGKGK2W4coarZLhqhqtluHqGa2S4ZoZrZbh2hutkuG6G62W4foYbZLhhhhtluHGGm2S4aYabZbh5hltkuGWGW2W4dYbbZLhthttluH2GO2S4Y4Y7ZbhzhrtkuGuGu2W4e4Z7ZLhnhntluHeG+2S4b4b7Zbh/hgdkeGCGB2V4cIaHZHhohodleHiGR2R4ZIZHZXh0hsdkeGyGZnhchsdneEKGJ2Z4UoYnZ3hKhqdmOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/C0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JKMof/bq1+e4RUZXpnhVRleneE1GaOuzfC6DK/P8IYMb8wYNrpHbs7wlgxvzfC2DG/P8I4M78zwrgzvzvCeDO/N8L4M78/wgQwfzHBkhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphn+N+p/4IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDP0frZfh3hv9k+G+G/2U4KsOhHMfIccwcx8pxWI5j5zg8x3FyHJHjuDmOl+P4OU6Q44Q5TpTjxDlOkuOkOU6W4+Q5TpHjlDlOlePUOU6T47Q5Tpfj9DnOkOOMOc6U48w5zpLjrDnOluPsOc6R45w5zpWPnn+cJ8d5c5wvx/lzXCDHBXNcKMeFc1wkR3JcNMfFclw8xyVyXDLHpXJcOsdlclw2x+VyXD7HFXJcMceVclw5x1VyXDXH1XJcPcc1clwzx7VyXDvHdXJcN8f1clw/xw1y3DDHjXLcOMdNctw0x81y3DzHLXLcMsetctw6x21y3DbH7XLcPscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MMeDcjw4x0NyPDTHw3I8PMcjcjwyx6NyPDrHY3I8NkdzPC7H43M8IccTczwpx5NzPCXHU3Mc5BjkGOYY5RjnmOSY5pjlmOdY5FjmWOVY59jk2ObY5djneFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6X5nhZjpfneEWOV+Z4VY5X53hNjtfmeF2O1+d4Q4435nhTjjfneEuOt+Z4W46353hHjnfmeFeOd+d4T4735nhfjvfn+ECOD+Y4MseHcnw4x0dyfDTHx3J8PMcncnwyx6dyfDrHZ3J8Nsfncnw+xxdyfDHHl3J8OcdXcnw1x9dyfD3HN3J8M8e3cnw7x3dyfDfH93J8P8cPcvwwx49y/DjHT3L8NMfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x6FJhoZ+zfG3HH/P8Y8c/8zxrxz/zvGfHP/N8b8cR43+v8AxChyzwLEKHFbg2AUOL3CcAkcUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFEiBixa4WIGLF7hEgUsWuFSBSxe4TIHLFrhcwdBovysUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYcVeHiBRxR4ZIFHFf9zRh01atSJxxZogccVeHyBJxR4YoEnFXhygacUeGqBgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Ak8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECRxb4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4R4F/FvhXgX8X+E+B/xb43+jeKHCoxDFKHLPEsUocVuLYJQ4vcZwSR5Q4bonjlTh+iROUOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUSImLlrhYiYuXuESJS5a4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlmiJx5V4fIknlHhiiSeVeHKJp5R4aomDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSTyvx9BLPKPHMEs8q8ewSzynx3BLPK/H8Ei8o8cISLyrx4hIvKfHSEi8r8fISryjxyhKvKvHqEq8p8doSryvx+hJvKPHGEm8q8eYSbynx1hJvK/H2Eu8o8c4S7yrx7hLvKfHeEu8r8f4SHyjxwRJHlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiaNKHKpwjArHrHCsCodVOHaFwyscp8IRFY5b4XgVjl/hBBVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXI0YmqXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykQipctMLFKly8wiUqXLLCpSpcusJlhoYNjfa5XIXLV7hChStWuFKFK1e4SoWrVrhahatXuEaFa1a4VoVrV7hOhetWuF6F61e4QYUbVrhRhRtXuEmFm1a4WYWbV7hFhVtWuFWFW1e4TYXbVrhdhdtXuEOFO1a4U4U7V7hLhbtWuFuFu1e4R4V7VrhXhXtXuE+F+1a4X4X7V3hAhQdWeFCFB1d4SIWHVnhYhYdXeESFR1Z4VIVHV3hMhcdWaIXHVXh8hSdUeGKFJ1V4coWnVHhqhYMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wpPq/D0Cs+o8MwKz6rw7ArPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6vw8gqvqPDKCq+q8OoKr6nw2gqvq/D6Cm+o8MYKb6rw5gpvqfDWCm+r8PYK76jwzgrvqvDuCu+p8N4K76vw/gofqPDBCkdW+FCFD1f4SIWPVvhYhY9X+ESFT1b4VIVPV/hMhc9W+FyFz1f4QoUvVvhShS9X+EqFr1b4WoWvV/hGhW9W+FaFb1f4ToXvVvhehe9X+EGFH1b4UYUfV/hJhZ9W+FmFn1f4RYVfVvhVhV9X+E2F31b4XYXfV/hDhT9W+FOFP1f4S4W/Vvhbhb9X+EeFf1b4V4V/V/hPhf9W+F+FoyocqnGMGsescawah9U4do3DaxynxhE1jlvjeDWOX+MENU5Y40Q1TlzjJDVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNTLaw9DQ0GI1Ll7jEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuOdpQjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWaI3H1Xh8jSfUeGKNJ9V4co2n1HhqjYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGkfW+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vjV/87mNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzX+WeNfNf5d4z81/lvjfzWOqnGowTEaHLPBsRoc1uDYDQ5vcJwGRzQ4boPjNTh+gxM0OGGDEzU4cYOTNDhpg5M1OHmDUzQ4ZYNTNTh1g9M0OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNbhwg4s0SIOLNrhYg4s3uESDSza4VINLN7hMg8s2uFyDyze4QoMrjtYciSs3uEqDqza4WoOrN7hGg2s2uFaDaze4ToPrNrheg+s3uEGDGza4UYMbN7hJg5s2uFmDmze4RYNbNrhVg1s3uE2D2za4XYPbN7hDgzs2uFODOze4S4O7Nrhbg7s3uEeDeza4V4N7N7hPg/s2uF+D+zd4QIMHNnhQgwc3eEiDhzZ4WIOHN3hEg0c2eFSDRzd4TIPHNmiDxzV4fIMnNHhigyc1eHKDpzR4aoODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wZH/f0/y4bTGjy9wTMaPLPBsxr8v8X+uQ2e1+D5DV7Q4IUNXtTgxQ1e0uClDV7W4OUNXtHglQ2j/vexvdc0eG2D1zV4fYM3NHhjgzc1jPN/9wa3Nnhbg7c3eEeDdzZ4V4N3N3hPg/c2eF+D9zf4QIMPNjiywYcafLjBRxp8tMHHGny8wScafLLBpxp8usFnGny2wecafL7BFxp8scGXGny5wVcafLXB1xp8vcE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGvy0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxr8u8F/Gvy3wf+GDTlqNJcWx2hxzBbHanFYi2O3OLzFcVoc0eK4oyb+n+q2OEGLE7Y40ahR//97khYnbXGyFidvcYoWp2xxqhanbnGaFqdtcboWp29xhhZnbHGmFmducZYWZ21xthZnbxlzNMM5W5yrxblbnKfFeVucr8X5W1ygxQVbXKjFhVtcpEVaXLTFxVpcvMUlWlyyxaVaXLrFZVpctsXlWly+xRVaXLHFlVpcucVVWly1xdVaXL3FNVpcs8W1Wly7xXVaXLfF9Vpcv8UNWtywxY1a3LjFTVrctMXNWty8xS1a3LLFrVrcusVtWty2xe1a3L7FHVrcscWdWty5xV1a3LXF3VrcvcU9Wtyzxb1a3LvFfVrct8X9Wty/xQNaPLDFg1o8uMVDWjy0xcNaPLzFI1o8ssWjWjy6xWNaPLZFWzyuxeNbPKHFE1s8qcWTWzylxVNbHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3hai6e3eEaLZ7Z4Votnt3hOi+e2eF6L57d4QYsXtnhRixe3eEmLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi3e3eE+L97Z4X4v3t/hAiw+2OLLFh1p8uMVHWny0xcdafLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc1eJQh2N0OGaHY3U4rMOxOxze4Tgdjuhw3A7H63D8DifocMIOJ+pw4g4n6XDSDifrcPIOp+hwyg6n6nDqDqfpcNoOp+tw+g5n6HDGDmfqcOYOZ+lw1g5n63D2DufocM4O5+pw7g7n6XDeDufrcP4OF+hwwQ4X6nDhDhfpkA4X7XCxDhfvcIkOl+xwqQ6X7nCZDpftcLkOl+9whQ5X7HClDlfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6373CHDnfscKcOd+5wlw537XC3DnfvcI8O9+xwrw737nCfDvftcL8O9+/wgA4P7PCgDg/u8JAOD+3wsA4P7/CIDo/s8KgOj+7wmA6P7dAOj+vw+A5P6PDEDk/q8OQOT+nw1A4HHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdntbh6R2e0eGZHZ7V4dkdntPhuR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0d3tXh3R3e0+G9Hd7X4f0dPtDhgx2O7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dkd1ONTjGD2O2eNYPQ7rceweh/c4To8jehy3x/F6HL/HCXqcsMeJepy4x0l6nLTHyXqcvMcpepyyx6l6nLrHaXqctsfpepy+xxl6nLHHmXqcucdZepy1x9l6nL3HOXqcs8e5epy7x3l6nLfH+Xqcv8cFelywx4V6XLjHRXqkx0V7XKzHxXtcoscle1yqx6V7XKbHZXtcrsfle1yhxxV7XKnHlXtcpcdVe1ytx9V7XKPHNXtcq8e1e1ynx3V7XK/H9XvcoMcNe9yox4173KTHTXvcrMfNe9yixy173KrHrXvcpsdte9yux+1nwR163LHHnXrcucddety1x9163L3HPXr+GtXjXj3u3eM+Pe7b43497t/jAT0e2ONBPR48fGhoNMNDezysx8N7PKLHI3s8qsejezymx2N7tMfjejy+xxN6PLHHk3o8ucdTejy1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7fKjHh3t8pMdHe3ysx8d7fKLHJ3t8qsene3ymx2d7fK7H53t8occXe3xp6H84vNLjqz2+1uPrPb7R45s9vtXj2z2+0/P/iPoH5sGP74sWnglnYtt2smLbtm3bK5jY/n5sxLZt25zYkwzizDyV5/7+976BXd29dnX1rj6njh8P4CcD+OkAfjaAwwfw8wH8YgC/HMCvBvDrAfxmAL8dwO8G8PsB/GEAfxzAnwbw5wEcMYC/DOCvAzhyAEcN4OgBHDOAvw3g7wP4xwD+OYB/DeDfA/jPAP47gGMH8D+PDQpwcIDjBTh+gBMEOGGAEwU4cYBDAhwa4CQBThrgZAFOHuAUAU4Z4FQBTh3gNAFOG+B0AU4f4AwBzhjgTAHOHOAsAc4a4GwBzh7gHAHOGeBcAUP+W8M8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASAS4Z4FIBEuDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhAMG3RigCcFeHKABnhKgKcGeFqApwc4LMAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8+PT/Je0ALwvw8gCvCPDKAK8KcCDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsCrA7wmwGsDvC7A6wO8IcAbA7wpYML/y/q3BnhbgLcHeEeAdwZ4V4B3B3hPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8G+FSATwf4TIDPBvhcgM8H+EKALwb4UoAvB/hKgK8G+FqArwf4RoBvBvhWgG8H+E6A7wb4XoDvB/hBgB8G+FGAHwf4SYCfBvhZgMMD/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAEQH+EuCvAY4McFSAowMcE+BvAf4e4B8B/hngXwH+HeA/Af4b4NgAxwU4KMTBIY4X4vghThDihCFOFOLEIQ4JcWiIk4Q4aYiThTh5iFOEOGWIU4U4dYjThDhtiNOFOH2IM4Q4Y4gzhThziLOEOGuIs4U4e4hzhDhniHOFOHeI84Q4b4jzhTh/iAuEuGCIC4W4cIiLhLhoiIuFuHiIS4S4ZIhLhUiIS4e4TIjLhrhciMuHuEKIK4a4Uogrh7hKiKuGQ/9nH1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xGEhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiQIhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh9iFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Z4V4h3h3hPiPeGOOg1x78/xAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdCfDnEV0J8NcTXQnw9xDdCfDPEt0J8O8R3Qnw3xPdCfD/ED0L8MMSPQvw4xE9C/DT8/99lDg/x8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xBHhPhLiL+GODLEUSGODnFMiL+F+HuIf4T4Z4h/hfh3iP+E+G+IY0Mc99/5RDg4wvEiHD/CCSKcMMKJIpw4wiERDo1wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjHCpCIlw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AiN8JQIT43wtAhPj3BYhGdEeGaEZ0V4doTnRHhuhOdFeH6EF0R4YYQXRfh3hJdEeGmEl0V4eYRXRHhlhFdFOBBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH+HVEV4T4bURXhfh9RHeEOGNEd4U4c0R3hLhrRHeFuHtEd4R4Z0R3hXh3RHeE+G9Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHwCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+OcESEv0T4a4QjIxwV4egIx0T4W4S/R/hHhH9G+Nf/2P0T4b8Rjo1wXISDYhwc43gxjh/jBDFOGONEMU4c45AYh8Y4SYyTxjhZjJPHOEWMU8Y4VYxTx8MHTRPjtDFOF+P0Mc4Q44wxzhTjzDHOEuOsMc4W4+wxzhHjnDHOFePcMc4T47wxzhfj/DEuEOOCMS4U48IxLhLjojEuFuPiMS4R45IxLhUjMS4d4zIxLhvjcjEuH+MKMa4Y40oxrhzjKjGuGuNqMa4e4xoxrhnjWjGuHeM6Ma4b43oxrh/jBjFuGONGMW4c4yYxbhrjZjFuHuMWMW4Z41Yxbh3jNjFuG+N2MW4f4w4x7hjjTjHuHOMuMe4a424x7h7jHjHuGeNeMe4d4z4x7hvjfjHuH+MBMR4Y40ExHhzjITEeGuNhMR4e4xExHhnjUTEeHeMxMR4b43ExHh/jCTGeGONJMZ4cozGeEuOpMZ4W4+kxDovxjBjPjPGsGM+O8ZwYz43xvBjPj/GCGC+M8aIYL47xkhgvjfGyGC+P8YoYr4zxqhgHYgxiDGOMYoxjTGJMY8xizGMsYixjrGKsY2xibGPsYuxjvDrGa2K8NsbrYrw+xhtivDHGm2K8OcZbYrw1xttivD3GO2K8M8a7Yrw7xntivDfG+2K8P8YHYnwwxodifDjGR2J8NMbHYnw8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2L8OMZPYvw0xs9iHB7j5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzGOiPGXGH+NcWSMo2IcHeOYGH+L8fcY/4jxzxj/ivHvGP+J8d8Yx8Y4LsZBCQ5OcLwEx09wggQnTHCiBCdOcEiCQxOcJMFJE5wswckTnCLBKROcKsGpE5wmwWkTnC7B6ROcIcEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIsElE1wqQRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDHBkxI8OUETPCXBUxM8LcHTExyW4BkJnpngWQmeneA5CZ6b4HkJnp/gBQlemOBFCV6c4CUJXprgZQlenuAVCV6Z4FUJDiQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJ3h1gtckeG2C1yV4fYI3JHhjgjcleHOCtyR4a4K3JXh7gnckeGeCdyV4d4L3JHhvgvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJTg8wc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8THJHgLwn+muDIBEclODrBMQn+luDvCf6R4J8J/pXg3wn+k+C/CY5NcFyCg1IcnOJ4KY6f4gQpTpjiRClOnOKQFIemOEmKk6Y4WYqTpzhFilOmOFWKU6c4TYrTpjhditOnOEOKM6Y4U4ozpzhLirOmOFuKs6c4R4pzpjhXinOnOE+K8040yPlSnD/FBVJcMMWFUlw4xUVSXHQQLpbi4ikukeKSKS6VIikuneIyKS6b4nIpLp/iCimumOJKKa6c4ioprpriaimunuIaKa6Z4loprp3iOimum+J6Ka6f4gYpbpjiRilunOImKW6a4mYpbp7iFilumeJWKW6d4jYpbpvidilun+IOKe6Y4k4p7pziLinumuJuKe6e4h4p7pniXinuneI+Ke6b4n4p7p/iASkemOJBKR6c4iEpHpriYSkenuIRKR6Z4lEpHp3iMSkem+JxKR6f4gkpnpjiSSmenKIpnpLiqSmeluLpKQ5L8YwUz0zxrBTPTvGcFM9N8bwUz0/xghQvTPGiFC9O8ZIUL03xshQvT/GKFK9M8aoUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU7w6xWvS27w2xetSvD7FG1K8McWbUrw5xVtSvDXF21K8PcU7UrwzxbtSvDvFe1K8N8X7Urw/xQdSfDDFh1J8OMVHUnw0xcdSfDzFJ1J8MsWnUnw6xWdSfDbF51J8PsUXUnwxxZdSfDnFV1J8NcXXUnw9xTdSfDPFt1J8O8V3Unw3xfdSfD/FD1L8MMWPUvw4xU9S/DTFz1IcnuLnKX6R4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKY5I8ZcUf01xZIqjUhyd4pgUf0vx9xT/SPHPFP9K8e8U/0nx3xTHpjguxUEZDs5wvAzHz3CCDCfMcKIMJ85wSIZDM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTNcLMPFM1wiwyUzXCpDMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjw5QzM8JcNTMzwtw9MzHJbhGRmemeFZGZ6d4TkZnpvheRmen+EFGV6Y4UUZXpzhJRlemuFlGV6e4RUZXpnhVRkOZBhkGGYYZRhnmGSYZphlmGdYZFhmWGVYZ9hk2GbYZdhneHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2R4Z4Z3ZXh3hvdkeG+G92V4f4YPZPhghg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9lODzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzMckeEvGf6a4cgMR2U4OsMxGf6W4e8Z/pHhnxn+leHfGf6T4b8Zjs1wXIaDchyc43g5jp/jBDlOmONEOU6c45Ach+Y4SY6T5jhZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiOi+e4RI5L5rhUjuS4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKOJ+V4co7meEqOp+Z4Wo6n5zgsxzNyPDPHs3I8O8dzcjw3x/NyPD/HC3IcN27suItyvDjHS3K8NMfLcrw8xytyvDLHq3IcyDHIMcwxyjHOMckxzTHLMc+xyLHMscqxzrHJsc2xy7HP8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/LcXiOn+f4RY5f5vhVjl/n+E2O3+b4XY7f5/hDjj/m+FOOP+c4Isdfcvw1x5E5jspxdI5jcvwtx99z/CPHP3P8K8e/c/wnx39zHPsf0xwHFTi4wPEKHL/ACQqcsMCJCpy4wCEFDi1wkgInLXCyAicvcIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQKXLHCpAilw6QKXKXDZApcrcPkCVyhwxQJXKnDlAlcpcNUCVytw9QLXKHDNAtcqcO0C1ylw3QLXK3D9AjcocMMCNypw4wI3KXDTAjcrcPMCtyhwywK3KnDrArcpcNsCtytw+wJ3KHDHAncqcOcCdylw1wJ3K3D3AvcocM+Cwf/3n71PgfsWuF+B+xd4QIEHFnhQgQcXeEiBhxZ4WIGHF3hEgUcWeFSBRxd4TIHHFnhcgccXeEKBJxZ4UoEnF2iBpxR4aoGnFXh6gcMKPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAgQKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Aq8u8JoCry3wugKvL/CGAm8s8KYCby7wlgJvLfC2Am8v8I4C7ywY764C7y7wngLvLfC+Au8v8IECHyzwoQIfLvCRAh8t8LECHy/wiQKfLPCpAp8u8JkCny3wuQKfL/CFAl8s8KUCXy7wlQJfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswKHF/h5gV8U+GWBXxX4dYHfFPhtgd8V+H2BPxT4Y4E/FfhzgSMK/KXAXwscWeCoAkcXOKbA3wr8vcA/CvyzwL8K/LvAfwr8t8CxBY4rcFCJg0scr8TxS5ygxAlLnKjEiUscUuLQEicpcdISJytx8hKnKHHKEqcqceoSpylx2hKnK3H6EmcoccYSZypx5hJnGYqzljhbibOXOEeJc5Y4V4lzlzhPifOWOF+J85e4QIkLlrhQiQuXuEiJi5a4WImLl7hEiUuWuFSJlLh0icuUuGyJy5W4fIkrlLhiiSuVuHKJq5S4aomrlbh6iWuUuGaJa5W4donrlLhuieuVuH6JG5S4YYkblbhxiZuUuGmJm5W4eYlblLhliVuVuHWJ25S4bYnblbh9iTuUuGOJO5W4c4m7lLhribuVuHuJe5S4Z4l7lbh3ifuUuG+J+/3HYNCgQQeUeGCJB5V4cImHlHhoiYeVeHiJR5R4ZIlHlXh0iceUeGyJx5V4fIknlHhiiSeVeHKJlnhKiaeWeFqJp5c4rMQzSjyzxLNKPLvEc0o8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrShwoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHO8v+by3FPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia8Ow9dKfL3EN0p8s8S3Sny7xHdKfLfE90p8v8QPSvywxI9K/LjET0r8tMTPShxe4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8ljijHjfu/WpaRJY4qcXSJY0r8rcTfS/yjxD9L/KvEv0v8p8R/Sxxb4rgSB1U4uMLxKhy/wgkqnLDCiSqcuMIhFQ6tcJIKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmf9T2/QoEGzVzhHhXNWOFeFc1c4T4XzVjhfhfNXuECFC1a4UIULV7hIhYtWuFiFi1e4RIVLVrhUhVS4dIXLVLhshctVuHyFK1S4YoUrVbhyhatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFx1R4bIXHVXh8hSdUeGKFJ1V4coVWeEqFp1Z4WoWnVziswjMqPLPCsyo8u8JzKjy3wvMqPL/CCyq8sMKLKry4wksqvLTCyyq8vMIrKryywqsqHKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/DqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q3B4hZ9X+EWFX1b4VYVfV/hNhd9W+F2F31f4Q4U/VvhThT9XOKLCXyr8tcKRFY6qcHSFYyr8rcLfK/yjwj8r/KvCvyv8p8J/Kxxb4bgKB9U4uMbxahy/xglqnLDGiWqcuMYhNQ6tcZIaJ61xshonr3GKGqescaoap65xmhqnrXG6GqevcYYaZ6xxphpnrnGWGmetcbYaZ69xjhrnrHGuGueucZ4a561xvhrnr3GBGhescaEaF65xkRoXrXGxGhevcYkal6xxqRqpcekal6lx2RqXq3H5GleoccUaV6px5RpXqXHVGlercfUa16hxzRrXqnHtGtepcd0a16tx/Ro3qHHDGjeqceMaN6lx0xo3q3HzGreoccsat6px6xq3qXHbGrercfsad6hxxxp3qnHnGnepcdcad6tx9xr3qHHPGveqce8a96lx3xr3q3H/Gg+o8cAaD6rx4BoPqfHQGg+r8fAaj6jxyBqPqvHoGo+p8dgaj6vx+BpPqPHEGk+q8eQarfGUGk+t8bQaT69xWI1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1ThQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V49013lPjvTXeV+P9NT5Q44M1PlTjwzU+UuOjNT5W4+M1PlHjkzU+VePTNT5T47M1Plfj8zW+UOOLNb5U48s1vlLjqzW+VuPrNb5R45s1vlXj2zW+U+O7Nb5X4/s1flDjhzV+VOPHNX5S46c1flbj8Bo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rnFEjb/U+GuNI2scVePoGsfU+FuNv9f4R41/1vhXjX/X+E+N/9Y4tsZxNQ5qcHCD4zU4foMTNDhhgxM1OHGDQxoc2uAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FIN0uDSDS7T4LINLtfg8g2u0ExyTDbN//M+WrnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsGHIRg1u3OAmDW7a4GYNbt7gFg1u2eBWDW7d4DYNbtvgdg1u3+AODe7Y4E4N7tzgLg3u2uBuDe7e4B4N7tngXg3u3eA+De7b4H4N7t/gAQ0e2OBBDR7c4CENHtrgYQ0e3uARDR7Z4FENHt3gMQ0e2+BxDR7f4AkNntjgSQ2e3KANntLgqQ2e1uDpDQ5r8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb/CKBq9s8KoGBxoMGgwbjBqMG0waTBdIzBrMGywaLBusGqwbbBpsG+wa7Bu8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxoc3uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDY5o8JcGf21wZIOjGhzd4JgGf2vw9wb/aPDPBv9q8O8G/2nw3wbHNjiuwUEtDm5xvBbHb3GCFidscaIWJ25xSItDW5ykxUlbnKzFyVucosUpW5yqxalbnKbFaVucrsXpW5xh4kHO2OJMLc7c4iwtztribC3O3uIcLc7Z4lwtzt3iPC3O2+J8Lc7f4gItLtjiQi0u3OIiLS7a4mItLt7iEi0u2eJSLdLi0i0u0+KyLS7X4vItrtDiii2u1OLKLa7S4qotrtbi6i2u0eKaLa7V4totrtPiui2u1+L6LW7Q4oYtbtTixi1u0uKmLW7W4uYtbtHili1u1eLWLW7T4rYtbtfi9i3u0OKOLe7U4s4t7tLiri3u1uLuLe7R4p4t7tXi3i3u0+K+Le7X4v4tHtDigS0e1OLBLR7S4qEtHtbi4S0e0eKRLR7V4tEtHtPisS0e1+LxLZ7Q4oktntTiyS3a4iktntriaS2e3uKwFs9o8cwWz2rx7BbPafHcFs9r8fwWL2jxwhYvavHiFi9p8dIWL2vx8havaPHKFq9qcaDFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsWrW7ymxWtbvK7F61u8ocUbW7ypxZtbvKXFW1u8rcXbW7yjxTtbvKvFu1u8p8V7W7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXhLf/FYr9o8csWv2rx6xa/afHbFr9r8fsWf2jxxxZ/avHnFke0+EuLv7Y4ssVRLY5ucUyLv7X4e4t/tPhni3+1+HeL/7T4b4tjWxzX4qAOB3c4XofjdzhBhxN2OFGHE3c4pMOhHU7S4aQdTtbh5B1O0eGUHU7V4dQdTtPhtB1O1+H0Hc7Q4YwdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7U4cIdLtLhoh0u1uHiHS7R4ZIdLtUhHS7d4TIdLtvhch0u3+EKHa7Y4Uodrtwx6L+9rtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3KEdntLhqR2e1uHpHQ7r8IwOz+zwrA7P7vCcDs/t8LwOz+/wgg4v7PCiDi/u8JIOL+3wsg4v7/CKDq/s8KoOBzoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO7y6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DB7rB/2/f18MdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4fAOP+/wiw6/7PCrDr/u8JsOv+3wuw6/7/CHDn/s8KcOf+5wRIe/dPhrhyM7HNXh6A7HdPhbh793+EeHf3b4V4d/d/hPh/92OLbDcR0O6nFwj+P1OH6PE/Q4YY8T9Thxj0N6HNrjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yw9ztrjbD3O3uMcPc75P/25e5ynx3l7nK/H+XtcoMcFe1yox4V7XKTHRXtcrMfFe1yixyV7XKpHely6x2V6XLbH5XpcvscVelyxx5V6XLnHVXpctcfVely9xzV6XLPHtXpcu8d1ely3x/V6XL/HDXrcsMeNety4x0163LTHzXrcvMctetyyx6163LrHbXrctsftety+xx163LHHnXrcucddety1x9163L3HPXrcs8e9ety7x3163LfH/Xrcv8cDejywx4N6PLjHQ3o8tMfDejy8xyN6PLLHo3o8usdjejy2x+N6PL7HE3o8sceTejy5R3s8pcdTezytx9N7HNbjGT2e2eNZPZ7d4zk9ntvjeT2e3+MFPV7Y40U9XtzjJT1e2uNlPV7e4xU9XtnjVT0O9Bj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3eHWP1/yPz3U9Xt/jDT3e2ONNPd7c4y093trjbT3e3uMdPd7Z41093t3jPT3e2+N9Pd7f4wM9PtjjQz0+3OMjPT7a42M9Pt7jEz0+2eNTPT7d4zM9Ptvjcz0+3+MLPb7Y40s9vtzjKz2+2uNrPb7e4xs9vtnjWz2+3eM7Pb7b43s9vt/jBz1+2ONHPX7c4yc9ftrjZz0O7/HzHr/o8csev+rx6x6/6fHbHr/r8fsef+jxxx5/6vHnHkf0+EuPv/Y4ssdRPY7ucUyP/z+i3rl77DPY3v4mDZratt1etW3btu2rSm3byMdGatu2bVtJntVznnV+9xu415619x971uyZ30fhH6Pwz1H41yj8exT+Mwr/HYVjRuHYUThuFA4EOCjAwQGOF+CQAIcGOCzA4QGOH+CIACcIcMIAJwpw4gAnCXDSACcLcPIApwhwygCnCnDqAKcJcNoApwtw+gBnCHDGAGcKcOYAZwlw1gBnC3D24P/21I+bK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLEACXDzAJQJcMsClAgb/h2uZAJcNcLkAlw9whQBXDHClAFcOcJUAVw1wtQBXD3CNANcMcK0A1w5wnQDXDXC9ANcPcIMANwxwowA3DnCTADcNcLMANw9wiwC3DHCrALcOcJsAtw1wuwC3D3CHAHcMcKcAdw5wlwB3DXC3AHcPcI8A9wxwrwD3DnCfAPcNcL8A9w/wgAAPDPCgAA8O8JAADw3wsAAPD/CIAI8M8KgAjw7wmACPDfC4AI8P0ABPCPDEAE8K8OQATwlwZICnBnhagKcHeEaAZwZ4VoBnB3hOgOcGeF6A5wd4QYAXBnhRgBcHeEmAlwZ4WYCXB3hFgFcGeFWAVwd4TYDXBnhdgNcHeEOANwZ4U4A3B3hLgLcGeFuAowIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsAxwd4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/AY4JcOx/mgtwIMRBIQ4OcbwQh4Q4NMRhIQ4PcfwQR4Q4QYgThjhRiBOHOEmIk4Y4WYiThzhFiFOGOFWIU4c4TYjThjhdiNOHOEOIM4Y4U4gzhzhLiLOGOFuIs4c4R4hzhjhXyN7/eaF5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUIkxMVDXCLEJUNcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDNMQTQjwxxJNCPDnEU0IcGeKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbiqBCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeHeHuId4R4Z4h3hXh3iPeEeG+I94V4f4gPhPhgiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhAM+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+KYEMeGOC7EgQgHRTg4wvEiHBLh0AiHRTg8wvEjHBHhBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiERLh4hEuEeGSES4V4dIRLhPhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe41bpx7R7hPhPtGuF+E+0d4QIQHRnhQhAdHeEiEh0Z4WISHR3hEhEdGeFSER0d4TITHRnhchMdHaIQnRHhihCdFeHKEp0Q4MsJTIzwtwtMjPCPCMyM8K8KzIzwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3CUREGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EY6O8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCJ+L8PkIX4jwxQhfivDlCF+J8NUIX4vw9QjfiPDNCN+K8O0I34nw3Qjfi/D9CD+I8MMIP4rw4wg/ifDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCMdEODbCcREOxDgoxsExjhfjkBiHxjgsxuExjh/jiBgniHHCGCeKceIYJ4lx0hgni3HymJFTxDhljFPFOHWM08Q4bYzTxQwa+N/WizPGOFOMM8c4S4yzxjhbjLPHOEeMc8Y4V4xzxzhPjPPGOF+M88e4QIwLxrhQjAvHuEiMi8a4WIzEuHiMS8S4ZIxLxbh0jMvEuGyMy8W4fIwrxLhijCvFuHKMq8S4aoyrxbh6jGvEuGaMa8W4dozrxLhujOvFuH6MG8S4YYwbxbhxjJvEuGmMm8W4eYxbxLhljFvFuHWM28S4bYzbxbh9jDvEuGOMO8W4c4y7xLhrjLvFuHuMe8S4Z4x7xbh3jPvEuG+M+8W4f4wHxHhgjAfFeHCMh8R4aIyHxXh4jEfEeGSMR8V4dIzHxHhsjMfFeHyMxnhCjCfG/3sv4b93SowjYzw1xtNiPD3GM2I8M8azYjw7xnNiPDfG8+Jhnh/jBTFeGONFMV4c4yUxXhrjZTFeHuMVMV4Z41UxXh3jNTFeG+N1MV4f4w0x3hjjTTHeHOMtMd4a420xjooxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj3F0jLfHeEeMd8Z4V4x3x3hPjPfGeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xjgmxrExjhuCAwkOSnBwguMlOCTBoQkOS3B4guMnOCLBCRKcMMGJEpw4wUkSnDTByRKcPMEpEpwywakSnDrBaRKcNsHpEpw+wRkSnDHBmRKcOcFZEpw1wdkSnD3BORKcM8G5Epw7wXkSnDfB+RKcP8EFElwwwYUSXDjBRRJcNMHFEiTBxRNcIsElE05YKsGlE1wmwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTNMETEjwxwZMSPDnBUxIcmeCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbgqASDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BEcneHuCdyR4Z4J3JXh3gvckeG+C9yV4f4IPJPhggg8l+HCCjyT4aIKPJfh4gk8k+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgmMSHJvguAQHUhyU4uAUx0txSIpDUxyW4vAUx09xRIoTpDhhihOlOHGKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoioulSIqLp7hEikumuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFrKoFNSXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M0xRNSPDHFk1I8OcX/cI9M8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/efaFSKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYqjU7w9xTtSvDPFu1K8O8V7Urw3xftSvD/FB1J8MMWHUnw4xUdSfDTFx1J8PMUnUnwyxadSfDrFZ1J8NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9S/DLFr1L8OsVvUvw2xe9S/D7FH1L8McWfUvw5xV9S/DXF31L8PcU/Uvwzxb9S/DvFf1L8N8UxKY5NcVyKAxkOynBwhuNlOCTDoRkOy3B4huNnOCLDCTKcMMOJMpw4w0kynDTDyTKcPMMpMpwyw6kynDrDaTKcNsPpMpw+wxkynDHDmTKcOcNZMpw1w9kynD3DOTKcM8O5Mpw7w3kynDfD+TKcP8MFMlwww4UyXDjDRTJcNMPFMiTDxTNcIsMlM1wqw6UzXCbDZTNcLsPlM1whwxUzXCnDlTNcJcNVM1wtw9UzXCPDNTNcK8O1M1wnw3UzXC/D9TPcIMMNM9wow40z3CTDTTPcLMPNM9wiwy0z3CrDrTPcJsNtM9wuw+0z3CHDHTPcKcOdM9wlw10z3C3D3TPcI8M9M9wrw70z3CfDfTPcL8P9MzwgwwMzPCjDgzM8JMNDMzwsw8MzPCLDIzM8KsOjMzwmw2MzPC7D4zM0wxMyPDHDkzI8OcNTMhyZ4akZnpbh6RmekeGZGZ6V4dkZnpPhuRmel+H5GV6Q4YUZXpThxRlekuGlGV6W4eUZXpHhlRleleHVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluGoDIMMwwyjDOMMkwzTDLMM8wyLDMsMqwzrDJsM2wy7DPsMR2d4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+GaGb2X4dobvZPhuhu9l+H6GH2T4YYYfZfhxhp9k+GmGn2X4eYZfZPhlhl9l+HWG32T4bYbfZfh9hj9k+GOGP2X4c4a/ZPhrhr9l+HuGf2T4Z4Z/Zfh3hv9k+G+GYzIcm+G4DAdyHJTj4BzHy3FIjkNzHJbj8BzHz3FEjhPkOGGOE+U4cY6T5DhpjpPlOHmOU+Q4ZY5T5Th1jtPkOG2O0+XMMP/AgDPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5UiOi+e4RI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+dojifkeGKOJ+V4co6n5Dgyx1NzPC3H03M8I8czczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8LcdROQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5js7x9hzvyPHOHO/K8e4c78nx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdfKTv5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5PhvjmNyHJvjuBwHChxU4OACxytwSIFDCxxW4PACxy9wRIETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVSIGLF7jEuHHjTi5wqQKXLnCZApctcLkCly9whQJXLHClAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v0AJPKPDEAk8q8L9anVLgyAJPLfC0Ak8v8IwCzyzwrALPLvCcAs8t8LwCzy/wggIvLPCiAi8u8JICLy3wsgIvL/CKAq8s8KoCry7wmgKvLfC6Aq8v8IYCbyzwpgJvLvCWYvj/zeaNGhhkUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX+DoAm8v8I4C7yzwrgLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LXBMgWMLHFfgQImDShxc4nglDilxaInDShxe4vgljihxghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxpvL/ZbRnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIpcfESlyhxyRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSLfGEEk8s8aQSTy7xlBJHlnhqiaeVeHqJZ5R4ZolnlXh2ieeUeG6J55V4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYnXlHhtideVeH2JN5R4Y4k3lXhzibeUeGuJt5U4qsSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xNEl3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4pgSx5Y4rsSBCgdVOLjC8SocUuHQCodVOLzC8SscUeEEFU5YDXOiCieucJIKJ61wsgonr3CKCqescKoKp65wmgqnrXC6CqevcIYKZ6xwpgpnrnCWCmetcLYKZ69wjgrnrHCu////eSqct8L5Kpy/wgUqXLDChSpcuMJFKly0wsUqpMLFK1yiwiUrXKrCpStcpsJlK1yuwuUrXKHCFStcqcKVK1ylwlUrXK3C1Stco8I1K1yrwrUrXKfCdStcr8L1K9ygwg0r3KjCjSvcpMJNK9ysws0r3KLCLSvcqsKtK9ymwm0r3K7C7SvcocIdK9ypwp0r3KXCXSvcrcLdK9yjwj0r3KvCvSvcp8J9K9yvwv0rPKDCAys8qMKDKzykwkMrPKzCwys8osIjKzyqwqMrPKbCYys8rsLjK7TCEyo8scKTKjy5wlMqHFnhqRWeVuHpFZ5R4ZkVnlXh2RWeU+G5FZ5X4fkVXlDhhRVeVOHFFV5S4aUVXlbh5RVeUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUuGtFd5W4agKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wpHV3h7hXdUeGeFd1V4d4X3VHhvhfdVeH+FD1T4YIUPVfhwhY9U+GiFj1X4eIVPVPhkhU9V+HSFz1T4bIXPVfh8hS9U+GKFL1X4coWvVPhqha9V+HqFb1T4ZoVvVfh2he9U+G6F71X4foUfVPhhhR9V+HGFn1T4aYWfVfh5hV9U+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VPhnhX9V+HeF/1T4b4VjKhz7n94HcKDGQTUOrnG8GofUOLTGYTUOr3H8GkfUOEGNE9Y4UY0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI3UuHiNS9S4ZI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyN1nhCjSfWeFKNJ9d4So0jazy1xtNqPL3GM2o8s8azajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22ocVWNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2Nf4+gab6/xjhrvrPGuGu+u8Z4a763xvhrvr/GBGh+s8aEaH67xkRofrfGxGh+v8Ykan6zxqRqfrvGZGp+t8bkan59+0MB/2nmxxpdqfLnGV2p8tcbXany9xjdqfLPGt2p8u8Z3any3xvdqfL/GD2r8sMaPavy4xk9q/LTGz2r8vMYvavyyxq9q/LrGb2r8tsbvavy+xh9q/LHGn2r8ucZfavy1xt9q/L3GP2r8s8a/avy7xn9q/LfGMTWOrXFcjQMNDmpwcIPjNTikwaENDmtweIPjNziiwQkanLDBiRqcuMFJGpy0wckanLzBKRqcssGpGpy6wWkanLbB6RqcvsEZGpyxwZkanLnBWRqctcHZGpy9wTkanLPBuRqcu8F5Gpy3wfkanL/BBRpcsMGFGly4wUUaXLTBxRqkwcUbXKLBJRtcqsGlG1ymwWUbXK7B5RtcocEVG1ypwZUbXKXBVRtcrcHVG1yjwTUbXKvBtRtcp8F1G1yvwfUb3KDBDRvcqMGNG9ykwU0b3KzBzRvcosEtG9yqwa0b3KbBbRvcrsHtG9yhwR0b3KnBnRvcpcFdG9ytwd0b3KPBPRvcq8G9G9ynwX0b3K/B/Rs8oMEDGzyowYMbPKTBQxs8rMHDGzyiwSMbPKrBoxs8psFjGzyuweMbtMETGjyxwZMaPLnBUxoc2eCpDZ7W4OkNntHgmQ2e1eDZDZ7T4LkNntfg+Q1e0OCFDV7U4MUNXtLgpQ1e1uDlDV7R4JUNXtXg1Q1e0+C1DV7X4PUN3tDgjQ3e1ODNDd7S4K0N3tYwcMrAgEGDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32Doxu8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfBMQ2ObXBcgwMtDmpxcIvjtTikxaEtDmv/J5P8Pz59RIsTtDhhixO1OHGLk7Q4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztThzi7O0OGuLs7U4e4tztDhni3O1OHeL87Q4b4vztTh/iwu0uGCLC7W4cIuLtLhoi4u1SIuLt7hEi0u2uFSLS7e4TIvLtrhci8u3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7c4fGBgYN8W92tx/xYPaPHAFg9q8eAWD2nx0BYPawcNHN7iES0e2eJRLR7d4jEtHtvicS0e36ItntDiiS2e1OLJLZ7S4sh2xMCpLZ7W4uktntHimS2e1eLZLZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbiqBaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fke3eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi2NaHNviuBYHOhzU4eAOx+twSIdDOxzW4fAOx+9wRIcTdDhhhxN1OHGHk3Q4aYeTdTh5h1N0OGWHU3U4dYfTdDhth9N1OH2HM3Q4Y4czdThzh7N0u0w4MICzdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3VIh4t3uESHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3aIcndHhihyd1eHKHp3Q4ssNTOzytw9M7PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMPLO7yiwys7vKrDqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3DUR0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh32HY7u8PYO7+jwzg7v6vDuDu/p8N4O7+vw/g4f6PDBDh/q8OEOH+nw0Q4f6/DxDp/o8MkOn+rw6Q6f6fDZDp/r8PkOX+jwxQ5f6vDlDl/p8NUOX+vw9Q7f6PDNDt/q8O0O3+nw3Q7f6/D9Dj/o8MMOP+rw4w4/6fDTDj/r8PMOv+jwyw6/6vDrDr/p8NsOv+vw+w5/6PDHDn/q8OcOf+nw1w5/6/D3Dv/o8M8O/+rw7w7/6fDfDsd0OLbDcR0O9Diox8E9jtfjkB6H9jisx+E9jt/jiB4n6HHCHifqceIeJ+lx0h4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n2xDn73GBHhfscaEeF+5xkR4X7XGxHulx8R6X6HHJHpfqcekel+lx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B7t8YQeT+zxpB5P7vGUHkf2eGqPp/V4eo9n9Hhmj2f1eHaP5/R4bo/n9Xh+jxf0eGGPF/V4cY+X9Hhpj5f1eHmPV/R4ZY9X9Xh1j9f0eG2P1/V4fY839Hhjjzf1eHOPt/R4a4+39Tiqx6DHsMeox7jHpMe0x6zHvMeix7LHqsd66MDAfxxue+x67Hsc3ePtPd7R45093tXj3T3e0+O9/3F7YGDg/h4f6PHBHh/q8eEeH+nx0R4f6/HxHp/o8cken+rx6R6f6fHZHp/r8fkeX+jxxR5f6vHlHl/p8dUeX+vx9R7f6PHNHt/q8e0e3+nx3R7f6/H9Hj/o8cMeP+rx4x4/6fHTHj/r8fMev+jxyx6/6vHrHr/p8dsev+vx+x5/6PHHHn/q8ecef+nx1x5/6/H3Hv/o8c8e/+rx7x7/6fHfHsf0OLbHcT0OjMZBo3HwaBxvNA4ZjUNH47DROHw0jj8aR4zm/6PpHJzAPr6vHVQpU7epbTy1U9u2bespktq27SRtko+N2rZtW+/0N9/3P9g997mzc3b3zHXSACcLcPIApwhwygCnCnBogFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4LMBZApw1wNkCnD3AOQKcM8C5Apw7wHkCnDfA+QKcP8AFAlwwwIUCXDjARQJcNMDFAlw8wCUCXDJAAlwqwKUDXCbAZQNcLsDlA1whwBUDXCnAlQNcJcBVA1wtwOEBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbjl8wID/tNw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDFAAzwpwJMDPCXAUwMcEeDIAE8L8PQAzwjwzADPCvDsAM8J8NwAzwvw/AAvCPDCAC/6j5X/GcRLA7wswMsDvCLAKwO8KsCrA7wmwGsDvC7A6wO8IcAbA7wpwJsDvCXAWwO8LcDbA7wjwDsDvCvAuwO8J8B7A7wvwPsDfCDAUQGODnBMgA8G+FCAYwMcF+D4AIMAw//q+7/1JQGmAWb/460IsAywCrAOsAmwDbALsA/w4QAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L/i+FNWzQAPwwwI8C/DjATwL8NMDPAvw8wC8C/DLArwL8OsBvAvw2wO8C/D7AHwL8McCfAvw5wF8C/DXA3wL8PcA/AvwzwL8C/DvAfwL8N8ABIQ4McVCIg0OcIMQJQ5woxIlDnCTEISFOGuJkIU4e4hQhThniVCEODXHqEKcJcdoQpwtx+hBnCHHGEGcKceYQh4U4S4izhjhbiLOHOEeIc4Y4V4hzhzhPiPOGOF+I84e4QIgLhrhQiAuHuEiIi4a4WIiLh7hEiEuGSIhLhbh0iMuEuGyIy4W4fIgrhLhiiCuFuHKIq4S4aoirhTg8xNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xBEhjgzxtBBPD/GMEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRBHhTg6xDEhPhjiQyGODXFciONDDEIMQ4xCjENMQkxDzELMQyxCLEOsQqxDbEJsQ+xC7EN8OMRHQnw0xMdCfDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdCfDnEV0J8NcTXQnw9xDdCfDPEt0J8O8R3Qnw3xPdCfD/ED0L8MMSPQvw4xE9C/DTEz0L8PMQvQvwyxK9C/DrEb0L8NsTvQvw+xB9C/DHEn0L8OcRfQvw1xN9C/D3EP0L8M8S/Qvw7xH9C/DfEAREOjHBQhIMjnCDCCSOcKMKJI5wkwiERThrhZBFOHuEUEU4Z4VQRDo1w6giniXDaCKeLcPoIZ4hwxghninDmCIdFOEuEs0Y4W4SzRzhHhHNGOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGuFiEi0e4RIRLRkiES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0U4PMLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcIREY6M8LQIT4/wjAjPjPCsCM+O8JwIz43wvAjPj/CCCC+M8KIIL47wkggvjfCyCC+P8IoIr4zwqgivjvCaCK+N8LoIr4/whghvjPCmCG+O8JYIb43wtghvj/COCO+M8K4I747wngjvjfC+CO+P8IEIR0U4OsIxET4Y4UMRjo1wXITjIwwiDCOMIowjTCJMI8wizCMsIiwjrCKsI2wibCPsIuwjfDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/PC/PhswYMDHEX4S4acRfhYx6PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCAfEODDGQTEOjnGCGCeMcaIYJ45xkhiHxDhpjJPFOHmMU8Q4ZYxTxTg0xqljnCbGaWOcLsbpY5whxhljnCnGmWMcFuMsMc4a42wxzh7jHDHOGeNcMc4d4zwxzhvjfDHOH+MCMS4Y40IxLhzjIjEuGuNiMS4e4xIxLhkjMS4V49IxLhPjsjEuF+PyMa4Q44oxrhTjyjGuEuOqMa4W4/AYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3jXGzGDePcYsYt4xxqxi3jnGbGLeNcbsYt49xhxh3jHGnGHeOcZcYd41xtxh3j3GPGPeMca8Y945xnxj3jXG/GPeP8YAYD4zxoBgPjvGQGA+N8bAYD4/xiBiPjPGo/4xtjMfEeGyMx8V4fIwnxHhijMZ4Uownx3hKjKfGOCLGkTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOOoGEfHOCbGB2MGDBg4wLExjotxfIxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xjggwYEJDkpwcIITJDhhghMlOHGCkyQ4JMFJE5wswckTnCLBKROcKsGhCU6d4DQJTpvgdAlOn+AMCc6Y4EwJzpzgsARnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKcOEEF0lw0QQXS3DxBJdIcMkESXCpBJdOcJkEl01wuQSXT3CFBFdMcKUEV05wlQRXTXC1BIcnuHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigiZ4UoInJ3hKgqcmOCLBkQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleDdCd6T4L0J3pfg/Qk+kOCoBEcnOCbBBxN8KMGxCY5LcHyCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYIPJ/hIgo8m+FiCjyf4RIJPJvhUgk8n+EyCzyb4XILPJ/hCgi8m+FKCLyf4SoKvJvhagq8n+EaCbyb4VoJvJ/hOgu8m+F6C7yf4QYIfJvhRgh8n+EmCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgn8n+E+C/yY4IMWBKQ5KcXCKE6Q4YYoTpThxipOkOCTFSVOcLMXJU5wixSlTnCrFoSlOneI0KU6b4nQpTp/iDCnOmOJMKc6c4rAUZ0lx1hRnS3H2FOdIcc4U50r57+RynhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTJEUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0txeIqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6eDPSDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTNMWTUjw5xVNSPDXFESmOTPG0FE9P8YwUz0zxrBTPTvGcFM9N8bwUz0/xghQvTPGiFC9O8ZIUL03xshQvT/GKFK9M8aoUr07xmhSvTfG6FK9P8YYUb0zxphRvTvGWFG9N8bYUb0/xjhTvTPGuFO9O8Z4U703xvhTvT/GBFEelODrFMSk+mOJDKY5NcVyK41MMUgzTIf+XJ4pTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTfDjFR1J8NMXHUnw8xSdSfDLFp1J8OsVnUnw2xedSfD7FF1J8McWXUnw5xVdSfDXF11J8PcU3UnwzxbdSfDvFd1J8N8X3Unw/xQ9S/DDFj1L8OMVPUvw0xc9S/DzFL1L8MsWvUvw6xW9S/DbF7/7rs//dc/6Y4k8p/pziLyn+muJvKf6e4h8p/pniXyn+neI/Kf6b4oAMB2Y4KMPBGU6Q4YQZTpThxBlOkuGQDCfNcLIMJ89wigynzHCqDIdmOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4bDMpwlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyHJ7h6hmukeGaGa6VDf0/ZtbJcN0M18tw/Qw3yHDDDDfKcOMMN8lw0ww3y3DzDLfIcMsMt8pw6wy3yXDbDLfLcPsMd8hwxwx3ynDnDHfJcNcMd8tw9wz3yHDPDPfKcO8M98lw3wz3y3D/DA/I8MAMD8rw4AwPyfDQDA/L8PAMj8jwyAyPyvDoDI/J8NgMj8sYeHyGJ2R4YoZmeFKGJ2d4SoanZjgiw5EZnpbh6RmekeGZGZ6V4dkZnpPhuRmel+H5GV6Q4YUZXpThxRlekuGlGV6W4eUZXpHhlRleleHVGV6T4bUZXpcNGHF9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2R4Z4Z3ZXh3hvdkeG+G92V4f4YPZDgqw9EZjvlPt/+xPzbDcRmOzzDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8OEMH8nw0Qwfy/DxDJ/I8MkMn8rw6QyfyfDZDJ/L8PkMX8jwxQxfyvDlDF/J8NUMX8vw9QzfyPDNDN/K8O0M38nw3Qzfy/D9DD/I8MMMP8rw4ww/yfDTDD/L8PMMv8jwywy/yvDrDL/J8NsMv8vw+wx/yPDHDH/K8OcMf8nw1wx/y/D3DP/I8M8M/8rw7wz/yfDfDAfkODDHQTkOznGCHCfMcaIcJ85xkhyH5DhpjpPlOHmOU+Q4ZY5T5QwemuPUOU6T47Q5Tpfj9DnOkOOMOc6U48w5DstxlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMkRyXynHpHJfJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3F4jqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjiNyHJnjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzmOynF0jmNyfDDHh3Icm+O4HMfnGOQY5hjlGOeY5JjmmOWY51jkWOZY5Vjn2OTY5tjl2Of4cI6P5Phojo/l+HiOT+T4ZI5P5fh0js/k+GyOz+X4fI4v5Phiji/l+HKOr+T4ao6v5fh6jm/k+GaOb+X4do7v5Phuju/l+H6OH+T4YY4f5fhxjp/k+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5fh3jv/k+G+OAwocWOCgAgcXOEGBExY4UYETFzhJgUMKnLTAyQqcvMApCpyywKkKHFrg1AVOU+C0BU5X4PQFzlDgjAXOVODMBQ4rcJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQKXLJAClypw6QKXKXDZApcrcPkCVyhwxQJXKnDl4v98xv/9aV6twOEFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW5Y4EYFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeX+AJBZ5YoAWeVODJBZ5S4KkFjihwZIGnFXh6gWcUeGaBZxV4doHnFHhugecVeH6BFxR4YYEXFXhxgZcUeGmBlxV4eYFXFHhlgVcVeHWB1xR4bYHXFXh9gTcUeGOBNxV4c4G3FHhrgbcVeHuBdxR4Z4F3FXh3gfcUeG+B9xV4f4EPFDiqwNEFjinwwQIfKnBsgeMKHF9gUGD4v0L/x3dSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX+DDBT5S4KMFPlbg4wU+UeCTBT5V4NMFPlPgswU+V+DzBb5Q4IsFvlTgywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeCfBf5V4N8F/lPgvwUOKHFgiYNKHFziBCVOWOJEJU5c4iQlDilx0hInK3HyEqcoccoSpypxaIlTlzhNidOWOF2J05c4Q4kzljhTiTOXOKzEWUqctcTZSpy9xDlKnLPE3Uucu8R5Spy3xPlKnL/EBUpcsMSFSly4xEVKXLTExUpcvMQlSlyyREpcqsSlS1ymxGVLXK7E5UtcocQVS1ypxJVLXKXEVUtcrcThJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m7/2/seJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qkljihxZImnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lXh3ifeUeG+J95V4f4kPlDiqxNEljinxwRIfKnFsieNKHF9iUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+LDJT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyV+VuLnJX5R4pclflXi1yV+U+K3JX5X4vcl/lDijyX+VOLPJf5S4q8l/lbi7yX+UeKfJf5V4t8l/lPivyUOqHBghYMqHFzhBBVOWOFEFU5c4SQVDqlw0gonq3DyCqeocMoKp6pwaIVTVzhNhdNWOF2F01c4Q4UzVjhThTNXOKzCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLTCxSpcvMIlKlyyQipcqsKlK1ymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLhFa5e4RoVrlnhWhWuXeE6Fa5b4XoVrl/hBhVuWOFGFW5c4SYVblrhZhVuXuEWFW5Z4VYVbl3hNhVuW+F2FW5f4Q4V7ljhThXuXOEuFe5a4W4V7l7hHhXuWeFeFe5d4T4V7lvhfhXuX+EBFR5Y4UEVHlzhIRUeWuFhFR5e4REVHlnhURUeXeExFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFY6ocGSFp1V4eoVnVHhmhWdVeHaF51R4boXnVXh+hRdUeGGFF1V4cYWXVHhphZdVeHmFV1R4ZYVXVXh1hddUeG2F11V4fYU3VHhjhTdVeHOFt1R4a4W3VXh7hXdUeGeFd1V4d4X3VHhvhfdVeH+FD1Q4qsLRFY6p8MEKH6pwbIXjKhxfYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hwxU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGXFX5V4dcVflPhtxV+V+H3Ff5Q4Y8V/lThzxX+UuGvFf5W4e8V/lHhnxX+VeHfFf5T4b8VDqhxYI2Dahxc4wQ1TljjRDVOXOMkNQ6pcdIaJ6tx8hqnqHHKGqeqcWiNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zisxllqnLXG2WqcvcY5apyzxrlqnLvGeWqct8b5apy/xgVqXLDGhWpcuMZFaly0xsVqXLzGJWpcskZqXKrGpWtcpsZla1yuxuVrXKHGFWtcqcaVa1ylxlVrXK3G4TWuXuMaNa5Z41o1rl3jOjWuW+N6Na5f4wY1bljjRjVuXOMmNW5a42Y1bl7jFjVuWeNWNW5d4zY1blvjdjVuX+MONe5Y40417lzjLjXuWuNuNe5e4x417lnjXjXuXeM+Ne5b43417l/jATUeWONBNR48ER5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1WuNJNZ5c4yk1nlrjiBpH1nhajafXeEaNZ9Z4Vo1n13hOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjaNqHF3jmBofrPGhGsfWOK7G8TUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NT5c4yM1PlrjYzU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+OABgc2OKjBwQ1O0OCEDU7U4MQNTtLgkAYnbXCyBidvcIoGp2xwqgaHNjh1g9M0OG2D0zU4fYMzNDhjgzM1OHODwxqcpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbpMGlGly6wWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGhze4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDdrgSQ2e3OApDZ7a4IgGRzZ4WoOnN3hGg2c2eFaDZzd4ToPnNnheg+c3eEGDFzZ4UYMXN3hJg5c2eFmDlzd4RYNXNnhVg1c3eE2D1zZ4XYPXN3hDgzc2eFODNzd4S4O3Nnhbg7c3eEeDdzZ4V4N3N3hPg/c2eF+DAwbgAw2OanB0g2MafLDBhxoc2+C4Bsc3GDQYNhg1GDeYNJg2mDWYN1g0WDZYNVg32DTYNtg12Df4cIOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+O9/mrY4sMVBLQ5ucYIWJ2xxohYnbnGSFoe0OGmLk7U4eYtTtDhli1O1OLTFqVucpsVpW5yuxelbnKHFGVucqcWZWxzW4iwtztribC3O3uIcLc7Z4lwtzt3iPC3O2+J8Lc7f4gItLtjiQi0u3OIiLS7a4mItLt7iEi0u2SItLtXi0i0u0+KyLS7X4vItrtDiii2u1OLKLa7S4qr/fyJRi6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2eFyLx7d4QosntmiLJ7V4countHhqiyNaHNniaS2e3uIZLZ7Z4lktnt3iOS2e2+J5LZ7f4gUtXtjiRS1e3OIlLV7a4mUtXt7iFS1e2eJVLV7d4jUtXtvidS1e3zLyhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWR7U4usUxLT7Y4kMtjm1xXIvjWwxaDFuMWoxbTFpMW8xazFssWixbrFqsW2xabFvsWuxbfLjFR1p8tMXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdafLvFd1p8t8X3Wny/xQ9a/LDFj1r8uMVPWvy0xc9a/LzFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xQEdDuxwUIeDO5ygwwk7nKjDiTucpMMhHU7a4WQdTt7hFB1O2eFUHQ7tcOoOp+lw2g6n63D6DmfocMYOZ+pw5g6HdThLh7N2OFuHs3c4R4dzdjhXh3N3OE+H83Y4X4fzd7hAhwt2uFCHC3e4SIeLdrhYh4t3uESHS3ZIh0t1uHSHy3S4bIfLdbh8hyt0uGKHK3W4coerdLhqh6t1AwYM73D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7XBEhyM7PK3D0zs8o8MzOzyrw7M7PKfDczs8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDW4cP8LaOIf//bebODu/q8O4O7+nw3g7v6/D+Dh/ocFSHozsc0+GDHT7U4dgOx3U4vsOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+w4c7fKTDRzt8rMPHO3yiwyc7fKrDpzt8psNnO3yuw+c7fKHDFzt8qcOXO3ylw1c7fK3D1zt8o8M3O3yrw7c7fKfDdzt8r8P3O/ygww87/KjDjzv8pMNPO/ysw887/KLDLzv8qsOvO/ymw287/K7D7zv8ocMfO/ypw587/KXDXzv8rcPfO/yjwz87/KvDvzv8p8N/OxzQ48AeB/U4uMcJepywx4l6nLjHSXoc0uOkPU7W4+Q9TtHjlD1O1ePQHqfucZoep+1xuh6n73GGHmfscaYeZ+5xWI+z9Dhrj7P1OHuPc/Q4Z49z9Th3j/P0OG+P8/U4f48L9Lhgjwv1uHCPi/S4aI+L9bh4j0v0uGSP9LhUj0v3uEyPy/a4XI/L97hCjyv2uFKPK/e4So+r9rhaj8N7XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PHACPKjHg3s8pMdDezysx8N7PKLHI3s8qsejezymx2N7PK7H43s8occTe7THk3o8ucdTejy1xxE9juzxtB5P7/GMHs/s8awez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR5H9Ti6xzE9PtjjQz2O7XFcj+N7/H8BAAD//5GBWa4=") creat(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) 19:26:47 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000840)={[{@lfs_mode}, {@adaptive_mode}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noinline_dentry}]}, 0x4, 0x5510, &(0x7f0000003840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8800000}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x40000000000}) [ 1544.029127][T30255] loop5: detected capacity change from 0 to 128 [ 1544.106939][T30255] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1544.132732][T30257] loop2: detected capacity change from 0 to 2048 [ 1544.154803][ T27] audit: type=1804 audit(1687375608.121:294): pid=30253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1562/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1544.209564][T30255] sysv_free_block: trying to free block not in datazone [ 1544.224188][T30257] EXT4-fs: Ignoring removed oldalloc option [ 1544.255363][T30257] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1544.284183][ T27] audit: type=1804 audit(1687375608.181:295): pid=30253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1562/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 19:26:48 executing program 5: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYBLOB="4f8bc8e10fb4dcb0614fad9bb5b8fd2a9e146d6c08f97fa38e54be315d0000000000000005a2b7fd9011338b1c931affffff7f00000000d6067f8d50c54d14ad8ccdc0cdc79af95dc979ee7a95abd5134698bfae5df90627d457963462cbfdc1912bd58cf65d7b6c7c9a8fd8bfdbbc8e97c336128c65a7d70f101a501ff7ae22a968a50d02fa699fd91ff12845e360f30e9c1d53e4e60a2e2163994dd35ae4518d56479af0f8bc256856abb6ae325f6d72e6423b699f74e823cd5e0a0a620f751e56350c399f605e4bbe9dbf3221e92274d602000000960e6b635ce1800b64daf6e6e12901567956c0de71c0bd6e1458075f405e4ea39c2bd96c2f0dd8c43acb66d2c83e076a2cef2210f8bb1043c75573579565e22d309525f171000367f9e24ec0ea7d9861eda1996955e709b1eaa0dca94b6da37cabeeaedeb9ff8c54496e2c5de122bd646ade2d820cc24052fe56ae499501ee55969b17553274d5baf6ed060000000000000023be729062a0c76962edf7b689e40675ad6b0ae22840b2893b9d0a917718c85022000000000000000000000037c64861502f2ad116d0b69c93150afa60733b21e000bfa07524f770c703bfc154972993d30706484ef91f04a798c2678fdac7f08220e57c55c3d1b8880f7a124bf56245350707000000f7ce3b281d5f959545f4ee8ab5ab73397c91a033e43004e5e52dfc4a0393566d296b4fce16e52227d7cce3bbd42fbf1ae012211c021837efd2fc9d6a83d9127991fad47fe428eb8aea4619e7c0c1455554f18434773608963ca0929a25ad2502c16d0867e7ad973613902b822f9dd7923a1d10af5aeabdc15f93c08e7210e08622b463f3cfc790a400b67f1a3a6eb32e02e2d99284d264dbfc3c1aa59a0e0800587083a6fd9f076bf369182be58530e32c93bef5c01094499518fbf04a079a4aca1dd7723ff0afe13bb8b215d008dccec3f4628e551cd05fb772877ec1aa352047cee1d555ad8700ccedafb4109a48b782cdf0a3c99946c74412905b3fb599f7cb99e7da8c6449998c4b07c0c449d1b388895f56a68e9099468835a06a1b02b1403415d91eb27d0b1072563d55824fa6857dbaac121d6b7a857170c56fde212ad7dadc35df2812c1e566d8e2f8ec5969bda7d0979250e0d9bf0c50d386a966d8fd05f9049f35a260e27ca67762a0fd27ed292abcd01bf3cf06d82de12be873aba290ec5844ab37c2775eabfdb50284509430ddbdc40211285f4f97b0b03b03b81c5991b310dad394a8", @ANYRESHEX, @ANYRES16=r0], 0x0, 0x9e6f, &(0x7f000000a400)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) [ 1544.368621][ T5075] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1544.380330][T30257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 19:26:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0xf0ff1f00000000) 19:26:48 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={&(0x7f00000005c0), 0x8}) 19:26:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:26:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0xf0ff1f00000000) [ 1545.081356][T30268] loop5: detected capacity change from 0 to 128 [ 1545.085678][ T5076] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.116995][T30268] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1545.193808][T30268] sysv_free_block: trying to free block not in datazone 19:26:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0xf0ff1f00000000) 19:26:49 executing program 5: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX, @ANYRES16=r0], 0x0, 0x9e6f, &(0x7f000000a400)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) [ 1545.393979][ T5075] sysv_free_inode: inode 0,1,2 or nonexistent inode 19:26:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x14}}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe000000905820236"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) [ 1545.430661][ T27] audit: type=1804 audit(1687375609.401:296): pid=30274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1563/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 19:26:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0xf0ff1f00000000) [ 1545.561954][ T27] audit: type=1804 audit(1687375609.401:297): pid=30274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1563/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1545.712677][ T27] audit: type=1326 audit(1687375609.511:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30280 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8888c389 code=0x0 [ 1545.733618][T30286] loop5: detected capacity change from 0 to 128 [ 1545.780799][T30286] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1545.882819][T30286] sysv_free_block: trying to free block not in datazone [ 1545.940470][T15562] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1546.027179][ T5075] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1546.229466][T15562] usb 3-1: Using ep0 maxpacket: 8 [ 1546.331549][T30252] loop1: detected capacity change from 0 to 40427 [ 1546.349723][T15562] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1546.357965][T30252] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 1546.369781][T15562] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1546.380468][T30252] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1546.402838][T15562] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1546.437114][T15562] usb 3-1: config 250 has no interface number 0 [ 1546.453231][T15562] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1546.484144][T15562] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1546.510507][T15562] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 54 [ 1546.549633][T15562] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1546.564122][T15562] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1546.582272][T30252] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1546.709851][T15562] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1546.728258][T15562] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1546.752254][T15562] usb 3-1: Product: syz 19:26:50 executing program 4: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000001880), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x3c}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001b40), 0x8a40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000001b80)) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) inotify_init1(0x0) 19:26:50 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x4b31, 0xf0ff1f00000000) [ 1546.767251][T15562] usb 3-1: SerialNumber: syz [ 1546.850794][T15562] hub 3-1:250.228: bad descriptor, ignoring hub [ 1546.857145][T15562] hub: probe of 3-1:250.228 failed with error -5 19:26:50 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000840)={[{@lfs_mode}, {@adaptive_mode}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noinline_dentry}]}, 0x4, 0x5510, &(0x7f0000003840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8800000}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x0, 0x40000000000}) 19:26:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 19:26:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee40802110000015050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:26:50 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x4b31, 0xf0ff1f00000000) 19:26:50 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c090582034913"], 0x0) [ 1546.970201][ T5074] syz-executor.1: attempt to access beyond end of device [ 1546.970201][ T5074] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 19:26:51 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x4b31, 0xf0ff1f00000000) [ 1547.082493][T15562] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1547.174606][ T27] audit: type=1804 audit(1687375611.141:299): pid=30298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1564/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1547.250974][T15562] usb 3-1: USB disconnect, device number 7 [ 1547.269912][ T5127] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1547.370186][ T27] audit: type=1804 audit(1687375611.151:300): pid=30298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1564/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 19:26:51 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x4b31, 0xf0ff1f00000000) [ 1547.421374][T15562] usblp0: removed [ 1547.519400][ T5127] usb 5-1: Using ep0 maxpacket: 8 19:26:51 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x4b31, 0xf0ff1f00000000) [ 1547.639513][ T5127] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1547.741566][ T5127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1547.813179][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.829477][T15562] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1548.100136][T15562] usb 3-1: Using ep0 maxpacket: 8 [ 1548.139433][ T5127] usb 5-1: string descriptor 0 read error: -71 [ 1548.229734][T15562] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1548.237827][ T5127] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1548.264783][T15562] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1548.281659][T15562] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1548.301319][T15562] usb 3-1: config 250 has no interface number 0 [ 1548.316441][T15562] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1548.341420][T15562] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1548.364652][T15562] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 54 [ 1548.387874][ T5127] usb 5-1: USB disconnect, device number 48 [ 1548.397613][T15562] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1548.444454][T15562] usb 3-1: config 250 interface 228 has no altsetting 0 19:26:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x39, 0x98, 0xe4, 0x20, 0x10b8, 0x1fa8, 0x227b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfe, 0x4a, 0x74}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x0, 0x1d, 0xc5, 0x5a, 0x40, 0x19d2, 0x1598, 0x6e7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 19:26:52 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x4b31, 0xf0ff1f00000000) 19:26:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 1548.501169][ T5127] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected [ 1548.559569][T15562] usb 3-1: string descriptor 0 read error: -71 [ 1548.573118][T15562] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 19:26:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0x0) [ 1548.649378][T15562] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1548.743867][T15562] usb 3-1: can't set config #250, error -71 [ 1548.772627][T15562] usb 3-1: USB disconnect, device number 8 [ 1548.783896][ T27] audit: type=1804 audit(1687375612.751:301): pid=30321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1565/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1549.041692][ T27] audit: type=1804 audit(1687375612.751:302): pid=30321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1565/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1549.299531][T15562] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1549.404191][T30316] loop1: detected capacity change from 0 to 40427 [ 1549.518786][T30316] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 1549.569434][T15562] usb 3-1: Using ep0 maxpacket: 32 [ 1549.653754][T30323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.670019][T30323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.747441][T30316] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1549.800388][T15562] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1549.879794][T15562] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1549.898014][T15562] usb 3-1: can't read configurations, error -71 [ 1549.959049][T30316] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 19:26:54 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c090582034913"], 0x0) [ 1550.293841][ T5074] syz-executor.1: attempt to access beyond end of device [ 1550.293841][ T5074] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1550.589887][T14890] usb 5-1: new high-speed USB device number 49 using dummy_hcd 19:26:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 19:26:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0x0) 19:26:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:26:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0xf0ff1f00000000) 19:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001180), r0) 19:26:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000200)=0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 19:26:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b31, 0x0) [ 1550.849614][T14890] usb 5-1: Using ep0 maxpacket: 8 [ 1550.904503][ T27] audit: type=1804 audit(1687375614.871:303): pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1566/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1550.989492][T14890] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1551.020344][T14890] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 19:26:55 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000001b80)) [ 1551.055136][T30341] __nla_validate_parse: 67 callbacks suppressed [ 1551.055163][T30341] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1551.082351][ T27] audit: type=1804 audit(1687375614.901:304): pid=30338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1566/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1551.121773][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.128168][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.129414][T14890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.229620][T30341] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. 19:26:55 executing program 0: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000a40)) [ 1551.386235][T30341] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. 19:26:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0xf0ff1f00000000) [ 1551.539439][T14890] usb 5-1: string descriptor 0 read error: -71 [ 1551.577600][T30341] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1551.599632][T14890] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1551.670114][T14890] usb 5-1: USB disconnect, device number 49 19:26:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 1551.820144][T14890] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:26:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0xf0ff1f00000000) [ 1552.128312][ T27] audit: type=1804 audit(1687375616.091:305): pid=30359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1567/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 1552.158037][ T27] audit: type=1804 audit(1687375616.121:306): pid=30359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1567/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 1552.235143][T30359] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.316973][T30359] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.364215][T30359] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.421450][T30359] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.463202][T30359] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.592715][T30359] netlink: 988 bytes leftover after parsing attributes in process `syz-executor.3'. 19:26:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:26:57 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c090582034913"], 0x0) 19:26:57 executing program 0: syz_clone(0x40000000, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000a40)) 19:26:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0xf0ff1f00000000) 19:26:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 1554.006227][ T27] audit: type=1804 audit(1687375617.971:307): pid=30371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1568/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:26:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="e776471d3749156404a1ae3a4f817651cbbeada4316742216a75ffaf77b3588b7dcc8c1bdd9d8743cabba029e09332ab04929c67ad6ef04fa88a324f4da3b4cfe90cd3789ebd830acae233eb985ecc4c6922e9d6595d", 0x56}, {&(0x7f0000000180)="500e54460ff3964c0bade96123cf267de85da7a3ce4dc91fe0b310113041b0d4bfab5fcc22896c5aec5ed37ee72953c05286e7ef1e466beb3a61dc335cc8f6f3fc7f462da65bad100ea80bd6c22798f532a3e924", 0x54}, {&(0x7f0000000380)="f594dbc92e87b8d39878d9d3a71d2a3b4866b12178d390762e2329d358268d85d0587709db16861fe49197d41cff52f9518cf3d2c5e456a7c6351e0142b57499016f17ed0c8c0266b8ad9ee4665bb20b1373f177f781e07a61c098675013c38598bac5aa0e5ffd085517e8a5b72b894819d1b16a5aa1fb83ab38dfccc4df65c69434ab70f8deaccb169477ec653a2e113cfd8ed40bd9580d5e5d5f5a8dcf1bd43dc0541383641f0f1d1898ed", 0xac}], 0x1000000000000370, 0x0, 0x64}, 0x4) 19:26:58 executing program 1: ioctl$TCFLSH(0xffffffffffffffff, 0x4b41, 0xf0ff1f00000000) 19:26:58 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 1554.109386][T14890] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1554.117083][ T27] audit: type=1804 audit(1687375618.011:308): pid=30371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1568/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:26:58 executing program 1: ioctl$TCFLSH(0xffffffffffffffff, 0x4b41, 0xf0ff1f00000000) 19:26:58 executing program 5: syz_clone(0x50080000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:26:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x101b, &(0x7f00000036c0)=""/4123, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1554.360145][T14890] usb 5-1: Using ep0 maxpacket: 8 19:26:58 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) 19:26:58 executing program 1: ioctl$TCFLSH(0xffffffffffffffff, 0x4b41, 0xf0ff1f00000000) [ 1554.479532][T14890] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1554.500330][T14890] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1554.524163][T14890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.829492][T14890] usb 5-1: string descriptor 0 read error: -71 [ 1554.852102][T14890] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1554.889449][T14890] usb 5-1: USB disconnect, device number 50 [ 1554.931254][T14890] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:26:59 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c090582034913"], 0x0) 19:26:59 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19:26:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xa, &(0x7f00000007c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0, @exit, @alu={0x0, 0x0, 0x5}], &(0x7f0000000840)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x80) syz_clone(0xc0000000, &(0x7f0000000000)="c5a3", 0x2, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="d18d2ff29fe5fe852393d9d2ffded103bd239b83301c168a285e6f808c54674cc6f24fcc2d54ba53ab833bbc2bffa77f9702afa8cd17550801f6f748525150c49a655d50a92e0a55024950718925bff4fa13") 19:26:59 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='\x00'}, 0x10) 19:26:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x4b41, 0xf0ff1f00000000) 19:26:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:26:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x4b41, 0xf0ff1f00000000) 19:26:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x0, 0xf4240, 0x0, &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:26:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0x0, 0x9, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) [ 1555.663527][ T27] audit: type=1804 audit(1687375619.631:309): pid=30401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1569/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 19:26:59 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x4b41, 0xf0ff1f00000000) [ 1555.775483][ T27] audit: type=1804 audit(1687375619.631:310): pid=30401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1569/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 19:26:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0x0) 19:26:59 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000ac0)=@raw=[@generic], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1555.913413][T14938] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1556.199471][T14938] usb 5-1: Using ep0 maxpacket: 8 [ 1556.329832][T14938] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1556.343332][T14938] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1556.353020][T14938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.649430][T14938] usb 5-1: string descriptor 0 read error: -71 [ 1556.682070][T14938] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1556.739774][T14938] usb 5-1: USB disconnect, device number 51 [ 1556.813698][T14938] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:01 executing program 4: 19:27:01 executing program 0: syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:01 executing program 2: syz_clone(0x40000000, &(0x7f0000000100)="39d4898e318fc8981272098aab1f3780fd1cfe9aeeb4b0358b941557e64c281425c9a5ed980585207b4a665e1fd38dfad67dd68e5523c32ffd9dc52c0a2a6f0015920a989df5e6c403331afacfebfa5ec7f75f93388f8ddf160d14bb2830270560dd1a9dcf9864569630f07d6005c1c4efb1280ef620dc5a7c673326e3f43fe67b4e5c4737e61e420283991336ece105b5aebbffcf4730ede774657956870a1eb6544f96e4545b601ab2c64ec4eabe6fe1cba55b9830351128154e2429c4adaa3a95ae28f5896a815017a73a23f3681ee8b939447bfa011ec16f7dd7bf7003f82f611b7d98", 0xe5, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000a40)="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") 19:27:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0x0) 19:27:01 executing program 5: syz_clone(0xc0000000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 19:27:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:27:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x4b41, 0x0) 19:27:01 executing program 4: [ 1557.393352][ T27] audit: type=1804 audit(1687375621.361:311): pid=30426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1570/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 19:27:01 executing program 4: 19:27:01 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4b4601, 0x0) [ 1557.536284][ T27] audit: type=1804 audit(1687375621.361:312): pid=30426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1570/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 19:27:01 executing program 1: syz_clone(0x8000000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="feef74e43d2261d8982ba1d9727f22567e5f2ac6ab52df9142ed843584e6c4497a78e2e6cb8fa502b874910160734f6b0f56496fe2b9170d2663b92e1049c6ca53ae8a3ca95e451361a94aec95e8eb161a6c09d8029fdfa8dddf7fa41295d026a451ed397ccf58edf9741da45087424c2d1e14f547296d287fbc36665c7917e48ae2e23136ad3419181dd5df0c706f2d8ea600534554a280ad899953c03ae1208c") 19:27:01 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 19:27:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f00000010c0)=""/167, 0x29, 0xa7, 0x1}, 0x20) 19:27:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 19:27:01 executing program 1: syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 19:27:02 executing program 2: mkdir(&(0x7f0000001600)='./file0/../file0\x00', 0x0) 19:27:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/210, 0x30, 0xd2, 0x1}, 0x20) 19:27:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1, 0x100}]}]}}, &(0x7f00000003c0)=""/210, 0x32, 0xd2, 0x1}, 0x20) 19:27:02 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 19:27:02 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000010c0)=""/167, 0x28, 0xa7, 0x1}, 0x20) 19:27:02 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 1558.611016][ T27] audit: type=1804 audit(1687375622.581:313): pid=30464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1571/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:27:02 executing program 0: bpf$MAP_CREATE(0xb, &(0x7f0000000900)=@bloom_filter, 0x48) 19:27:02 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002200)='Y', 0x0}, 0x48) [ 1558.702275][ T27] audit: type=1804 audit(1687375622.581:314): pid=30464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1571/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:27:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8}, 0x48) 19:27:02 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 19:27:07 executing program 5: syz_clone(0xc0000000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 19:27:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x8}]}}, &(0x7f0000000040)=""/211, 0x26, 0xd3, 0x1}, 0x20) 19:27:07 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f0000000900)=@bloom_filter, 0x48) 19:27:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf4240, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xdf, &(0x7f0000000080)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:07 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) 19:27:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8}, 0x0) 19:27:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x1}]}]}}, &(0x7f00000010c0)=""/167, 0x36, 0xa7, 0x1}, 0x20) 19:27:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16}, 0x48) 19:27:07 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000006c0)=""/212, 0x32, 0xd4, 0x1}, 0x20) [ 1563.520780][ T27] audit: type=1804 audit(1687375627.491:315): pid=30488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1572/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1563.621210][ T27] audit: type=1804 audit(1687375627.521:316): pid=30488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1572/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1563.649521][T20509] usb 5-1: new high-speed USB device number 52 using dummy_hcd 19:27:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 19:27:07 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) [ 1563.884493][T20509] usb 5-1: device descriptor read/64, error 18 19:27:07 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000180)=@framed={{}, [@call, @exit, @generic, @ldst, @initr0, @alu, @map_fd, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xdb, &(0x7f0000000080)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd2) 19:27:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1564.179443][T20509] usb 5-1: new high-speed USB device number 53 using dummy_hcd 19:27:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000000080)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1564.429418][T20509] usb 5-1: device descriptor read/64, error 18 19:27:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1564.561834][T20509] usb usb5-port1: attempt power cycle [ 1564.663273][ T27] audit: type=1804 audit(1687375628.631:317): pid=30522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1573/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1564.731206][ T27] audit: type=1804 audit(1687375628.671:318): pid=30522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1573/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1565.009464][T20509] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1565.219586][T20509] usb 5-1: device descriptor read/8, error -61 [ 1565.489315][T20509] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1565.673491][T20509] usb 5-1: device descriptor read/8, error -61 [ 1565.811239][T20509] usb usb5-port1: unable to enumerate USB device 19:27:10 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) 19:27:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x7, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 19:27:10 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={0xffffffffffffffff, 0x10, 0x1, 0x0, 0x0}, 0x20) 19:27:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xd5, &(0x7f0000000280)=""/213, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:10 executing program 0: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000013c0), 0x10) 19:27:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:10 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f00000026c0)={&(0x7f0000002680)='./file0\x00'}, 0x10) 19:27:10 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@typedef={0x3}, @fwd]}, {0x0, [0x0, 0x0, 0x61, 0x30]}}, &(0x7f00000010c0)=""/167, 0x36, 0xa7, 0x1}, 0x20) 19:27:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, &(0x7f00000006c0)=""/212, 0x2a, 0xd4, 0x1}, 0x20) 19:27:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:10 executing program 1: unlink(&(0x7f0000000000)='./file0\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/161, 0xa1}], 0x4, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40010120) r3 = openat$cgroup_ro(r2, &(0x7f0000000540)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_type(r3, &(0x7f0000000580), 0x2, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000600)=r0) mkdir(&(0x7f0000000640)='./file0\x00', 0x10) unlink(&(0x7f0000000680)='./file0\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x0, 0x1, 0x3, 0x1, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000740)='GPL\x00', 0x9, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x10, 0x8, 0xfffff801}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001800)=[0xffffffffffffffff, r2, r4, r0]}, 0x80) openat$cgroup_ro(r1, &(0x7f00000030c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socketpair(0x29, 0x5, 0x3, &(0x7f00000031c0)) 19:27:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 1566.607566][ T27] audit: type=1804 audit(1687375630.571:319): pid=30534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1574/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1566.704143][ T27] audit: type=1804 audit(1687375630.571:320): pid=30534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1574/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1566.919545][T20509] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1567.119772][T20509] usb 5-1: device descriptor read/64, error 18 [ 1567.399360][T20509] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1567.589730][T20509] usb 5-1: device descriptor read/64, error 18 [ 1567.709578][T20509] usb usb5-port1: attempt power cycle [ 1568.131486][T20509] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1568.309686][T20509] usb 5-1: device descriptor read/8, error -61 [ 1568.606740][T20509] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1568.789463][T20509] usb 5-1: device descriptor read/8, error -61 [ 1568.909591][T20509] usb usb5-port1: unable to enumerate USB device 19:27:13 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) 19:27:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f00000010c0)=""/167, 0x2e, 0xa7, 0x1}, 0x20) 19:27:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x0, 0x5, 0x8}, 0x48) 19:27:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@var={0x6, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000003c0)=""/210, 0x60, 0xd2, 0x1}, 0x20) 19:27:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:13 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000900)=@bloom_filter, 0x48) 19:27:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="8b", 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) recvmmsg(r1, &(0x7f0000006100), 0x400000000000682, 0x0, 0x0) 19:27:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000280)=@raw=[@btf_id, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe4}], &(0x7f00000002c0)='GPL\x00', 0x2, 0xc0, &(0x7f0000000300)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfeff0000, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) [ 1569.700741][T30565] "syz-executor.1" (30565) uses obsolete ecb(arc4) skcipher [ 1569.710642][ T27] audit: type=1804 audit(1687375633.671:321): pid=30561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1575/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 19:27:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) [ 1569.834577][ T27] audit: type=1804 audit(1687375633.681:322): pid=30561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1575/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 1569.876403][T30574] xt_limit: Overflow, try lower: 1241513984/7 [ 1569.959703][T14890] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1569.993851][T30574] team_slave_0: entered promiscuous mode [ 1570.000539][T30574] team_slave_1: entered promiscuous mode [ 1570.010000][T30574] vlan0: entered promiscuous mode [ 1570.015270][T30574] team0: entered promiscuous mode [ 1570.022115][T30574] vlan0: entered allmulticast mode [ 1570.027456][T30574] team0: entered allmulticast mode [ 1570.033539][T30574] team_slave_0: entered allmulticast mode [ 1570.041294][T30574] team_slave_1: entered allmulticast mode [ 1570.059987][T30574] team0: left allmulticast mode [ 1570.072113][T30574] team_slave_0: left allmulticast mode [ 1570.087735][T30574] team_slave_1: left allmulticast mode [ 1570.096200][T30574] team0: left promiscuous mode [ 1570.103084][T30574] team_slave_0: left promiscuous mode [ 1570.108977][T30574] team_slave_1: left promiscuous mode [ 1570.159562][T14890] usb 5-1: device descriptor read/64, error 18 [ 1570.429412][T14890] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1570.630475][T14890] usb 5-1: device descriptor read/64, error 18 [ 1570.749608][T14890] usb usb5-port1: attempt power cycle [ 1571.159325][T14890] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1571.329427][T14890] usb 5-1: device descriptor read/8, error -61 [ 1571.599393][T14890] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1571.769442][T14890] usb 5-1: device descriptor read/8, error -61 [ 1571.890071][T14890] usb usb5-port1: unable to enumerate USB device 19:27:16 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 19:27:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x2, &(0x7f0000000280)) 19:27:16 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x14}, 0x14}}, 0x0) 19:27:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() sendmmsg$unix(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20}}], 0x1, 0x0) 19:27:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) 19:27:16 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x50041, 0x0) 19:27:16 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000280)) 19:27:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) 19:27:16 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) [ 1572.678433][ T27] audit: type=1804 audit(1687375636.641:323): pid=30582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1576/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 19:27:16 executing program 2: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x490, 0x278, 0xb8, 0x0, 0xb8, 0x1b0, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @inet=@TOS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'batadv_slave_1\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth1_virt_wifi\x00', 'vlan1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) 19:27:16 executing program 5: bpf$LINK_DETACH(0x16, &(0x7f00000020c0), 0x4) [ 1572.776166][ T27] audit: type=1804 audit(1687375636.691:324): pid=30582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1576/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1572.922763][T30602] x_tables: duplicate underflow at hook 1 [ 1572.939854][T14890] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1573.129630][T14890] usb 5-1: device descriptor read/64, error 18 [ 1573.399376][T14890] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1573.594543][T14890] usb 5-1: device descriptor read/64, error 18 [ 1573.721349][T14890] usb usb5-port1: attempt power cycle [ 1574.129422][T14890] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1574.299575][T14890] usb 5-1: device descriptor read/8, error -61 [ 1574.569344][T14890] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1574.739407][T14890] usb 5-1: device descriptor read/8, error -61 [ 1574.859724][T14890] usb usb5-port1: unable to enumerate USB device 19:27:19 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 19:27:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001140)) 19:27:19 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 19:27:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891d, &(0x7f0000000280)) 19:27:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8946, &(0x7f0000000280)) 19:27:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a2, &(0x7f0000000280)) 19:27:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:19 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x38) 19:27:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) [ 1575.819887][ T27] audit: type=1804 audit(1687375639.791:325): pid=30610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1577/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:27:19 executing program 2: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) socketpair(0x15, 0x0, 0x0, &(0x7f0000001ac0)) 19:27:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) [ 1575.945638][ T27] audit: type=1804 audit(1687375639.831:326): pid=30610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1577/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1576.059558][T26958] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1576.259658][T26958] usb 5-1: device descriptor read/64, error 18 [ 1576.559307][T26958] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1576.749457][T26958] usb 5-1: device descriptor read/64, error 18 [ 1576.870535][T26958] usb usb5-port1: attempt power cycle [ 1577.289387][T26958] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1577.490025][T26958] usb 5-1: device descriptor read/8, error -61 [ 1577.779338][T26958] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1577.970182][T26958] usb 5-1: device descriptor read/8, error -61 [ 1578.090243][T26958] usb usb5-port1: unable to enumerate USB device 19:27:22 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 19:27:22 executing program 1: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)={0x0}, 0x10) 19:27:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 19:27:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x3, &(0x7f0000000b40)=@framed, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 19:27:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181302, 0x0) write$tun(r0, 0x0, 0x0) 19:27:22 executing program 1: socketpair(0x23, 0x0, 0x1, &(0x7f0000000c40)) 19:27:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000080)) [ 1578.965727][ T27] audit: type=1804 audit(1687375642.931:327): pid=30633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1578/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 19:27:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRES64=0x0, @ANYRESOCT], 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r2, r0, 0x0, 0xffffffff) accept$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0xc441b000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000007b11980000000000051f00000000000085000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val, @generic={0x5, 0x0, 0x7, 0x3, 0x7}], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0xa, 0x2, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100000002) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r4}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x9, 0x6db, 0x7ff, 0x54, r0, 0xffffffff, '\x00', 0x0, r4, 0x3, 0x1, 0x3, 0x2}, 0x48) pipe(&(0x7f0000000380)={0xffffffffffffffff}) openat$cgroup_ro(r10, &(0x7f00000003c0)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x13, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfa53}, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xf1, &(0x7f0000000500)=""/241, 0x41100, 0x1d, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0xffff, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002740)=[r0, r0, r5, r7, r8, 0x1, r9, r10]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x100002, 0x20040006}) openat$cgroup_ro(r0, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) recvmmsg(r2, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000800)=""/236, 0xec}, {&(0x7f0000000700)=""/109, 0x6d}], 0x3, &(0x7f0000000900)=""/137, 0x89}, 0x1000}, {{&(0x7f00000009c0), 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/172, 0xac}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000300)=""/49, 0x31}, {&(0x7f0000001c00)=""/117, 0x75}], 0x6, &(0x7f0000001d00)=""/219, 0xdb}, 0x8}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000001e80)=""/121, 0x79}, {&(0x7f0000001f00)=""/113, 0x71}, {&(0x7f0000001f80)=""/68, 0x44}], 0x3, &(0x7f00000004c0)=""/23, 0x17}, 0x5}, {{&(0x7f0000002000)=@alg, 0x80, &(0x7f0000002580)=[{&(0x7f0000002080)=""/162, 0xa2}, {&(0x7f0000002140)=""/240, 0xf0}, {&(0x7f0000002240)=""/190, 0xbe}, {&(0x7f0000002300)=""/158, 0x9e}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/147, 0x93}], 0x6, &(0x7f0000000780)=""/13, 0xd}}], 0x4, 0x40000001, &(0x7f0000002700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r13, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) [ 1579.074734][ T27] audit: type=1804 audit(1687375642.931:328): pid=30633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1578/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1579.179738][T14890] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1579.375821][T14890] usb 5-1: device descriptor read/64, error 18 [ 1579.486568][ T27] audit: type=1804 audit(1687375643.451:329): pid=30654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1080055682/syzkaller.T0BCN8/1488/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 1579.659560][T14890] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1579.849429][T14890] usb 5-1: device descriptor read/64, error 18 [ 1579.969968][T14890] usb usb5-port1: attempt power cycle [ 1580.389393][T14890] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1580.559422][T14890] usb 5-1: device descriptor read/8, error -61 [ 1580.829382][T14890] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1580.999531][T14890] usb 5-1: device descriptor read/8, error -61 [ 1581.120392][T14890] usb usb5-port1: unable to enumerate USB device 19:27:25 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b"], 0x0) 19:27:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 19:27:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:25 executing program 1: socketpair(0x22, 0x0, 0x2, &(0x7f0000007a40)) 19:27:25 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, &(0x7f0000000100)={0x23, 0x0, 0x1}, 0x10) 19:27:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:25 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180), 0x4) 19:27:25 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1001, &(0x7f0000001900)=""/4097, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xed0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000003c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2}, 0x10) syz_emit_ethernet(0xc2, &(0x7f0000000380)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "3fb69283f31eb1eda1322f76fe545795c9f05329297f8dd707459e430100b9c01dcfe391e117c38218ee2e1d3bc9609099f6a37c9d269b000f63ed0fecb5f1532a00000010009ff02cc1615ae265ccc570f04c76f70e6fad6c10e9ef"}}}}}}, 0x0) 19:27:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8914, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 19:27:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:26 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) [ 1582.117765][ T27] audit: type=1804 audit(1687375646.081:330): pid=30668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1579/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1582.238086][ T27] audit: type=1804 audit(1687375646.081:331): pid=30668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1579/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1582.268113][T26958] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1582.559401][T26958] usb 5-1: Using ep0 maxpacket: 8 [ 1582.689590][T26958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.706316][T26958] usb 5-1: config 0 has no interfaces? [ 1582.715605][T26958] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1582.726053][T26958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.740773][T26958] usb 5-1: config 0 descriptor?? [ 1582.983664][T26958] usb 5-1: USB disconnect, device number 76 19:27:27 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b"], 0x0) 19:27:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'netpci0\x00', 0x1}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000005c0)) 19:27:27 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:27 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000440)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}, 0x2004c050) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0b00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000003c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) accept(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can_delroute={0x34, 0x19, 0x21, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x3}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "f13722456ff1df14"}, 0x2}}]}, 0x34}}, 0x0) recvmsg(r2, &(0x7f0000000d40)={&(0x7f0000000540)=@caif=@dgm, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000800)=""/114, 0x72}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000780)=""/50, 0x32}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/96, 0x60}, {&(0x7f0000000a40)=""/163, 0xa3}, {&(0x7f0000000b00)=""/149, 0x95}], 0xa, &(0x7f0000000c80)=""/166, 0xa6}, 0x2103) 19:27:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000080000000000000100000085100000f9ffffff"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x7e, &(0x7f00000002c0)=""/126, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:27 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev}}) 19:27:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) 19:27:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8947, &(0x7f0000000280)) 19:27:27 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:27 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x206, 0x0) [ 1583.733635][ T27] audit: type=1804 audit(1687375647.691:332): pid=30691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1580/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1583.846955][T30695] __nla_validate_parse: 16 callbacks suppressed [ 1583.846981][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1583.874282][ T27] audit: type=1804 audit(1687375647.701:333): pid=30691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1580/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1583.900793][T14414] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1583.915819][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1583.966094][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.003194][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.048598][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.070215][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.095671][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.114231][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.129045][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.141324][T14414] usb 5-1: Using ep0 maxpacket: 8 [ 1584.146687][T30695] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.259401][T14414] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.270264][T14414] usb 5-1: config 0 has no interfaces? [ 1584.275996][T14414] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1584.288691][T14414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.302103][T14414] usb 5-1: config 0 descriptor?? [ 1584.542795][T14934] usb 5-1: USB disconnect, device number 77 19:27:29 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b"], 0x0) 19:27:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:29 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f0000000000)=""/142, 0x8e, 0x20, 0x0, 0x0) 19:27:29 executing program 0: pipe(0x0) socket$l2tp6(0xa, 0x2, 0x73) 19:27:29 executing program 1: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000001}) 19:27:29 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 19:27:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001140)={0x14}, 0x14}}, 0x0) 19:27:29 executing program 0: socketpair(0x1, 0x0, 0xfff, &(0x7f0000000040)) [ 1585.253789][ T27] audit: type=1804 audit(1687375649.221:334): pid=30715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1581/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:27:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) [ 1585.339355][ T27] audit: type=1804 audit(1687375649.261:335): pid=30715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1581/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1585.439775][T14414] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1585.679397][T14414] usb 5-1: Using ep0 maxpacket: 8 [ 1585.799735][T14414] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.817431][T14414] usb 5-1: config 0 has no interfaces? [ 1585.825261][T14414] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1585.843429][T14414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.863975][T14414] usb 5-1: config 0 descriptor?? [ 1586.116594][ T5127] usb 5-1: USB disconnect, device number 78 19:27:30 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001"], 0x0) 19:27:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000, 0x7}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f00000042c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000004700)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004500)={&(0x7f00000005c0)=@RTM_DELMDB={0x98, 0x55, 0x2, 0x70bd26, 0x25dfdbfe, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x4, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x6b55b94cce57ddaf, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x4, {@in6_addr=@mcast1, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004080}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="8e4ed022164702f27f7c2cdde11d6eadd0af88b243dcd13f6ed80654fa26a959ccb4e1936ab73f7eed40ba4edd98bd9363cea901ad1e4c49e2d00996eb068f87c9e44d84df2943a8b986a76285ea21b5d99b43928557320e3df4f5a741341d7a73af3501e32d58414d8f9e426300e0b62a8217f2cdd25078a8d0085e4f8674354fad6d40726ad9c4d71847a2a438093f849db0cc1227b55fa4ef2755175234f25d15222d8f358358add3a209359a0960f8aeef9173f562cc3376a77cd177b251fb5920a3", @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x64}}, 0x0) 19:27:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:30 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000440)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0}, 0x2004c050) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0b00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000003c0), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) accept(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000001c0)=0x80) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800, 0xfffffff4}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@can_delroute={0x34, 0x19, 0x21, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x3}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "f13722456ff1df14"}, 0x2}}]}, 0x34}}, 0x0) recvmsg(r2, &(0x7f0000000d40)={&(0x7f0000000540)=@caif=@dgm, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000800)=""/114, 0x72}, {&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000780)=""/50, 0x32}, {&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/96, 0x60}, {&(0x7f0000000a40)=""/163, 0xa3}, {&(0x7f0000000b00)=""/149, 0x95}], 0xa, &(0x7f0000000c80)=""/166, 0xa6}, 0x2103) 19:27:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891e, &(0x7f0000000280)) 19:27:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x4a000000}}, @common=@unspec=@time={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) [ 1586.711945][T30739] xt_limit: Overflow, try lower: 1241513984/7 19:27:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x13, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 19:27:30 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) [ 1586.854129][ T27] audit: type=1804 audit(1687375650.821:336): pid=30740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1582/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1586.895034][T30750] xt_limit: Overflow, try lower: 1241513984/0 19:27:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002fc0)={0x14}, 0x14}}, 0x0) 19:27:31 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) [ 1586.963454][ T27] audit: type=1804 audit(1687375650.821:337): pid=30740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1582/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1587.059504][T15562] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1587.339353][T15562] usb 5-1: Using ep0 maxpacket: 8 [ 1587.469664][T15562] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.479947][T15562] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1587.496638][T15562] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1587.505835][T15562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.562642][T15562] iowarrior 5-1:7.0: no interrupt-in endpoint found [ 1587.765798][T15562] usb 5-1: USB disconnect, device number 79 19:27:32 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001"], 0x0) 19:27:32 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x10) 19:27:32 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000080)) 19:27:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 19:27:32 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 19:27:32 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x210000, 0x0) 19:27:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, 0x0, 0x0) 19:27:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) [ 1588.460259][ T27] audit: type=1804 audit(1687375652.421:338): pid=30764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1583/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:27:32 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x80000001, 0xfffffffffffffff8}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TCSBRK(r0, 0x5451, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000000c0)) 19:27:32 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) [ 1588.592560][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.605705][ T27] audit: type=1804 audit(1687375652.461:339): pid=30764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1583/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 1588.659622][T15562] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1588.673950][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.722831][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.739920][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.771322][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.783511][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.799872][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.811447][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.823610][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.835712][T30771] netlink: 'syz-executor.3': attribute type 72 has an invalid length. [ 1588.849635][T30771] __nla_validate_parse: 282 callbacks suppressed [ 1588.849731][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.868766][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.890907][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.909057][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.919405][T15562] usb 5-1: Using ep0 maxpacket: 8 [ 1588.928841][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.948039][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.965968][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.978242][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1588.999603][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1589.018005][T30771] netlink: 1016 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1589.049462][T15562] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.060009][T15562] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1589.073311][T15562] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1589.082774][T15562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.142835][T15562] iowarrior 5-1:7.0: no interrupt-in endpoint found [ 1589.342750][T14934] usb 5-1: USB disconnect, device number 80 19:27:33 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001"], 0x0) 19:27:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 19:27:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, 0x0, 0x0) 19:27:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) 19:27:33 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000002880), 0x4000, 0x0) 19:27:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 19:27:33 executing program 2: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000026c0), 0x2, 0x0) 19:27:33 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20, &(0x7f0000000140)) 19:27:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, 0x0, 0x0) 19:27:34 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x800, 0x200, &(0x7f0000000e80)) 19:27:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4) [ 1590.065445][ T27] audit: type=1804 audit(1687375654.031:340): pid=30788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1584/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1590.199388][ T5127] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1590.217081][ T27] audit: type=1804 audit(1687375654.061:341): pid=30788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1584/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1590.459386][ T5127] usb 5-1: Using ep0 maxpacket: 8 [ 1590.579569][ T5127] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.596561][ T5127] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1590.617530][ T5127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1590.629063][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.681976][ T5127] iowarrior 5-1:7.0: no interrupt-in endpoint found [ 1590.884097][ T5127] usb 5-1: USB disconnect, device number 81 19:27:35 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c09"], 0x0) 19:27:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:35 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) 19:27:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, 0x0}, 0x0) 19:27:35 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) 19:27:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 19:27:35 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2f3) 19:27:35 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x161741, 0x10a) 19:27:35 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x440, 0xc0) 19:27:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) [ 1591.574231][ T27] audit: type=1804 audit(1687375655.541:342): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1585/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 19:27:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 19:27:35 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x2000, 0x8, &(0x7f00000001c0)) [ 1591.677582][ T27] audit: type=1804 audit(1687375655.541:343): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1585/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 1591.769680][T14890] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1592.019322][T14890] usb 5-1: Using ep0 maxpacket: 8 [ 1592.139572][T14890] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1592.153661][T14890] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1592.163054][T14890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.449501][T14890] usb 5-1: string descriptor 0 read error: -71 [ 1592.459825][T14890] iowarrior 5-1:7.0: no interrupt-in endpoint found [ 1592.472711][T14890] usb 5-1: USB disconnect, device number 82 19:27:36 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c09"], 0x0) 19:27:36 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x540, 0x208) 19:27:36 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0x0]) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, r0, 0x0) 19:27:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 19:27:36 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x440, 0x20) 19:27:36 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:36 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 19:27:36 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x20, &(0x7f0000000240)) 19:27:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 19:27:37 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x20641, 0x123) 19:27:37 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000140)) [ 1593.132559][ T27] audit: type=1804 audit(1687375657.101:344): pid=30844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1586/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 19:27:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0xee00, 0x0) [ 1593.231253][ T27] audit: type=1804 audit(1687375657.101:345): pid=30844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1586/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1593.409462][T15562] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1593.669624][T15562] usb 5-1: Using ep0 maxpacket: 8 [ 1593.799506][T15562] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1593.814025][T15562] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1593.823619][T15562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.119635][T15562] usb 5-1: string descriptor 0 read error: -71 [ 1594.131082][T15562] iowarrior 5-1:7.0: no interrupt-in endpoint found [ 1594.148259][T15562] usb 5-1: USB disconnect, device number 83 19:27:38 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c09"], 0x0) 19:27:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 19:27:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:38 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="a0", 0x1}, {&(0x7f0000000180)="d9", 0x1}, {&(0x7f0000000200)="c1", 0x1}, {&(0x7f0000000280)="80", 0x1}], 0x4}, 0x0) 19:27:38 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) 19:27:38 executing program 2: socketpair(0x27, 0x0, 0x0, &(0x7f0000000980)) 19:27:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 19:27:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:38 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0xffffffffffffff33) 19:27:38 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040), 0x10, 0x0}, 0x51) [ 1594.762455][ T27] audit: type=1804 audit(1687375658.721:346): pid=30872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1587/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 19:27:38 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="a0", 0x7fffefff}, {&(0x7f0000000180)="d9", 0x1}, {0x0}, {&(0x7f0000000280)="80", 0x1}], 0x4}, 0x0) 19:27:38 executing program 2: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [ 1594.856590][ T27] audit: type=1804 audit(1687375658.771:347): pid=30866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1587/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1594.887248][T30872] __nla_validate_parse: 189 callbacks suppressed [ 1594.887271][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1594.968037][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1594.969542][T14889] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1595.008812][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.052403][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.085950][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.111263][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.128538][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.149969][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.162315][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.174842][T30872] netlink: 1068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1595.259542][T14889] usb 5-1: Using ep0 maxpacket: 8 [ 1595.379633][T14889] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1595.393228][T14889] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1595.402652][T14889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.719532][T14889] usb 5-1: string descriptor 0 read error: -71 [ 1595.729827][T14889] iowarrior 5-1:7.0: no interrupt-in endpoint found [ 1595.745315][T14889] usb 5-1: USB disconnect, device number 84 19:27:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c09058203"], 0x0) 19:27:40 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 19:27:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:40 executing program 0: syz_clone(0x94201400, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002021) 19:27:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:40 executing program 2: unlink(&(0x7f0000000480)='./file0\x00') unlink(&(0x7f0000000440)='./file0\x00') 19:27:40 executing program 1: syz_clone(0x84001000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) [ 1596.368485][ T27] audit: type=1804 audit(1687375660.331:348): pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1588/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 19:27:40 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@raw=[@map_fd, @func], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) [ 1596.487279][ T27] audit: type=1804 audit(1687375660.331:349): pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1588/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1596.579735][T14889] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1596.824573][T14889] usb 5-1: Using ep0 maxpacket: 8 [ 1596.949488][T14889] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1596.966556][T14889] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.978403][T14889] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1596.993224][T14889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.289534][T14889] usb 5-1: string descriptor 0 read error: -71 [ 1597.321887][T14889] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1597.341034][T14889] usb 5-1: USB disconnect, device number 85 [ 1597.375586][T14889] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:41 executing program 1: syz_clone(0x61200000, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f00000001c0)="6a8e73348c2ba2d289368f5b749fcb93e72e595b0aa684385c161164") 19:27:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) 19:27:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x0) 19:27:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:27:41 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c09058203"], 0x0) 19:27:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 19:27:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 1597.943039][ T27] audit: type=1804 audit(1687375661.911:350): pid=30918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1589/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 19:27:42 executing program 0: syz_clone(0x47000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 19:27:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x61200000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) [ 1598.055271][ T27] audit: type=1804 audit(1687375661.941:351): pid=30918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1589/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 1598.149581][ T5127] usb 5-1: new high-speed USB device number 86 using dummy_hcd 19:27:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter, 0x48) 19:27:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 19:27:42 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="a0", 0x1}, {0x0, 0x55}, {&(0x7f0000000200)="c1", 0x1}, {&(0x7f0000000280)="80", 0x1}], 0x4}, 0x0) [ 1598.399374][ T5127] usb 5-1: Using ep0 maxpacket: 8 19:27:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) [ 1598.519930][ T5127] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1598.551534][ T5127] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1598.652602][ T5127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 19:27:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) [ 1598.728009][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.009477][ T27] audit: type=1804 audit(1687375662.961:352): pid=30951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1590/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 1599.054570][ T27] audit: type=1804 audit(1687375662.971:353): pid=30951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1590/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 1599.089100][ T5127] usb 5-1: string descriptor 0 read error: -71 [ 1599.122784][ T5127] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1599.157212][ T5127] usb 5-1: USB disconnect, device number 86 [ 1599.215399][ T5127] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 19:27:43 executing program 2: socketpair(0x21, 0x0, 0x0, &(0x7f00000007c0)) 19:27:43 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1}, 0x0) 19:27:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x4b47, 0x0) 19:27:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c09058203"], 0x0) 19:27:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x0, 0x0, 0x0, 0x200}, 0x48) 19:27:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003500)={&(0x7f00000023c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "ef"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "fb8f6f"}]}}, &(0x7f0000002500)=""/4096, 0x4e, 0x1000, 0x1}, 0x20) 19:27:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 19:27:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x40087602, 0x0) 19:27:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:27:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x2}) 19:27:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 19:27:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x9ee, 0x100, 0xfffffffa, 0x0, 0x1}, 0x48) [ 1600.009402][ T5127] usb 5-1: new high-speed USB device number 87 using dummy_hcd 19:27:44 executing program 0: syz_clone(0x5a82c080, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) [ 1600.242251][ T27] audit: type=1804 audit(1687375664.211:354): pid=30976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1591/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1600.270051][ T5127] usb 5-1: Using ep0 maxpacket: 8 [ 1600.379680][ T27] audit: type=1804 audit(1687375664.211:355): pid=30976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1591/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1600.392246][ T5127] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1600.477698][ T5127] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 19:27:44 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x88, &(0x7f0000000180)=""/136, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) [ 1600.524861][ T5127] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1600.557897][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.919733][ T5127] usb 5-1: string descriptor 0 read error: -71 [ 1600.960674][ T5127] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1601.005790][ T5127] usb 5-1: USB disconnect, device number 87 [ 1601.070453][ T5127] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:45 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c0905820349"], 0x0) 19:27:45 executing program 1: syz_clone(0xa1b80480, 0x0, 0xfffffffffffffda9, 0x0, 0x0, 0x0) 19:27:45 executing program 2: socketpair(0x10, 0x0, 0xfff, &(0x7f0000000000)) 19:27:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 19:27:45 executing program 0: socketpair(0x23, 0x0, 0x0, &(0x7f0000000080)) 19:27:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:27:45 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000c8fc0000004000eaffffff009d2506d0bcc3471fa619d79b01b654e2944be0382e692d79b862eb3fc09cebb9e5f06298843bd74b6169f7528a"], &(0x7f0000002040)='GPL\x00', 0xfffffffa, 0x9f, &(0x7f0000002080)=""/159, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002240)={r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 19:27:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 19:27:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'team0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'vcan0\x00', @random="62263d23f06e"}) 19:27:45 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f80)={&(0x7f00000008c0)='./file0/file0\x00'}, 0x10) [ 1601.614983][ T27] audit: type=1804 audit(1687375665.581:356): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1592/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:27:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:45 executing program 0: syz_clone(0xf4382400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1601.710673][ T27] audit: type=1804 audit(1687375665.621:357): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1592/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1601.819334][T15562] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1602.089285][T15562] usb 5-1: Using ep0 maxpacket: 8 [ 1602.219692][T15562] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1602.258178][T15562] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1602.271122][T15562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.589380][T15562] usb 5-1: string descriptor 0 read error: -71 [ 1602.613029][T15562] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1602.669500][T15562] usb 5-1: USB disconnect, device number 88 [ 1602.729845][T15562] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:47 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c0905820349"], 0x0) 19:27:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19}, 0x48) 19:27:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00'}) 19:27:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:27:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 19:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x40049409, 0x0) 19:27:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0) 19:27:47 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003680)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x40040) [ 1603.256848][ T27] audit: type=1804 audit(1687375667.221:358): pid=31020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1593/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:27:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd}, 0x48) [ 1603.359427][ T27] audit: type=1804 audit(1687375667.221:359): pid=31020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1593/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:27:47 executing program 2: socketpair(0xf, 0x0, 0x0, &(0x7f00000007c0)) 19:27:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) [ 1603.479574][T15562] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1603.729336][T15562] usb 5-1: Using ep0 maxpacket: 8 [ 1603.869591][T15562] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1603.886541][T15562] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1603.914858][T15562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.239420][T15562] usb 5-1: string descriptor 0 read error: -71 [ 1604.285779][T15562] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1604.322282][T15562] usb 5-1: USB disconnect, device number 89 [ 1604.392429][T15562] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:48 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="5c0100001ddf8308c007121522300000000109021b0001070000000904000001faed0d7c0905820349"], 0x0) 19:27:48 executing program 2: socketpair(0x2, 0x0, 0x4000008, &(0x7f0000000040)) 19:27:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x0, 0x0, 0x0, 0x4}, 0x48) 19:27:48 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb0041, 0x0) 19:27:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 19:27:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r3, 0x0, 0x10000a006) 19:27:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="a5580100fcffffff8520000001000000183300000500000000000020"], &(0x7f0000000080)='GPL\x00', 0x3, 0xed, &(0x7f00000001c0)=""/237, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 19:27:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x40086602, 0x0) 19:27:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) [ 1604.954717][ T27] audit: type=1804 audit(1687375668.921:360): pid=31051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1594/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 19:27:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 19:27:49 executing program 1: mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000038c0)='syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000038c0)='syz0\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) [ 1605.075592][ T27] audit: type=1804 audit(1687375668.951:361): pid=31051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1594/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 1605.139477][T14889] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1605.389546][T14889] usb 5-1: Using ep0 maxpacket: 8 [ 1605.520578][T14889] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1605.541410][T14889] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1605.590537][T14889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.889531][T14889] usb 5-1: string descriptor 0 read error: -71 [ 1605.923111][T14889] iowarrior 5-1:7.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1605.958430][T14889] usb 5-1: USB disconnect, device number 90 [ 1606.009595][T14889] iowarrior 5-1:7.0: I/O-Warror #0 now disconnected 19:27:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wg2\x00'}) 19:27:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0xfffffffffffffffc}], 0x1}, 0x0) 19:27:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETIFF(r0, 0xc020660b, 0x0) 19:27:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 19:27:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:50 executing program 4: socketpair(0x8, 0x0, 0x0, &(0x7f0000000080)) 19:27:50 executing program 0: socketpair(0x64, 0x0, 0x0, &(0x7f00000007c0)) 19:27:50 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="14"}, 0x48) 19:27:50 executing program 2: mknod(&(0x7f0000000040)='.\x00', 0x0, 0x0) 19:27:50 executing program 1: msgget$private(0x0, 0x18) msgget$private(0x0, 0x204) r0 = msgget$private(0x0, 0x44c) msgsnd(r0, &(0x7f0000000500)={0x2, "9fe390be6a30c244dd6ac7168871672825d411b7408de0cdf81b27801921f475883cc8787e3fc1e8c4328a0d184235b4d69da9642b1b4aa0c0ca5f4762ce48a6e3ddf5240798a2444b753e81afc1d508c73c803ab7a36d19dcd580274eb7d8520029baed7bfb8ee6e70a10444049f68fe977fa3575c15d78a58c64c797305c47be4f2d56a1086ec0898ccbd0039cff2289f995be4769a7"}, 0x9f, 0x0) msgrcv(r0, &(0x7f00000005c0)={0x0, ""/241}, 0xf9, 0x2, 0x800) r1 = msgget$private(0x0, 0x5e4) msgsnd(r1, &(0x7f0000000180)={0x3, "7650ac734ded7a172725cd36ab0b0804a66cd719f32975ae7617ff82f87d8a3f7760e4ece1351750042eedcdc98e2caf739c66ca26da0ccbe67e494f129e292c40c148b5f0845eb6f88489017ebfcf245440cd6b1561f2949a2c74cbc66904b8fa6a157bed"}, 0x6d, 0x0) 19:27:50 executing program 4: msgsnd(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:27:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000100)=0xcae, 0x4) [ 1606.620859][ T27] audit: type=1804 audit(1687375670.591:362): pid=31076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1595/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:27:50 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname(r0, 0x0, 0x0) 19:27:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0)=0x20, 0x4) 19:27:50 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, @short}, 0x14, &(0x7f0000000180)={0x0}}, 0x0) 19:27:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000380)="c97f4f73f6e48f6cdbaf692c9c7c0cd4b2838e1d4a5863daeffdf6c93e296003421fae1221f284cba0b2f8d38543560dff67984b7ddffebf94fd735b79c3e47236cc747f74e5a62749b8487db7c076f6613b961a2f99b11199cf101829f921eedb65b4ea840fe73120cbeeb86001634f8bcdc024941ae54da6465885edd13b7440a1575d4bc82bb76fef9d57d814c926c147da49133d244c504fdfac5c31edbec1d528861d4f2e1a2097a9b3f232558dbc1e6a2ca2c29df9d3936025623ab335bc7a2eb981d81a7c5513bce09399067574f77c480e5223c5087499345482b9961d85bf9821e2aa382e682a84266438ea91b3ca98dbe07bc211294493e5b2d9aa280f6da4ce3bb671c81af3ebc0acd991f8fa4e4e26e3c7d0f3e0ba02d9157457acbc57b293f4869903cf35706be9e9b3847ef4a745218fb4d8d0b5a0e688479073acb890890fd294efa58ed723c9259191cbc04b6326d511bc4340ac368f5bc7d11d99ac9b6fd2cb20139936c9b3e9fe2e58d9860c01f3ceedaa7ed28cf4c10a50cff9abd15d618d659bd7be5ad4e0e8d62254c2022317343295c390ff80eb7e6f04974c124ba4fca6277b7a42ef57f043c3503b708c7a4387886b00ecd85e6c7361bdc0d47e7a8caad5f989133415f500b7b6728fde6677878058e37da85af138ccaefbfebace7520f6ae27f292b3aa509f98407c026f2a8ad20023b52adfc82db93450d0756ff904367c62365f4a6363ca2d201ab2331ac06c672e4ffe89317e073b7545ddb2615419cc5a71fec3da3f95a8b1d69830fb9328d57bc857bb4f1dfe8e1a59c5a64bd107b0d51242aa85c8b9de07974a0668dd2abf9a2d8bb9ee11e13fb72ff392b0c1256fdd2943640d4a5f3ae304fe4ac2c917ddd8602ab72c1ddd6bfa7990cc9481e67d0315e301c071e81b778bd01df68ad8f650823e4716b44ba1c9a8a94b60ed7a127a5075774cba051ec7e6c35c3ecbb740a47364dd3255f7aed44a57bd9b0f7541cc014f27ea39348652dabacb20d2035ae65a4ea856975815013aba96d66624d831f847ce1c381215c23822061ec400a30a58df50757f7926b58faa1d90c13385f2560bb79ce798e5d7136e6f428d645bdf9dea9406dd", 0x321) [ 1606.746978][ T27] audit: type=1804 audit(1687375670.591:363): pid=31076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1595/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:27:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:51 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0/file0\x00') 19:27:51 executing program 5: socketpair(0x2b, 0x0, 0x0, &(0x7f00000007c0)) 19:27:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0xe) 19:27:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000380)="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", 0x7b5) 19:27:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000), 0x4) 19:27:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 19:27:51 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x244001, 0x0) 19:27:51 executing program 5: syz_io_uring_setup(0x7c93, &(0x7f0000001980)={0x0, 0x0, 0x800, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000001a00), &(0x7f0000001a40)) 19:27:51 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0x5450, 0x0) 19:27:51 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc0189436, 0x0) 19:27:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) [ 1607.641090][ T27] audit: type=1804 audit(1687375671.611:364): pid=31114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1596/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1607.732452][ T27] audit: type=1804 audit(1687375671.641:365): pid=31114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1596/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 19:27:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:51 executing program 1: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom1\x00', 0x0, 0x0) 19:27:51 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x0, 0x0, 0x0}) 19:27:51 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) 19:27:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a7c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f000000aa00)={0x0, 0x0, &(0x7f000000a9c0)={&(0x7f000000a8c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}}, 0x0) 19:27:51 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$rds(r0, 0x0, 0x0) 19:27:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe, 0xc, 0x2, [@union]}}, &(0x7f0000000280)=""/68, 0x26, 0x44, 0x1}, 0x20) 19:27:52 executing program 5: r0 = socket(0x10, 0x2, 0x6) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) 19:27:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x120, 0x120, 0xa20, 0xffffffff, 0xffffffff, 0xab8, 0xab8, 0xab8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'macvtap0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x5}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'syz_tun\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 19:27:52 executing program 1: syz_io_uring_setup(0xad4, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 19:27:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x4, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) 19:27:52 executing program 2: socketpair(0x2, 0x3, 0x5, &(0x7f0000000100)) [ 1608.320969][ T27] audit: type=1804 audit(1687375672.291:366): pid=31137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1597/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1608.429479][ T27] audit: type=1804 audit(1687375672.321:367): pid=31137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1597/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 19:27:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)="abe0eb7a3896d55aaf71b9aca802cf69a9f8061f1e250da182652d579dc5748f54014e8b6ae04bfef665d8cb0e56e82629efe57d933ae5effb81a010c33758dadcd6517b7191708fdfe14fcf334b5735495f301c1de4d33d8d2ce24d", 0x5c}, {&(0x7f0000000200)="fad282b540c00519b9d6ee5869a5be833a609561a1839bfd7fbc9cb1a30e9fdbae5df362f7fa8b2019034205e426dca310fda475d1d4f970641ef70d5bbf23668e3258deda5b86226da712024e53a737f9fdd1bc51835496f2df7f41a59a73a50e38f639d7f0998b2cd18538125b03f586a6cd5427beb429fe66c972aa1d4ce32fb19b022ca10acca7919fab29a87dc362689e47055f6b69e277bb6d769997f4980fe261393f5552a1cff1a49c70a985c0133be5d634f7093e170891442f36006ea939c478e0ccfd08ad63", 0xcb}, {&(0x7f0000000300)="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", 0xffc}, {&(0x7f0000001300)="686515697fda25ef5f2685948879596a937c2da0699fc694a2fb5bbf9496be469e1cd2482cb362e9ce86516cd945fbad715a09aecd05927d3376e0cfc256fb4e12", 0x41}, {&(0x7f0000001380)="a36c833faec5c83c1a8f43", 0xb}, {&(0x7f00000013c0)="3d5347186d3613583c48d88dc158c841bb492723f8d0d9222834b18d19fd297e31d75dc83dadeb39de37694292966c72953a159e920bade7be24aa97823b6a3b4b604a0151adcf22dcf8ce4086c537a0c8fd2d064a4b7a71a4820302e07c35a46fea904a84d780c3976ac062559d77c054f5f5edbb72b7f5c087d1c0", 0x7c}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="7213a953dfc8b9dffdb68d6b47b49fbbd44aeb47b9dcbc9c59376ff7a8c7337d7c9757041329344149", 0x29}, {&(0x7f0000001500)="91e1c95f3136c9eddba716b1a11c59060d8f904f9fbbc3ff6ec03842d2b3d5febb377a38c7c1f52377eceb90cfbe2ec3a80c280b45287d444b766912d678acd77b7e49ff21f0d7b7bc44c116dfb70b658380094ba136743223ea768c49c8ac8d0f5f241496baa550b67724b74161ad", 0x6f}], 0x9}, 0x0) 19:27:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000016c0)={&(0x7f0000000100)=@ethernet, 0x80, &(0x7f0000001600)=[{&(0x7f0000000180)="ab", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 19:27:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000280)=""/68, 0x26, 0x44, 0x1}, 0x20) 19:27:52 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 19:27:52 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8918, 0x0) 19:27:53 executing program 5: mq_open(&(0x7f00000000c0)='%/&\x7f\xdc\xaa\xf0\x9fi\x82\xf2\t\x10\x84\x9c,\xec\xa8\v\xb3\xa4\xed\xb1i\xef\xe4\b\x15@\xe9\tK\xc1\'\x9a\n\xcf\x80g\x18\xd8\xd1\xe6h\xfb\x1d\xc6\x88F\xb2\v\xdf.\x9d\x0f\xc4\x1d`\xb8\xbacrM-Zk\x96\xc5\x8b\x95k\xf1\xb5\xe4\x86n\x1d\xf8\xef\xe9y\x01\x97\xedW\xda\x9c\x9f3HH\xb0', 0x0, 0x0, 0x0) 19:27:53 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1601, 0x0) 19:27:53 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 19:27:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000001e4a42ed88"], 0x14}}, 0x0) 19:27:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000001640), 0x4) 19:27:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000000f00000008"], 0x30}}, 0x0) [ 1609.207971][ T27] audit: type=1804 audit(1687375673.171:368): pid=31163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1598/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1609.319122][T31176] __nla_validate_parse: 128 callbacks suppressed [ 1609.319147][T31176] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1609.326410][ T27] audit: type=1804 audit(1687375673.171:369): pid=31163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1598/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 19:27:53 executing program 5: syz_clone(0x41000080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f000000af40), 0xffffffffffffffff) 19:27:53 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile, @union]}}, 0x0, 0x32}, 0x20) 19:27:53 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) 19:27:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)="abe0eb7a3896d55aaf71b9aca802cf69a9f8061f1e250da182652d579dc5748f54014e8b6ae04bfef665d8cb0e56e82629efe57d933ae5effb81a010c33758dadcd6517b7191708fdfe14fcf334b5735495f301c1de4d33d8d2ce24d", 0x5c}, {&(0x7f0000000200)="fad282b540c00519b9d6ee5869a5be833a609561a1839bfd7fbc9cb1a30e9fdbae5df362f7fa8b2019034205e426dca310fda475d1d4f970641ef70d5bbf23668e3258deda5b86226da712024e53a737f9fdd1bc51835496f2df7f41a59a73a50e38f639d7f0998b2cd18538125b03f586a6cd5427beb429fe66c972aa1d4ce32fb19b022ca10acca7919fab29a87dc362689e47055f6b69e277bb6d769997f4980fe261393f5552a1cff1a49c70a985c0133be5d634f7093e170891442f36006ea939c478e0ccfd08ad63", 0xcb}, {&(0x7f0000000300)="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", 0xd9a}, {0x0}, {&(0x7f0000001380)}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 19:27:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x40086602, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) 19:27:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000200)="fa", 0x1}], 0x2}, 0x0) 19:27:53 executing program 4: r0 = socket(0x11, 0xa, 0x0) bind$isdn_base(r0, 0x0, 0x0) 19:27:53 executing program 0: io_uring_setup(0x7c3e, &(0x7f00000001c0)={0x0, 0x0, 0x20}) 19:27:53 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000280)=""/68, 0x18, 0x44, 0x1}, 0x20) 19:27:53 executing program 1: syz_open_dev$media(&(0x7f0000000140), 0x0, 0x486141) 19:27:54 executing program 4: syz_open_dev$media(&(0x7f0000000140), 0xffffffffffffffff, 0x260100) [ 1610.005561][ T27] audit: type=1804 audit(1687375673.961:370): pid=31190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1599/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 1610.128930][ T27] audit: type=1804 audit(1687375673.971:371): pid=31190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1599/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 19:27:54 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x8, &(0x7f0000000680)=@framed={{}, [@cb_func, @map_val, @kfunc]}, &(0x7f0000000700)='GPL\x00', 0x1, 0x44, &(0x7f0000000740)=""/68, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:54 executing program 2: syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x111050, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 19:27:54 executing program 0: r0 = socket(0x11, 0x2, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 19:27:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 19:27:54 executing program 4: syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) 19:27:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:54 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 19:27:54 executing program 1: r0 = socket(0x2c, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short}, 0x14) 19:27:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x10, 0x0) 19:27:54 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1004000, 0x1000, 0x80000001, 0x1}, 0x20) 19:27:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8934, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) 19:27:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) 19:27:54 executing program 1: syz_clone(0x41021000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000000f00000008", @ANYBLOB], 0x30}}, 0x0) 19:27:54 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 19:27:54 executing program 0: socketpair(0x1, 0x0, 0xfffffffc, &(0x7f0000000100)) 19:27:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x288, 0xffffffff, 0xc0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'nicvf0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'bridge_slave_0\x00'}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) [ 1610.759717][T31234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 19:27:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:55 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 19:27:55 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 19:27:55 executing program 0: r0 = socket(0x1, 0x2, 0x0) getsockname$netrom(r0, 0x0, &(0x7f00000002c0)) 19:27:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002400), 0xffffffffffffffff) 19:27:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty, {[@ssrr={0x89, 0xb, 0x0, [@private, @broadcast]}]}}}}}) 19:27:55 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/94, 0x27, 0x5e, 0x1}, 0x20) 19:27:55 executing program 4: socket$inet_udplite(0x2f, 0x2, 0x88) 19:27:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x1, &(0x7f0000000080)=@raw=[@kfunc], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:27:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty, {[@ssrr={0x89, 0xb, 0x0, [@private, @broadcast]}]}}}}}) 19:27:55 executing program 0: bpf$BPF_BTF_LOAD(0x1d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:27:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8914, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) [ 1611.781022][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1611.781044][ T27] audit: type=1804 audit(1687375675.751:374): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1601/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1611.832049][ T27] audit: type=1804 audit(1687375675.781:375): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1601/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 19:27:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 19:27:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 19:27:56 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 19:27:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x35ed}, 0x0) 19:27:56 executing program 2: mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000640)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}) 19:27:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:56 executing program 4: syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd'], 0x0, 0x0, 0x0) 19:27:56 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000001440)) 19:27:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x6, @rand_addr, 0x0, 0x3, 'sed\x00'}, 0x2c) 19:27:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 19:27:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x78}}, 0x0) [ 1612.551029][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.557455][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.577208][T31290] fuse: Bad value for 'fd' 19:27:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={0x0, &(0x7f00000000c0)=""/4096, 0x0, 0x1000}, 0x20) 19:27:56 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_hash}]}}, 0x0, 0x0, 0x0) 19:27:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, 0x0, 0xfffffffffffffcb7) 19:27:56 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) [ 1612.632147][ T27] audit: type=1804 audit(1687375676.591:376): pid=31293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1602/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:27:56 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 1612.760466][ T27] audit: type=1804 audit(1687375676.601:377): pid=31293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1602/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1612.810319][T31299] fuse: Unknown parameter 'dont_hash' 19:27:56 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, 0x0) [ 1612.884990][ T27] audit: type=1326 audit(1687375676.811:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31301 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f796068c389 code=0x0 19:27:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:57 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26}, 0x20) 19:27:57 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000028c0)) 19:27:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/148, 0x12000, 0x800}, 0x20) 19:27:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x7, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:27:57 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000004400), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:27:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}}, 0x0, 0x26}, 0x20) 19:27:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x1004000, 0x1000, 0x0, 0x1}, 0x20) 19:27:57 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) [ 1613.239622][T14889] usb 1-1: new high-speed USB device number 19 using dummy_hcd 19:27:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f00000000c0)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 19:27:57 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x200002}, {0x4}, {}, {}]}]}}, 0x0, 0x46, 0x0, 0x1}, 0x20) [ 1613.423481][ T27] audit: type=1804 audit(1687375677.391:379): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1603/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1613.489469][T14889] usb 1-1: Using ep0 maxpacket: 32 [ 1613.522936][ T27] audit: type=1804 audit(1687375677.421:380): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1603/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 1613.619646][T14889] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1613.809578][T14889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1613.818699][T14889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.848072][T14889] usb 1-1: Product: syz [ 1613.861330][T14889] usb 1-1: Manufacturer: syz [ 1613.871665][T14889] usb 1-1: SerialNumber: syz [ 1613.899686][T31305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1614.138533][T14934] usb 1-1: USB disconnect, device number 19 19:27:58 executing program 0: syz_io_uring_setup(0xad4, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7c93, &(0x7f0000001980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) 19:27:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x38) 19:27:58 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x1242, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 19:27:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 19:27:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:58 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$FUSE_LSEEK(r0, &(0x7f00000020c0)={0x18}, 0x18) 19:27:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xe}]}]}}, 0x0, 0x2e}, 0x20) 19:27:58 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$inet(r0, 0x0, 0x0) 19:27:58 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89fa, &(0x7f0000000000)) 19:27:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8982, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) 19:27:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x6, @rand_addr, 0x0, 0x0, 'sed\x00'}, 0x2c) [ 1614.892428][ T27] audit: type=1804 audit(1687375678.861:381): pid=31339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1604/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:27:58 executing program 1: r0 = socket(0x2a, 0x2, 0x0) accept$netrom(r0, 0x0, 0x0) 19:27:59 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000280)=""/186, 0x26, 0xba, 0x1}, 0x20) 19:27:59 executing program 2: syz_mount_image$fuse(&(0x7f0000005940), &(0x7f0000005980)='./file0\x00', 0x0, &(0x7f000000a240), 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) 19:27:59 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc020660b, 0x0) [ 1615.041377][ T27] audit: type=1804 audit(1687375678.861:382): pid=31339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1604/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:27:59 executing program 1: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001840), 0x40000, 0x0) 19:27:59 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000b, 0x13, r0, 0x180000000) [ 1615.206802][T31363] fuse: Bad value for 'fd' 19:27:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:27:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0xa}]}}, 0x0, 0x26}, 0x20) 19:27:59 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)) 19:27:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000000f000000080039000000000008"], 0x30}}, 0x0) 19:27:59 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x7ffff000, &(0x7f0000000640)={0x0}, 0x300}, 0x0) 19:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:27:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 19:27:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) 19:27:59 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000}]}]}}, &(0x7f0000000280)=""/68, 0x32, 0x44, 0x1}, 0x20) 19:27:59 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000100)=0x20000, 0x4) [ 1615.749152][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 19:27:59 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x0, 0x8, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x1}]}) 19:27:59 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0x5421, 0x0) [ 1615.892786][ T27] audit: type=1804 audit(1687375679.861:383): pid=31391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1605/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 19:28:00 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_LSEEK(r0, &(0x7f00000020c0)={0x18}, 0x18) 19:28:00 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$evdev(&(0x7f00000020c0), 0xfffffffffffffffb, 0x10000) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000002100)=""/56) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) r6 = syz_clone(0x41000080, &(0x7f0000004300)="c92a313347415142f363696f849fddb3f78c3044941dbefc63dd6386a92fb72b3b31459a166972e579f89c83a1e0f57fc38a03ccec2fcabf027e32c1782220593a3bc1e08bc2a8cd931f8f3dbe909da8278a6a4171ba1cc4fec4e961f5e74615408e74144546df6a3c528ca13097a1b9e35321b8ff62781c6f9e656cc8ce03b0346cf5f733508ff04ae16dd05262598c9b09e0bef220b05b4855292f68ae6037bea3facbeab815c9e8", 0xa9, &(0x7f00000043c0), &(0x7f0000004400), &(0x7f0000004440)="6c0fbca73d59332d217feddfdde890df35ef7f2a0a330be3") getresgid(&(0x7f0000004600)=0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000002180)="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", 0x2000, &(0x7f0000006bc0)={&(0x7f0000004180)={0x50, 0x0, 0x4, {0x7, 0x26, 0x7ff, 0x2023000, 0x9, 0x2, 0x3, 0x4c0f}}, &(0x7f0000004200)={0x18, 0x8000000000000018, 0x289, {0x8000000000}}, &(0x7f0000004240)={0x18, 0x0, 0x6, {0x20}}, &(0x7f0000004280)={0x18, 0x0, 0xffffffff, {0x10000}}, &(0x7f00000042c0)={0x18}, &(0x7f0000004480)={0x28, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x2, r6}}}, &(0x7f00000044c0)={0x60, 0x2f, 0x6, {{0x7ff, 0x1, 0xe6, 0x20, 0x1, 0x7fff, 0x8, 0x2}}}, &(0x7f0000004540)={0x18, 0x0, 0xffffffffffffffb1, {0x6}}, &(0x7f0000004580)={0x16, 0x0, 0x9, {'}{&:)\x00'}}, &(0x7f00000045c0)={0x20, 0x0, 0x7fffffff, {0x0, 0x1}}, &(0x7f00000046c0)={0x78, 0x0, 0x9, {0x0, 0xaae, 0x0, {0x3, 0x8, 0xffffffffffffffff, 0x1, 0x5, 0x400, 0x5, 0xffffffe1, 0x81, 0x5000, 0x6, r1, r7, 0x1, 0x7ff}}}, &(0x7f0000004740)={0x90, 0x0, 0x6, {0x5, 0x3, 0x1, 0x5, 0xa9d, 0x3, {0x6, 0x85f1, 0xac21, 0x100, 0x522, 0x2, 0x1a73e48b, 0x5, 0x2, 0x4000, 0x20e, r1, r2, 0x6, 0x8}}}, &(0x7f0000004800)={0xf0, 0x0, 0x2, [{0x4, 0xd8c9, 0x1, 0x7, ']'}, {0x2, 0x0, 0x12, 0x80, '/dev/input/event#\x00'}, {0x6, 0x522e, 0x6, 0x54a, '+\'\xa2\x97+^'}, {0x5, 0x1, 0xa, 0x8001, '/dev/fuse\x00'}, {0x4, 0x7, 0xa, 0x1, '/dev/fuse\x00'}, {0x1, 0x1000000000000, 0x3, 0x9, '$\'+'}]}, &(0x7f0000006940)={0x158, 0x0, 0x8, [{{0x2, 0x0, 0x800, 0x800000000000000, 0xffffffff, 0x6, {0x0, 0xcb0, 0x0, 0x0, 0x100, 0x6793, 0x3, 0xffff3470, 0x10001, 0x8000, 0x8, r1}}, {0x6, 0x0, 0x2, 0x0, ']@'}}, {{0x0, 0x2, 0x3, 0x7, 0x101, 0x100, {0x3, 0x288405a3, 0x3, 0x5, 0x401, 0x77, 0x80000, 0x3, 0x518, 0x1000, 0x401, r1, r2, 0x0, 0x6}}, {0x6, 0x9, 0xa, 0xffff, '/dev/fuse\x00'}}]}, &(0x7f0000006ac0)={0xa0, 0x0, 0x641, {{0x5, 0x1, 0x1f, 0xffffffff, 0x200, 0x7, {0x5, 0x401, 0x1, 0x1, 0xfffffffffffffffe, 0x0, 0x80, 0x2d0, 0x4, 0xc000, 0x5, r1, r2, 0x1ff, 0x3}}, {0x0, 0x4}}}, &(0x7f0000006b80)={0x20, 0x0, 0x1000, {0x9, 0x4, 0x80, 0x72}}}) write$FUSE_LSEEK(r0, &(0x7f0000006c80)={0x18, 0x7fffffffffffffff, 0x0, {0x3d9}}, 0x18) write$FUSE_WRITE(r0, &(0x7f0000006cc0)={0x18, 0xffffffffffffffda, 0x0, {0xc}}, 0x18) read$FUSE(r0, &(0x7f0000006d00)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000008d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f000000ad80)={0x28, 0xfffffffffffffff5, r8, {{0x7, 0x6, 0x2, r3}}}, 0x28) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f000000adc0), 0x4) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f000000aec0)) 19:28:00 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000100), 0x4) 19:28:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setns(r0, 0x0) 19:28:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x8}, @void}}}, 0x1c}}, 0x0) [ 1616.308418][T31402] validate_nla: 180 callbacks suppressed [ 1616.308445][T31402] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 19:28:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) 19:28:00 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x6, 0x5, 0x7, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x45b289295b256ba, 0x7800, 0x4, 0x6}}) 19:28:00 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 19:28:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f000000a880)={'batadv_slave_1\x00'}) 19:28:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto$l2tp6(r0, &(0x7f0000000100)="f5", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x20) 19:28:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r1, 0xe6c6fb7fdb01398d, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 19:28:00 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 19:28:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 19:28:00 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@union]}}, &(0x7f0000000280)=""/68, 0x26, 0x44, 0x1}, 0x20) 19:28:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x105) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 19:28:01 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:01 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8995, &(0x7f0000000000)) 19:28:01 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002440), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005680)={0x2020}, 0x2020) 19:28:01 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) 19:28:01 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89f4, &(0x7f0000000000)) 19:28:01 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f00000002c0)) 19:28:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 19:28:01 executing program 1: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x7ffffffe) 19:28:01 executing program 2: bpf$BPF_BTF_LOAD(0x1c, 0x0, 0x0) 19:28:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x22}, 0x0) [ 1617.500259][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1617.500282][ T27] audit: type=1804 audit(1687375681.471:388): pid=31447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1607/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a7c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f000000aa00)={0x0, 0x0, &(0x7f000000a9c0)={&(0x7f000000a8c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}}, 0x0) [ 1617.689073][ T27] audit: type=1804 audit(1687375681.471:389): pid=31447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1607/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:28:01 executing program 2: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7c93, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x112}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000001a00), &(0x7f0000001a40)) 19:28:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:02 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:02 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="e65f8849c6aac7d24f2dd80bb36c52f6a7afa6ec4da3070275122ba781ae51b3d4745f1cf8a22d9aab", 0x29) 19:28:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='ok'], 0x14}}, 0x0) 19:28:02 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:28:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) 19:28:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20) 19:28:02 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 19:28:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 19:28:02 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) accept$inet6(r0, 0x0, 0x0) 19:28:02 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) 19:28:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 1618.935860][ T27] audit: type=1804 audit(1687375682.901:390): pid=31484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1608/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1618.989954][ T27] audit: type=1804 audit(1687375682.901:391): pid=31484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1608/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:03 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000280)) 19:28:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 19:28:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', 0x0}) 19:28:03 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f00000020c0)={0x18, 0x0, r2}, 0x18) 19:28:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:03 executing program 0: mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0) 19:28:04 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0x10}, 0x10) 19:28:04 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) accept$phonet_pipe(r0, 0x0, 0x0) 19:28:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x0, 0x6, 0x1ff, 0x1100}, 0x48) 19:28:04 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) 19:28:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@volatile, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x200002}, {0x4}, {0xe}, {0x10}, {0xb}, {0x8}, {}, {0xa, 0x4}]}]}}, &(0x7f0000000280)=""/68, 0x72, 0x44, 0x1}, 0x20) 19:28:04 executing program 5: syz_usb_connect(0x2, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x23, 0x7e, 0x30, 0x0, 0x5c6, 0x9265, 0x9057, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x6c, 0xb3}}]}}]}}, 0x0) 19:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x0, 0xe4e0c5cc9e416b6f}, 0x14}}, 0x0) [ 1620.270652][T31504] fuse: Bad value for 'fd' 19:28:04 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0x10}, 0x10) 19:28:04 executing program 0: eventfd2(0x0, 0xd70982882860a83) 19:28:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8914, 0x0) [ 1620.699487][ T5127] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1620.752730][ T27] audit: type=1804 audit(1687375684.721:392): pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1609/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1620.825815][ T27] audit: type=1804 audit(1687375684.721:393): pid=31517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1609/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 1620.889486][ T5127] usb 6-1: device descriptor read/64, error 18 [ 1621.163370][ T5127] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1621.359370][ T5127] usb 6-1: device descriptor read/64, error 18 [ 1621.479464][ T5127] usb usb6-port1: attempt power cycle 19:28:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0xe4e0c5cc9e416b6f}, 0x14}}, 0x0) 19:28:05 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) 19:28:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) 19:28:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "cfe58f28c0a74fbc40457b336486bf237d161799f0893178a34c43c8aa6c0519906bc1240a25f7834515a1b8999f9b1e47b8fb07788c8ea6b2dfbe3d4e002589e65af5f00c02947a919174bb99efe03af10245bd8e184ee189005e02ee92495af513b3698f72f777c0e325992e0dae307a2f723e58d9de0f66e71955b988450156f8461dab2071171a188c9bbd5294f3c3a6eaa8cbfb1aac041d2b215cc0341d9ba4a9038047e17e27310bb4441989c3385cd1a2ce246df4bae59a16b08c2fc5aed02bfa3c873c9a1727b99a667fc913fdbcd42c43d7b5dc8fb2433e4c061d10c9aac7d912c5fee042be4ba7a61d2436a364d9995ddaf66e350bbc1e8f4be01c"}}}, 0x128) 19:28:05 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getresuid(&(0x7f00000018c0), 0x0, 0x0) 19:28:05 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1621.899456][ T5127] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1621.990800][ T5127] usb 6-1: Invalid ep0 maxpacket: 0 [ 1622.169398][ T5127] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1622.259405][ T5127] usb 6-1: Invalid ep0 maxpacket: 0 [ 1622.264862][ T5127] usb usb6-port1: unable to enumerate USB device 19:28:07 executing program 5: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) 19:28:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0xe4e0c5cc9e416b6f}, 0x14}}, 0x0) 19:28:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a7c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f000000aa00)={&(0x7f000000a780), 0xc, &(0x7f000000a9c0)={&(0x7f000000a8c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}}, 0x0) 19:28:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8912, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) 19:28:07 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom1\x00', 0x0, 0x0) 19:28:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:07 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8948, &(0x7f0000000000)) 19:28:07 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8910, &(0x7f0000000000)) 19:28:07 executing program 2: syz_open_dev$media(&(0x7f0000000140), 0xffffffffffffffff, 0x0) 19:28:07 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x33, 0x6, 0x0, {0x0, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}, 0xffffffffffffff15) 19:28:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:07 executing program 5: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r0, 0x0, 0x200000000000000) 19:28:07 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESHEX], 0x0, 0x0, 0x0) 19:28:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xad4, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7c93, &(0x7f0000001980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000001a00), &(0x7f0000001a40)) 19:28:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0xec0}}, 0x0) 19:28:07 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 19:28:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1623.874283][T31562] fuse: Bad value for 'fd' 19:28:07 executing program 5: socket(0x25, 0x1, 0x800) 19:28:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r1, 0x5, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}}, 0x0) 19:28:08 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) 19:28:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000040)=[{}, {}], 0x0, 0x0, 0x0}) 19:28:08 executing program 2: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:28:08 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89f5, &(0x7f0000000000)) 19:28:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:08 executing program 2: openat$autofs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 19:28:08 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 19:28:08 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0xf4b, 0x200) 19:28:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:08 executing program 0: syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xa7, 0x91, 0x42, 0x20, 0x572, 0xc68a, 0x7c39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd7, 0x6a, 0xd6}}]}}]}}, 0x0) 19:28:08 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)={0x0, 0x1, "1e"}) 19:28:08 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 19:28:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 19:28:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:08 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) getresuid(&(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)) 19:28:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x74}]}]}}, &(0x7f0000000280)=""/68, 0x3e, 0x44, 0x1}, 0x20) 19:28:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) bind$inet(r0, 0x0, 0x0) 19:28:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f000000aa00)={0x0, 0x0, &(0x7f000000a9c0)={&(0x7f000000a8c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 19:28:08 executing program 4: syz_mount_image$fuse(&(0x7f0000005940), &(0x7f0000005980)='./file0\x00', 0x0, &(0x7f000000a240)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '*'}}, {@fowner_lt}]}}, 0x0, 0x0, 0x0) 19:28:08 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) [ 1624.749490][T20509] usb 1-1: new high-speed USB device number 20 using dummy_hcd 19:28:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1624.874156][ T27] audit: type=1326 audit(1687375688.841:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31612 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facbb88c389 code=0x0 [ 1624.904043][T31617] fuse: Bad value for 'fd' [ 1624.999672][T20509] usb 1-1: Using ep0 maxpacket: 32 [ 1625.309655][T20509] usb 1-1: New USB device found, idVendor=0572, idProduct=c68a, bcdDevice=7c.39 [ 1625.318784][T20509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.330540][T20509] usb 1-1: Product: syz [ 1625.334816][T20509] usb 1-1: Manufacturer: syz [ 1625.339994][T20509] usb 1-1: SerialNumber: syz [ 1625.348183][T20509] usb 1-1: config 0 descriptor?? [ 1625.402488][T20509] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1625.459509][T20509] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1625.466010][T20509] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1625.589495][T20509] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1625.595912][T20509] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1625.679299][T20509] usb 1-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C v2' in warm state [ 1625.703143][T20509] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1625.718548][T20509] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C v2) [ 1625.739687][T20509] usb 1-1: media controller created [ 1625.776154][T20509] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1625.920912][T20509] usb 1-1: USB disconnect, device number 20 19:28:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfd7e, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x2}) 19:28:10 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, &(0x7f0000000000)) 19:28:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r1, 0xe4e0c5cc9e416b6f}, 0x14}}, 0x0) 19:28:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/94, 0x27, 0x5e, 0x1}, 0x20) 19:28:10 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000001b80)) 19:28:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}, 0x2}, 0x0) 19:28:10 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0x40049409, &(0x7f0000000180)) 19:28:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x891a, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'ip6erspan0\x00'}) 19:28:10 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xad4, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 19:28:10 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, @short}, 0x14, &(0x7f0000000180)={0x0}}, 0x0) 19:28:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:10 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000440), &(0x7f0000000480)={0x9}, 0x0, 0x0, 0x0) 19:28:10 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 19:28:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0xf}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 19:28:10 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x10500, 0x0) 19:28:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0) 19:28:10 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000500)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000, 0x4000}, {}]}) syz_open_dev$vivid(&(0x7f0000000580), 0x1, 0x2) 19:28:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 19:28:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x400}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x200002, 0x2003}, {0x4}, {0xe}, {}, {0xb}, {0x8}, {}, {0x0, 0x4}]}]}}, &(0x7f0000000280)=""/68, 0x72, 0x44, 0x1}, 0x20) [ 1626.699157][ T27] audit: type=1804 audit(1687375690.661:395): pid=31656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1619/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 1626.814786][ T27] audit: type=1804 audit(1687375690.721:396): pid=31655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1619/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 19:28:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}, @ra={0x94, 0x4, 0x1}]}}}}}) 19:28:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000fbdbdf423f00004008000300", @ANYBLOB="0c00990005"], 0x2c}}, 0x0) 19:28:10 executing program 4: socket(0x2a, 0x802, 0x0) [ 1626.950516][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:11 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x52041, 0x0) 19:28:11 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {}, {0x1dc0}]}) 19:28:11 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10002) 19:28:11 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000dc0)='ns/cgroup\x00') 19:28:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 19:28:11 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000180)={r1}) 19:28:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 19:28:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x1, 0x1, 0x1}) 19:28:11 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom1\x00', 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000780), 0xc) 19:28:11 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0x40049409, 0x0) 19:28:11 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x44) 19:28:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x40001) 19:28:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1628.129902][ T27] audit: type=1804 audit(1687375692.101:397): pid=31699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1620/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1628.156354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1628.189344][ T27] audit: type=1804 audit(1687375692.131:398): pid=31699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1620/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 19:28:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 19:28:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x61]}}, 0x0, 0x33}, 0x20) 19:28:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@volatile, @int={0x10}]}}, &(0x7f0000000280)=""/186, 0x36, 0xba, 0x1}, 0x20) 19:28:13 executing program 5: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x1390c2, 0x0) 19:28:13 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) 19:28:13 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891a, 0x0) 19:28:13 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2}, 0x18) 19:28:13 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x81000) 19:28:13 executing program 0: r0 = socket(0x10, 0x2, 0x0) write$nbd(r0, &(0x7f0000000700), 0x10) 19:28:13 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, 0x0) 19:28:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0) 19:28:13 executing program 5: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 19:28:13 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x1242, 0x0) [ 1629.804535][ T27] audit: type=1804 audit(1687375693.771:399): pid=31729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1621/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1629.830997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.848868][ T27] audit: type=1804 audit(1687375693.771:400): pid=31729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1621/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1629.874856][ C1] vkms_vblank_simulate: vblank timer overrun 19:28:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:14 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 19:28:14 executing program 1: syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8002) 19:28:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) 19:28:14 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1002, 0x0) 19:28:14 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000000)={0x2}, 0x10) 19:28:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0), 0x4) 19:28:14 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000100)=""/94, 0x26, 0x5e, 0x1}, 0x20) 19:28:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='}'], 0x1c}}, 0x0) 19:28:14 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0x2, &(0x7f0000000180)) 19:28:14 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x2, &(0x7f0000000000)) 19:28:14 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x105800, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000100)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), 0xffffffffffffffff) socket(0x18, 0x0, 0x4) [ 1631.449861][ T27] audit: type=1804 audit(1687375695.421:401): pid=31756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1622/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1631.476412][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.507290][ T27] audit: type=1804 audit(1687375695.451:402): pid=31756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1622/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback}}}}) 19:28:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x0, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:16 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20}, 0xffffffffffffff58) 19:28:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r1, 0x9, 0x0, 0x0, {{}, {@val={0x10}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 19:28:16 executing program 0: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) 19:28:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xad4, &(0x7f0000001740), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) syz_io_uring_setup(0x7c93, &(0x7f0000001980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000001a00), &(0x7f0000001a40)) [ 1632.427173][T31765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 19:28:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x101}]}) 19:28:16 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 19:28:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 19:28:16 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000100)=0x36) 19:28:16 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3f}}}) [ 1633.153854][ T27] audit: type=1804 audit(1687375697.121:403): pid=31782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1623/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 1633.202064][ T27] audit: type=1804 audit(1687375697.121:404): pid=31782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1623/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 19:28:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000fbdbdf423f00004008"], 0x2c}}, 0x0) 19:28:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x5}, 0x14}}, 0x0) 19:28:17 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0x5452, &(0x7f0000000180)) 19:28:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @private}}}}) 19:28:17 executing program 2: socket(0x29, 0x5, 0x8c3) 19:28:18 executing program 0: syz_clone(0x41000080, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41000080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:18 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8924, &(0x7f0000000000)) [ 1634.096719][T31791] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:28:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 19:28:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) 19:28:18 executing program 2: syz_io_uring_setup(0x7c93, &(0x7f0000001980), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000001a00), &(0x7f0000001a40)) 19:28:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) getresuid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000002400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1635.015582][ T27] audit: type=1804 audit(1687375698.981:405): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1624/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1635.068438][ T27] audit: type=1804 audit(1687375698.981:406): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1624/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:19 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6410002e}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x30, 0x48, 0x20, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltfilter={0x60, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0x763c5e85341c0c32, 0x2}, {0xffff, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x9d1}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3f}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40840}, 0x1800) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000680)={{&(0x7f0000000600)={'Accelerator0\x00', {&(0x7f0000000340)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0xfffffffffffffff7}, {&(0x7f0000000280)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}}}}}, {&(0x7f0000000580)={'Accelerator\x00', {&(0x7f00000004c0)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"ae2669cc48e32476d549983e6406c8cf17bb1d90ef568fd329127c24fc985e5c9b8408e7f9088ee19caa50c44fc65c0fc27af2510604bf0dac2f36220c96adc5"}, {&(0x7f0000000400)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingNumResponses\x00'}, {0x7fffffff}}}}}}}}}, 0x2c}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f00000006c0)={0x27, 0x0, 0x1, 0x4}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = syz_io_uring_complete(0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f00000009c0)={{&(0x7f0000000940)={'Accelerator1\x00', {}, {&(0x7f00000008c0)={'Accelerator0\x00', {&(0x7f0000000800)=@adf_hex={@normal='NumberDcInstances\x00', {0x8ca}, {&(0x7f0000000740)=@adf_str={@format={'Dc', '4', 'RingSymRx\x00'}, {"2836c413ffb4d71a5b331090d6465e10c11316d3b14b9b64b7cded9c0db757486c8230c16bd6a879bd63203a80d50cc1155e2e17bc25d7dc90ed62f9fe0cbe5a"}}}}}}}}}, 0x5}) r5 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x408c1) socketpair(0x21, 0x4, 0x8000, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@newtclass={0x54, 0x28, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x3, 0xf}, {0x8, 0xfff7}, {0xffff, 0x4}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x7f, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x154, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x6}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xdb, 0xac, "cbc87e9fa295165572486be587963688d903a303c9441c8ba60617db44b69ba1fd68b2bc9646694ace801ba0eb6bc6514e77619dac87363bbdcc71a53722e15881dc46844e85c810d7f22e22b5a3e1ff707e380a52c1363a82e2234c965c02245be58e9b1ba9a8c7885639961661faa71f811a6b86ada7096c40eac0e5eb86cb540b9c5b9159bfbf80b3675201e01d87ed826b9a1d41f4c56276bd5a8d98b850741ed7dd1b8f300c202da236b616f2d78ab93c1a14b293e8929d5b753e7ba7e513f428b2cc047d00247955a9145b99edef7c2fde628b23"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r10 = syz_io_uring_complete(0x0) ioctl$SNAPSHOT_FREE(r10, 0x3305) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000f80)={0x6, 0x0, 0x0, 0x3f, 0x1f, 0xcd, 0xf8, 0x8, 0x9, 0x3f, 0xff, "a99066cdd73c44d782f5a932d990e77cc3e053c0c96628375f56f9eef9498ad1"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'ip6_vti0\x00', r8, 0x4, 0x6, 0x80, 0x8000, 0x12, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x10000, 0xff}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001680)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2200c00}, 0xc, &(0x7f0000001640)={&(0x7f0000001140)={0x4cc, 0x0, 0x420, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd333}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x309acec}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8001, 0x7f, 0x4}, {0x401, 0x4, 0x0, 0x1}, {0x0, 0xe3, 0x20, 0x9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x24000040}, 0x4080) r14 = openat$vmci(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r14, 0x79f, &(0x7f0000001700)=0xb0000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0xa, 0x800, 0x80000000, &(0x7f0000001740)={0xffffffffffffffff}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r5) sendmsg$NL80211_CMD_SET_STATION(r15, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xb8, r16, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x47}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x25c}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x36, 0xac, "9d111b014f24fa721d05ecf832c16672181a9b8594f52c87ec95bce3909dd6fc803b6c8667b8b5cf1993469ec10fd43271fa"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x80}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x24}, {0x5, 0x1}, {0x6c}, {0x48, 0x1}, {0x1, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2c, 0xbe, "5d966ebe5e57e3b21d5794947b4aed2b6378ab4bfe8651904ebd22e1d111deb148cb662c68fca208"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 19:28:19 executing program 4: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) 19:28:19 executing program 2: openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 19:28:19 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 19:28:19 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_START_NAN(r1, 0x0, 0x0) socketpair(0x0, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001100)) openat$vmci(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0xa, 0x0, 0x80000000, &(0x7f0000001740)) syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r1) 19:28:20 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x7, 0x0, '!&[!.)^'}}]}, 0xb0) 19:28:20 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 19:28:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x605, 0x6}, 0x14) 19:28:20 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x8) 19:28:20 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6410002e}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x30, 0x48, 0x20, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x1) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000680)={{&(0x7f0000000600)={'Accelerator0\x00', {&(0x7f0000000340)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0xfffffffffffffff7}, {&(0x7f0000000280)=@adf_hex={@bank={'Bank', '4', 'InterruptCoalescingTimerNs\x00'}}}}}}}, 0x2c}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r1, &(0x7f00000006c0)={0x27, 0x0, 0x1, 0x4}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = syz_io_uring_complete(0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f00000009c0)={{&(0x7f0000000940)={'Accelerator1\x00', {}, {&(0x7f00000008c0)={'Accelerator0\x00', {&(0x7f0000000800)=@adf_hex={@normal='NumberDcInstances\x00', {0x8ca}, {&(0x7f0000000740)=@adf_str={@format={'Dc', '4', 'RingSymRx\x00'}, {"2836c413ffb4d71a5b331090d6465e10c11316d3b14b9b64b7cded9c0db757486c8230c16bd6a879bd63203a80d50cc1155e2e17bc25d7dc90ed62f9fe0cbe5a"}}}}}}}}}, 0x5}) r5 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x408c1) socketpair(0x21, 0x4, 0x8000, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@newtclass={0x54, 0x28, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x3, 0xf}, {0x8, 0xfff7}, {0xffff, 0x4}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x7f, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x154, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x6}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x7}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xdb, 0xac, "cbc87e9fa295165572486be587963688d903a303c9441c8ba60617db44b69ba1fd68b2bc9646694ace801ba0eb6bc6514e77619dac87363bbdcc71a53722e15881dc46844e85c810d7f22e22b5a3e1ff707e380a52c1363a82e2234c965c02245be58e9b1ba9a8c7885639961661faa71f811a6b86ada7096c40eac0e5eb86cb540b9c5b9159bfbf80b3675201e01d87ed826b9a1d41f4c56276bd5a8d98b850741ed7dd1b8f300c202da236b616f2d78ab93c1a14b293e8929d5b753e7ba7e513f428b2cc047d00247955a9145b99edef7c2fde628b23"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_io_uring_complete(0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000f80)={0x6, 0x0, 0x0, 0x3f, 0x1f, 0xcd, 0xf8, 0x8, 0x9, 0x3f, 0xff, "a99066cdd73c44d782f5a932d990e77cc3e053c0c96628375f56f9eef9498ad1"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001000)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'ip6_vti0\x00', r8, 0x4, 0x6, 0x80, 0x8000, 0x12, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x10000, 0xff}}) 19:28:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f000000d880), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) [ 1637.179490][ T27] audit: type=1804 audit(1687375701.151:407): pid=31852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1625/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1637.216751][ T27] audit: type=1804 audit(1687375701.151:408): pid=31852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1625/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x605}, 0x14) 19:28:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000680)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x8000) syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x80, 0x8000, 0x0, @empty, @private2, 0x40, 0x7, 0x10000}}) openat$vmci(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) 19:28:21 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', 0x0) 19:28:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@sndinfo={0x1c}, @sndinfo={0x1c}], 0x38}, 0x0) 19:28:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendto$inet(r2, &(0x7f0000000100)="e3", 0x1, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x10) 19:28:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000140), 0x8) 19:28:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x5}, 0x10) 19:28:22 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x3e}, 0x20) 19:28:22 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket(0x1c, 0x10000001, 0x84) sendto(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) dup2(r0, r1) 19:28:22 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/185, 0xb9}, 0x41) 19:28:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000001c0), 0x14) [ 1638.258161][ T27] audit: type=1804 audit(1687375702.221:409): pid=31867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1626/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 1638.388950][ T27] audit: type=1804 audit(1687375702.261:410): pid=31867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1626/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 19:28:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:22 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x1) 19:28:22 executing program 4: socket(0x2, 0x3, 0x0) r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[], 0x3ef) 19:28:22 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x41) 19:28:22 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f00000002c0)=ANY=[], 0x3ef) 19:28:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000200), 0x8) 19:28:23 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 19:28:23 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='n', 0x1}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) 19:28:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x2, 0xff}, 0x10) 19:28:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 19:28:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10}, 0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}, 0x3010d) 19:28:23 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') [ 1639.422250][ T27] audit: type=1804 audit(1687375703.391:411): pid=31905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1627/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1639.546927][ T27] audit: type=1804 audit(1687375703.421:412): pid=31905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1627/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 19:28:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 19:28:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r4, 0x0, 0x0, 0xff}, 0x10) 19:28:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x58a}, 0x10) 19:28:23 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8901, &(0x7f0000000200)) 19:28:24 executing program 2: syz_clone(0x10004200, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:24 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x40086602, &(0x7f0000000200)) 19:28:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40) 19:28:24 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8940, &(0x7f0000000200)) 19:28:24 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000800)={0x1}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), 0xffffffffffffffff) 19:28:24 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5460, 0x0) 19:28:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x9, 0x2}, 0x10) [ 1640.301615][ T27] audit: type=1804 audit(1687375704.271:413): pid=31930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1628/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 1640.437434][ T27] audit: type=1804 audit(1687375704.271:414): pid=31930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1628/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 19:28:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x0, 0x27df) mmap$usbfs(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r2) syz_open_dev$usbfs(&(0x7f0000000a40), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19:28:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@union={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x2d}, 0x20) 19:28:24 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xba}, @initr0, @exit]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:24 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x2, &(0x7f0000000200)) 19:28:24 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) 19:28:24 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$usbfs(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000a40), 0x1, 0x28d80) 19:28:24 executing program 0: r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "aaf01e000000000000000000000000005bf300"}) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b59ab9f37435861d9e2868281ddebbbd750802"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) 19:28:24 executing program 1: socket$inet6(0xa, 0x0, 0x27df) 19:28:25 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 19:28:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000040)={0x0, 0x20}, 0x8) [ 1641.135350][ T27] audit: type=1804 audit(1687375705.101:415): pid=31962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1629/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 19:28:25 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1641.250316][ T27] audit: type=1804 audit(1687375705.101:416): pid=31962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1629/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 19:28:25 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:25 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r0) 19:28:25 executing program 1: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) 19:28:25 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x0, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:25 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) 19:28:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x704, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 19:28:25 executing program 4: mkdir(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 19:28:25 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000c00)={0x28}) 19:28:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x704, 0x1}, 0x48) 19:28:25 executing program 5: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000140)=[{}], 0x1, &(0x7f0000000180), 0x0, 0x0) 19:28:25 executing program 4: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 19:28:25 executing program 2: write$binfmt_script(0xffffffffffffffff, 0x0, 0x49) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getpid() r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf61bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x4000000000005cd, 0x42, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xb2) 19:28:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:26 executing program 0: syz_clone(0x144000, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0) 19:28:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:26 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@cb_func, @alu]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:26 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x7f, &(0x7f0000000080)=""/127, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:26 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001540)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x350, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@remote, @ipv4, [], [], 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@local, @mcast2, [], [], '\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 19:28:26 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @val, {@ipv6}}, 0x0) 19:28:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x1a022, 0x0) 19:28:26 executing program 5: socketpair(0x25, 0x0, 0x0, &(0x7f00000001c0)) 19:28:26 executing program 1: io_uring_setup(0xfb, &(0x7f00000000c0)={0x0, 0x0, 0x8}) 19:28:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x9a5f6000) [ 1642.753318][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1642.753339][ T27] audit: type=1804 audit(1687375706.721:419): pid=32016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1631/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1642.924903][ T27] audit: type=1804 audit(1687375706.761:420): pid=32016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1631/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:27 executing program 2: write$binfmt_script(0xffffffffffffffff, 0x0, 0x49) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getpid() r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf61bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x4000000000005cd, 0x42, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xb2) 19:28:27 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 19:28:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae42, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 19:28:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x80, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", 0x0, 0x0, {0x0, 0x7ff}, {}, 0x0, [0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0x2}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 19:28:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae68, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) 19:28:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:27 executing program 0: write$binfmt_script(0xffffffffffffffff, 0x0, 0x49) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getpid() r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf61bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x4000000000005cd, 0x42, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xb2) [ 1643.659368][T20509] usb 2-1: new high-speed USB device number 29 using dummy_hcd 19:28:27 executing program 4: syz_usb_connect$uac1(0x0, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x181}}}}}}}]}}, 0x0) [ 1643.733783][ T27] audit: type=1804 audit(1687375707.701:421): pid=32051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1632/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1643.936264][ T27] audit: type=1804 audit(1687375707.731:422): pid=32051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1632/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1643.989379][T20509] usb 2-1: Using ep0 maxpacket: 8 [ 1644.109677][T20509] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1644.239351][T14934] usb 5-1: new high-speed USB device number 91 using dummy_hcd 19:28:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0), 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:28 executing program 5: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000483000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000feb000/0x14000)=nil, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) socket$vsock_stream(0x28, 0x1, 0x0) dup(0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1644.449678][T20509] usb 2-1: string descriptor 0 read error: -22 [ 1644.460751][T20509] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1644.519314][T14934] usb 5-1: Using ep0 maxpacket: 32 [ 1644.545872][T20509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:28:28 executing program 2: write$binfmt_script(0xffffffffffffffff, 0x0, 0x49) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getpid() r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf61bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x4000000000005cd, 0x42, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xb2) 19:28:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="97adb0d5446cabf7794f545069c8bcb91a52bfbb2fdb2b5176a419abe1b6e3d7da40b7ae6d58bc3c0251e4742b8dd7", 0x2f}, {&(0x7f0000000300)="8aa9653be7eefbde7560fae54b086955fc3be5dee09dbc8307692b536d82bd1e94564a19033495f564b6090cf12e9768fc802c5f505e476dfc2b13a772d54d6ffb0ba92842e2cd87a455daf32c8e4bb26f8e76732562bf36cc2be96ad0c6cb99723e8bbc7e868663966f08f48544a58d46b7d6102216f97fb06fbb5493d480d982fdd5672d546054435672459a41a1b6889ac2b723de", 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="67a21f446d86b7c74789485a155f18c72546c61300313e16efc0041a2aff98159f8e0bbfbce48e104b5dbf4de0e5b26cc4fadec3d65752327ce63f313ab3fb6337a9e7f322b149f40c025e1108b94dfcd4963ff368b18edb9ee147770d6289e3f9dfd02ee3fb29e01f99e701da2e", 0x6e}], 0x6e}}], 0x2, 0x0) [ 1644.659588][T14934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.670985][T20509] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1644.687919][T14934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1644.752683][ T27] audit: type=1804 audit(1687375708.721:423): pid=32065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1633/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1644.787438][T14934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1644.875930][ T5127] usb 2-1: USB disconnect, device number 29 19:28:28 executing program 5: setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000340)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="390000001300034700bb65e1c3e4ff5b4ab6380d218d9531058ad9caf8b175ff01000000010000005600000025000000190004000400000007", 0x39}], 0x1) [ 1644.901160][ T27] audit: type=1804 audit(1687375708.751:424): pid=32065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1633/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1645.019917][T14934] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1645.046928][T14934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.079352][T14934] usb 5-1: Product: syz [ 1645.092805][T32073] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1645.114789][T14934] usb 5-1: Manufacturer: syz [ 1645.181163][T14934] usb 5-1: SerialNumber: syz [ 1645.250042][T32060] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 19:28:29 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 19:28:29 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x0, 0x0, 0x3) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/279, 0x117}], 0x1) 19:28:29 executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "177cce506a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x40}}}}}}}]}}, 0x0) [ 1645.549651][T14934] usb 5-1: 0:2 : does not exist [ 1645.564682][ T27] audit: type=1804 audit(1687375709.531:425): pid=32079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1634/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1645.612672][ T27] audit: type=1804 audit(1687375709.531:426): pid=32079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1634/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:29 executing program 5: socket(0x2b, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) [ 1645.667353][T14934] usb 5-1: USB disconnect, device number 91 [ 1645.739429][ T5127] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1645.799639][T14889] usb 2-1: new high-speed USB device number 30 using dummy_hcd 19:28:29 executing program 5: io_uring_setup(0xfb, &(0x7f00000000c0)={0x0, 0x5d55, 0x8}) [ 1645.999442][ T5127] usb 1-1: Using ep0 maxpacket: 32 19:28:30 executing program 4: syz_usb_connect$uac1(0x0, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x181}}}}}}}]}}, 0x0) 19:28:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1646.049509][T14889] usb 2-1: Using ep0 maxpacket: 8 19:28:30 executing program 5: syz_usb_connect$uac1(0x0, 0x7e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x181}}}}}}}]}}, 0x0) [ 1646.119567][ T5127] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1646.153007][ T5127] usb 1-1: config 1 has no interface number 1 [ 1646.175307][T14889] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1646.188379][ T27] audit: type=1804 audit(1687375710.141:427): pid=32092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1635/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 1646.246409][ T5127] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1646.292680][ T27] audit: type=1804 audit(1687375710.141:428): pid=32092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1635/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 19:28:30 executing program 2: write$binfmt_script(0xffffffffffffffff, 0x0, 0x49) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getpid() r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf61bb9f9"], 0x20000600}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x4000000000005cd, 0x42, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xb2) [ 1646.360068][ T5127] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1646.387390][ T5127] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1646.459455][T20509] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1646.499459][T14889] usb 2-1: string descriptor 0 read error: -22 [ 1646.507870][T14889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1646.529469][T15562] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1646.554703][T14889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.589597][ T5127] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1646.619663][ T5127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.642377][ T5127] usb 1-1: Product: syz [ 1646.654843][ T5127] usb 1-1: Manufacturer: syz [ 1646.662271][ T5127] usb 1-1: SerialNumber: syz [ 1646.670777][T14889] cdc_ether: probe of 2-1:1.0 failed with error -22 19:28:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1646.729414][T20509] usb 5-1: Using ep0 maxpacket: 32 [ 1646.789897][T15562] usb 6-1: Using ep0 maxpacket: 32 [ 1646.869885][T20509] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.890748][T20509] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1646.918868][T20509] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1646.933073][T15562] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.963022][T14934] usb 2-1: USB disconnect, device number 30 [ 1646.978849][T15562] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1646.991128][T15562] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1647.112495][ T5127] usb 1-1: USB disconnect, device number 21 [ 1647.179674][T15562] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1647.189715][T20509] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1647.200613][T15562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.210413][T20509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.225794][T20509] usb 5-1: Product: syz [ 1647.232995][T15562] usb 6-1: Product: syz [ 1647.237793][T20509] usb 5-1: Manufacturer: syz [ 1647.244221][T15562] usb 6-1: Manufacturer: syz [ 1647.265797][T20509] usb 5-1: SerialNumber: syz [ 1647.285825][T15562] usb 6-1: SerialNumber: syz [ 1647.329670][T32098] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1647.339673][T32096] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 19:28:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10b}]}) 19:28:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="97adb0d5446cabf7794f545069c8bcb91a52bfbb2fdb2b5176a419abe1b6e3d7da40b7ae6d58bc3c0251e4742b8dd7", 0x2f}, {&(0x7f0000000300)="8aa9653be7eefbde7560fae54b086955fc3be5dee09dbc8307692b536d82bd1e94564a19033495f564b6090cf12e9768fc802c5f505e476dfc2b13a772d54d6ffb0ba92842e2cd87a455daf32c8e4bb26f8e76732562bf36cc2be96ad0c6cb99723e8bbc7e868663966f08f48544a58d46b7d6102216f97fb06fbb5493d480d982fdd5672d546054435672459a41a1b6889ac2b723de", 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="67a21f446d86b7c74789485a155f18c72546c61300313e16efc0041a2aff98159f8e0bbfbce48e104b5dbf4de0e5b26cc4fadec3d65752327ce63f313ab3fb6337a9e7f322b149f40c025e1108b94dfcd4963ff368b18edb9ee147770d6289e3f9dfd02ee3fb29e01f99e701da2e", 0x7f3b}], 0x1}}], 0x2, 0x0) 19:28:31 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1647.651447][T20509] usb 5-1: 0:2 : does not exist [ 1647.680303][T20509] usb 5-1: USB disconnect, device number 92 19:28:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="97adb0d5446cabf7794f545069c8bcb91a52bfbb2fdb2b5176a419abe1b6e3d7da40b7ae6d58bc3c0251e4742b8dd7", 0x2f}, {&(0x7f0000000300)="8aa9653be7eefbde7560fae54b086955fc3be5dee09dbc8307692b536d82bd1e94564a19033495f564b6090cf12e9768fc802c5f505e476dfc2b13a772d54d6ffb0ba92842e2cd87a455daf32c8e4bb26f8e76732562bf36cc2be96ad0c6cb99723e8bbc7e868663966f08f48544a58d46b7d6102216f97fb06fbb5493d480d982fdd5672d546054435672459a41a1b6889ac2b723de", 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="67a21f446d86b7c74789485a155f18c72546c61300313e16efc0041a2aff98159f8e0bbfbce48e104b5dbf4de0e5b26cc4fadec3d65752327ce63f313ab3fb6337a9e7f322b149f40c025e1108b94dfcd4963ff368b18edb9ee147770d6289e3f9dfd02ee3fb29e01f99e701da2e", 0x7f3b}], 0x1}}], 0x2, 0x0) [ 1647.760186][T15562] usb 6-1: 0:2 : does not exist [ 1647.937575][T15562] usb 6-1: USB disconnect, device number 10 [ 1648.032805][T30550] udevd[30550]: setting mode of /dev/snd/controlC4 to 020660 failed: No such file or directory [ 1648.047645][T30550] udevd[30550]: setting owner of /dev/snd/controlC4 to uid=0, gid=29 failed: No such file or directory 19:28:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x2000}) 19:28:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="97adb0d5446cabf7794f545069c8bcb91a52bfbb2fdb2b5176a419abe1b6e3d7da40b7ae6d58bc3c0251e4742b8dd7", 0x2f}, {&(0x7f0000000300)="8aa9653be7eefbde7560fae54b086955fc3be5dee09dbc8307692b536d82bd1e94564a19033495f564b6090cf12e9768fc802c5f505e476dfc2b13a772d54d6ffb0ba92842e2cd87a455daf32c8e4bb26f8e76732562bf36cc2be96ad0c6cb99723e8bbc7e868663966f08f48544a58d46b7d6102216f97fb06fbb5493d480d982fdd5672d546054435672459a41a1b6889ac2b723de", 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="67a21f446d86b7c74789485a155f18c72546c61300313e16efc0041a2aff98159f8e0bbfbce48e104b5dbf4de0e5b26cc4fadec3d65752327ce63f313ab3fb6337a9e7f322b149f40c025e1108b94dfcd4963ff368b18edb9ee147770d6289e3f9dfd02ee3fb29e01f99e701da2e", 0x7f3b}], 0x1}}], 0x2, 0x0) 19:28:32 executing program 5: lsetxattr(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0) 19:28:32 executing program 4: symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:28:32 executing program 4: process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 19:28:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:32 executing program 2: r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8ca\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18\xb3\n\x00\x00\x00\x00\x00\x00\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000531000/0x4000)=nil, 0x4000}}) 19:28:32 executing program 5: socketpair(0x2b, 0x6, 0x80000001, &(0x7f0000000000)) socket(0x2b, 0x1, 0xffffffff) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) 19:28:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000118}]}) 19:28:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="97adb0d5446cabf7794f545069c8bcb91a52bfbb2fdb2b5176a419abe1b6e3d7da40b7ae6d58bc3c0251e4742b8dd7", 0x2f}, {&(0x7f0000000300)="8aa9653be7eefbde7560fae54b086955fc3be5dee09dbc8307692b536d82bd1e94564a19033495f564b6090cf12e9768fc802c5f505e476dfc2b13a772d54d6ffb0ba92842e2cd87a455daf32c8e4bb26f8e76732562bf36cc2be96ad0c6cb99723e8bbc7e868663966f08f48544a58d46b7d6102216f97fb06fbb5493d480d982fdd5672d546054435672459a41a1b6889ac2b723de", 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="67a21f446d86b7c74789485a155f18c72546c61300313e16efc0041a2aff98159f8e0bbfbce48e104b5dbf4de0e5b26cc4fadec3d65752327ce63f313ab3fb6337a9e7f322b149f40c025e1108b94dfcd4963ff368b18edb9ee147770d6289e3f9dfd02ee3fb29e01f99e701da2e", 0x6e}], 0x1}}], 0x2, 0x0) 19:28:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000240)) 19:28:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:32 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[], 0x0) 19:28:32 executing program 0: clock_gettime(0xb2000000, 0x0) 19:28:32 executing program 5: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "177cce506a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:28:32 executing program 1: fanotify_mark(0xffffffffffffffff, 0x2, 0x8000031, 0xffffffffffffffff, 0x0) [ 1649.119545][T14890] usb 6-1: new high-speed USB device number 11 using dummy_hcd 19:28:33 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", 0x0, 0x0, {0x0, 0x7ff}, {}, 0x0, [0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0x2}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 19:28:33 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0x2) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000140)='omfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000300)="8faaafaddb9fb00b907a22aaf440951b77051536fc065fe88a2c3c8312934d8e4658e14a614236491d876da3a5a3c1d5c18f9e3b0d6eeb477a3ecc3803b10f55df45cdbad5d41fdadc45d83232e2fb4c8fec3a8c28daac33740059f0cb207ed9a6fc8f3d2cec79c3f139e0e43d4b901faa8ff4ad40ee13b2e687ded83f18ac08ece4c4898011e092d742f75f026c08a7da5069c14e73c442bd7453b42b33fada2fa89542e57f3c7481ea8ab3ea56687c678222389f8d1064f902cecdd1bbd16b0443f6f15b7942b6c32912a6", 0xcc}, {&(0x7f0000000400)="e2b3d838a095b4f31cfe848ec3c305d90c5058bab5de6b5412f3a292a6553613711252d4cca9ac0f7d4b7c9ebd892ce4a0665ee2c65269025077fd07ceef298072133e28d19a395a32b87a5a45a8f4123351fbfcd3733a5a6dd016335ac54c62baeae7e2bf572fee09ebe9e5690064998518921a75fd675af4b861b09b968fd78fac956ae4853271ac2993dcbecd3dcec6546e2561b6d86ffe021803bac367ef27d870eb23753ef54863de209d73449e3ffaf2b68bc4e69c5ffcb3640b74ff2b2e343e7c87d6c05c91a5aac68c7b1efb08421311241605f616bdcfca", 0xdc}, {&(0x7f0000000180)="79df02878469e9bd18c0795966e587d0fba33f0affa5270fe5266b830aec60beddee0583a27baea00bfd87229f19e9039e5a5f00f3fa847c3be4885f0b4b0837f3e0e3ad6650274c335b17c97ccf5fef3aed6140b3c73cb9f01012b67c944f6f80cd14e9695ec1f2be45a01699901ddd37d2cbc546e535c3d451c0d3f37b7e3d7e8cbf586037772b", 0x88}, {&(0x7f0000000500)="1da009d8ebc95503128a91fb4aeaa58860aa162499de78688d3b087133266439c4d4eb3ccc5b66395b424683353e01264b3dd1fe625946cc69a4216716c1f92a3e9b154d10f53680b9ba4d65ac8712cfd181c54134195fce982dc4f9af2d169dc8eb67bd83540a7301f8515bf59b39d77edcf96e766a8af57c9f3afec3386b1717c095ae306220dc91c5b05663800af9593da33118efa63233b83f943bc2cbad495c49050cc6cad2c90d238c8e32e2407e81a286f1ab79aac9c1426d49bff958db13367e0312228879ef4bd064c1b445a27c6725c86ca170847852544c1dea12e0844e4f21db84100adac5d7", 0xec}, {&(0x7f0000000600)="b2bcc7c0f9bfebab0466dc9a28dfd3d54e97b681584acee4790e3fa2cc3df99b80c3f53feb5cdba8d8df343d0ac83622261e3343093944d64b548d7174849d624193c315bd3f6fa5622ddc7fdd67f67c8090e6c61195aa41c83d185cc28492105d996162b0cbe01d6278127d54b573", 0x6f}, {&(0x7f0000000680)="822adaba32f1e90d2b2b54a3e6784d6382f79512019fdee57d84cca1c4ccb33ca9363d3dbff81bdd56126dc13a831ad183fc9d583a90c8b53bee", 0x3a}, {&(0x7f00000006c0)="e81af7b0e8cf57ea98e9bf7c25309abe7f1255d049303bfa084e51e3e4e81fd88c060afcc081faed8cbbedd847635f7cc92369c5bff8e215a90de2d908e8243a0dab880437216babac6f2aa0623a73886e1ccde40c2d0fe008b3868966e20030a30ecca5ca5f531feb9efeeb58d60d6732e09a9fee74382d7b4ac9358cd52755c2184f23e579d9be1c5b9f1bed2e1bdaec9ebb6da3c3d64e2d40a9168030ba24b4fbd1b0a14d900a35eb4862a0542e28c96ffc0f23449d5403a1ffb44362bb72afb067714c2b06cff3a8f4745d67fa3ed3a6cb5e1b095223bf2df27f5e", 0xdd}], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x490243, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r8, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000e40)={r3}, 0x8) io_submit(0x0, 0x9, &(0x7f0000001f40)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000880)="e422f387c4316faa719c918c28a8bbcd67388a68cd932755f6b5be8e90b4932a8e69485c24d68f31b1c74462c97ba15d89eb6786cbc0ca2c1824dc841bc222a4b9af4f736e8f6a1a56ca2123b208155dd2823af6cc981db6f77ed0432a44954cc50c207f5e00143b1619d1837ba57e2e9cbe5ec7e95d72844191486ef18b7dd5041a970be879c049de9a50ab11448a2bef06b7e5ba00", 0x96, 0x5, 0x0, 0x2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000980)="2e8c6ca27f2a5b3101e60c8cbec5f47116843d63c317799eb4bea33d487cc9e1edb84a971bd13c547221a73bbdd61f10dce69c11931da8a442f812eea5b454a1490a4949e55645e5745687d8bd651da4dbbc117313bc4b46fbefe0649971047dd9c0c9", 0x63, 0x7ff, 0x0, 0x1, r3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0xfa4, 0xffffffffffffffff, &(0x7f0000000a40)="622ba34d3763a22accdd74a0e652a3a2cc071cf6bdf0c64e3f9721fe860e75288291de2818cf25a20dab6ef1d447230a121b00d9bbd9acea1dd3ec7ea3029e077b472e92c5e036", 0x47, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0xffff, r4, &(0x7f0000000b00)="3dff36ce1b19086862f33a64", 0xc, 0xf6a, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)="fc1497a490a8116e93", 0x9, 0x7, 0x0, 0x1}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x12, 0x6af, r5, &(0x7f0000000c00)="3c36a2d18fadc7a9d6c3b3bf8facf8ecb1d3be69e13ad535058d833b67888664ba9090378871ec4ac1f161138234c7d211825b6452063825fa70c79c51ac98fa6bf4b7ff59a976fbee8f09035a7c06b3a17a934da048bd59347f229b20fe17c3baa18a7597e917f609ee63bc2d0205458c5038aa481e2de3827df6d8cfe3d38e", 0x80, 0x0, 0x0, 0x3, r6}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x7, 0x2, r7, &(0x7f0000000d00)="75ad07d8599f5ef11f1e1a7f7672ba015fe639845c2839f7cd5d421072c985bfa0a071fc09c488ecfc0ab144eccb9898ea01dd0697fba4ba80ffeb5055a62d1e9d1b3434e3846a81e6f4abe7185995d770c6a7e1ce7565d9b96ece474c0b877004748d370446f69c2d7e13e5017e7f6c0901212f24a7a21fda05b17dfa62f8c3017c87c628be33c384c53df00f9c5befdeecfcd579a571e8335c46a9b3e97d7d7d3dc24f5a44a2b54fba73497e749cccfc4c1c83d5c41d70bdf836733cd0b5d537dc454cad2dcf15060a22240c965a06199b41c8b731", 0xd6, 0x72, 0x0, 0x0, r8}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x2, 0x9, r9, &(0x7f0000000e80)="10f41d45fb72cee900ab9017b86bcb3a1a2f32561763cdc45b903e4b1c9bfa4eea3115d95a246a8d3e", 0x29, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x2, 0x7, r4, &(0x7f0000000f00)="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", 0x1000, 0x1, 0x0, 0x3}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x206, 0x1, 0x6}) 19:28:33 executing program 2: io_uring_setup(0x1ce4, &(0x7f0000000000)={0x0, 0x0, 0x4}) 19:28:33 executing program 0: r0 = memfd_create(&(0x7f0000000240)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8ca\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18\xb3\n\x00\x00\x00\x00\x00\x00\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 19:28:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1649.377570][T14890] usb 6-1: Using ep0 maxpacket: 32 19:28:33 executing program 2: symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:28:33 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7fdbe0bd31395707}) [ 1649.509611][T14890] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1649.534381][T14890] usb 6-1: config 1 has no interface number 1 [ 1649.553162][T14890] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1649.598178][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1649.598201][ T27] audit: type=1804 audit(1687375713.561:431): pid=32167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1640/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 19:28:33 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d80)="ed", 0x1}], 0x1}, 0x0) [ 1649.657202][T14890] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1649.696373][T14890] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 19:28:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4048aecb, &(0x7f0000000140)=ANY=[]) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) [ 1649.811703][ T27] audit: type=1804 audit(1687375713.611:432): pid=32167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1640/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1649.869955][T14890] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1649.870006][T14890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.870043][T14890] usb 6-1: Product: syz [ 1649.870069][T14890] usb 6-1: Manufacturer: syz [ 1649.870096][T14890] usb 6-1: SerialNumber: syz [ 1650.095865][T32177] syzkaller1: entered promiscuous mode [ 1650.095891][T32177] syzkaller1: entered allmulticast mode 19:28:34 executing program 2: io_setup(0x3, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80000000]}, 0x8}) [ 1650.286553][T14890] usb 6-1: USB disconnect, device number 11 [ 1650.305775][T30531] udevd[30531]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 19:28:34 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) 19:28:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1650.935335][ T27] audit: type=1804 audit(1687375714.901:433): pid=32199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1641/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1650.999378][ T27] audit: type=1804 audit(1687375714.961:434): pid=32199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1641/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1651.025343][ C0] vkms_vblank_simulate: vblank timer overrun 19:28:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "43fac0a304ea80e4"}}]}, 0x30}}, 0x0) 19:28:35 executing program 5: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "177cce506a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 19:28:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4098, 0x1002) write$binfmt_script(r1, &(0x7f000000aa80)={'#! ', './file0', [{0x20, 'skcipher\x00'}, {0x20, '\xc1!%'}], 0xa, "ef95718895002f1f5d0b59ea10c43c39562de1f6fea16b4fd350776a23ca00a101fbb3fb3924641d111992c80599eca9e872f951e4b66c76cbfcda2da8283a4bc893539558d0c0aeed92e0a2071f5dde3ac5f16dff18b1becd04113f78d1d6a9c97bbf90f37ce7"}, 0x80) 19:28:35 executing program 1: syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0x2) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f0000000440), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, 0x0, &(0x7f0000000140)='omfs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000300)="8faaafaddb9fb00b907a22aaf440951b77051536fc065fe88a2c3c8312934d8e4658e14a614236491d876da3a5a3c1d5c18f9e3b0d6eeb477a3ecc3803b10f55df45cdbad5d41fdadc45d83232e2fb4c8fec3a8c28daac33740059f0cb207ed9a6fc8f3d2cec79c3f139e0e43d4b901faa8ff4ad40ee13b2e687ded83f18ac08ece4c4898011e092d742f75f026c08a7da5069c14e73c442bd7453b42b33fada2fa89542e57f3c7481ea8ab3ea56687c678222389f8d1064f902cecdd1bbd16b0443f6f15b7942b6c32912a6", 0xcc}, {&(0x7f0000000400)="e2b3d838a095b4f31cfe848ec3c305d90c5058bab5de6b5412f3a292a6553613711252d4cca9ac0f7d4b7c9ebd892ce4a0665ee2c65269025077fd07ceef298072133e28d19a395a32b87a5a45a8f4123351fbfcd3733a5a6dd016335ac54c62baeae7e2bf572fee09ebe9e5690064998518921a75fd675af4b861b09b968fd78fac956ae4853271ac2993dcbecd3dcec6546e2561b6d86ffe021803bac367ef27d870eb23753ef54863de209d73449e3ffaf2b68bc4e69c5ffcb3640b74ff2b2e343e7c87d6c05c91a5aac68c7b1efb08421311241605f616bdcfca", 0xdc}, {&(0x7f0000000180)="79df02878469e9bd18c0795966e587d0fba33f0affa5270fe5266b830aec60beddee0583a27baea00bfd87229f19e9039e5a5f00f3fa847c3be4885f0b4b0837f3e0e3ad6650274c335b17c97ccf5fef3aed6140b3c73cb9f01012b67c944f6f80cd14e9695ec1f2be45a01699901ddd37d2cbc546e535c3d451c0d3f37b7e3d7e8cbf586037772b", 0x88}, {&(0x7f0000000500)="1da009d8ebc95503128a91fb4aeaa58860aa162499de78688d3b087133266439c4d4eb3ccc5b66395b424683353e01264b3dd1fe625946cc69a4216716c1f92a3e9b154d10f53680b9ba4d65ac8712cfd181c54134195fce982dc4f9af2d169dc8eb67bd83540a7301f8515bf59b39d77edcf96e766a8af57c9f3afec3386b1717c095ae306220dc91c5b05663800af9593da33118efa63233b83f943bc2cbad495c49050cc6cad2c90d238c8e32e2407e81a286f1ab79aac9c1426d49bff958db13367e0312228879ef4bd064c1b445a27c6725c86ca170847852544c1dea12e0844e4f21db84100adac5d7", 0xec}, {&(0x7f0000000600)="b2bcc7c0f9bfebab0466dc9a28dfd3d54e97b681584acee4790e3fa2cc3df99b80c3f53feb5cdba8d8df343d0ac83622261e3343093944d64b548d7174849d624193c315bd3f6fa5622ddc7fdd67f67c8090e6c61195aa41c83d185cc28492105d996162b0cbe01d6278127d54b573", 0x6f}, {&(0x7f0000000680)="822adaba32f1e90d2b2b54a3e6784d6382f79512019fdee57d84cca1c4ccb33ca9363d3dbff81bdd56126dc13a831ad183fc9d583a90c8b53bee", 0x3a}, {&(0x7f00000006c0)="e81af7b0e8cf57ea98e9bf7c25309abe7f1255d049303bfa084e51e3e4e81fd88c060afcc081faed8cbbedd847635f7cc92369c5bff8e215a90de2d908e8243a0dab880437216babac6f2aa0623a73886e1ccde40c2d0fe008b3868966e20030a30ecca5ca5f531feb9efeeb58d60d6732e09a9fee74382d7b4ac9358cd52755c2184f23e579d9be1c5b9f1bed2e1bdaec9ebb6da3c3d64e2d40a9168030ba24b4fbd1b0a14d900a35eb4862a0542e28c96ffc0f23449d5403a1ffb44362bb72afb067714c2b06cff3a8f4745d67fa3ed3a6cb5e1b095223bf2df27f5e", 0xdd}], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x490243, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r8, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000e40)={r3}, 0x8) io_submit(0x0, 0x9, &(0x7f0000001f40)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000880)="e422f387c4316faa719c918c28a8bbcd67388a68cd932755f6b5be8e90b4932a8e69485c24d68f31b1c74462c97ba15d89eb6786cbc0ca2c1824dc841bc222a4b9af4f736e8f6a1a56ca2123b208155dd2823af6cc981db6f77ed0432a44954cc50c207f5e00143b1619d1837ba57e2e9cbe5ec7e95d72844191486ef18b7dd5041a970be879c049de9a50ab11448a2bef06b7e5ba00", 0x96, 0x5, 0x0, 0x2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000980)="2e8c6ca27f2a5b3101e60c8cbec5f47116843d63c317799eb4bea33d487cc9e1edb84a971bd13c547221a73bbdd61f10dce69c11931da8a442f812eea5b454a1490a4949e55645e5745687d8bd651da4dbbc117313bc4b46fbefe0649971047dd9c0c9", 0x63, 0x7ff, 0x0, 0x1, r3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0xfa4, 0xffffffffffffffff, &(0x7f0000000a40)="622ba34d3763a22accdd74a0e652a3a2cc071cf6bdf0c64e3f9721fe860e75288291de2818cf25a20dab6ef1d447230a121b00d9bbd9acea1dd3ec7ea3029e077b472e92c5e036", 0x47, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x5, 0xffff, r4, &(0x7f0000000b00)="3dff36ce1b19086862f33a64", 0xc, 0xf6a, 0x0, 0x1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)="fc1497a490a8116e93", 0x9, 0x7, 0x0, 0x1}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x12, 0x6af, r5, &(0x7f0000000c00)="3c36a2d18fadc7a9d6c3b3bf8facf8ecb1d3be69e13ad535058d833b67888664ba9090378871ec4ac1f161138234c7d211825b6452063825fa70c79c51ac98fa6bf4b7ff59a976fbee8f09035a7c06b3a17a934da048bd59347f229b20fe17c3baa18a7597e917f609ee63bc2d0205458c5038aa481e2de3827df6d8cfe3d38e", 0x80, 0x0, 0x0, 0x3, r6}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x7, 0x2, r7, &(0x7f0000000d00)="75ad07d8599f5ef11f1e1a7f7672ba015fe639845c2839f7cd5d421072c985bfa0a071fc09c488ecfc0ab144eccb9898ea01dd0697fba4ba80ffeb5055a62d1e9d1b3434e3846a81e6f4abe7185995d770c6a7e1ce7565d9b96ece474c0b877004748d370446f69c2d7e13e5017e7f6c0901212f24a7a21fda05b17dfa62f8c3017c87c628be33c384c53df00f9c5befdeecfcd579a571e8335c46a9b3e97d7d7d3dc24f5a44a2b54fba73497e749cccfc4c1c83d5c41d70bdf836733cd0b5d537dc454cad2dcf15060a22240c965a06199b41c8b731", 0xd6, 0x72, 0x0, 0x0, r8}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x2, 0x9, r9, &(0x7f0000000e80)="10f41d45fb72cee900ab9017b86bcb3a1a2f32561763cdc45b903e4b1c9bfa4eea3115d95a246a8d3e", 0x29, 0xffffffffffffffff, 0x0, 0x2}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x2, 0x7, r4, &(0x7f0000000f00)="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", 0x1000, 0x1, 0x0, 0x3}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000000)={0x20, 0x8, 0x140, 0xa0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x206, 0x1, 0x6}) 19:28:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", 0x0, 0x0, {0x0, 0x7ff}, {}, 0x0, [0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0x2}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 19:28:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)) [ 1651.489568][T20509] usb 6-1: new high-speed USB device number 12 using dummy_hcd 19:28:35 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) [ 1651.739544][T20509] usb 6-1: Using ep0 maxpacket: 32 19:28:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) [ 1651.859827][T20509] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1651.898095][T20509] usb 6-1: config 1 has no interface number 1 19:28:35 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000002680), 0x18) [ 1651.957295][T20509] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1652.088618][T20509] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 19:28:36 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 1652.163273][T20509] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 19:28:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000005e00)=[{{&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="eadc", 0x2}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x2, 0x0) [ 1652.283043][ T27] audit: type=1804 audit(1687375716.251:435): pid=32229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1642/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1652.309642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.389941][T20509] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1652.411821][T20509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:28:36 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) [ 1652.454419][T20509] usb 6-1: Product: syz [ 1652.472515][T20509] usb 6-1: Manufacturer: syz [ 1652.491113][T20509] usb 6-1: SerialNumber: syz [ 1652.520019][ T27] audit: type=1804 audit(1687375716.251:436): pid=32229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1642/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 1652.547839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1652.625620][T32238] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1652.882476][T20509] usb 6-1: USB disconnect, device number 12 19:28:37 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={0x0}}, 0x0) 19:28:37 executing program 0: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x1282}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, [@kfunc]}, &(0x7f00000008c0)='syzkaller\x00', 0x4, 0xd9, &(0x7f0000000900)=""/217, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) 19:28:37 executing program 1: pipe(&(0x7f0000002440)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 19:28:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4098, 0x1002) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002140)="22160b368931408f2a5f13f2a331373f2f46f376d040f50de9bcb2cd1ba3d5a0", 0x20}], 0x1}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f000000aa80)={'#! ', './file0', [{0x20, 'skcipher\x00'}, {}, {0x20, '\xc1!%'}, {0x20, '\\+}$('}, {0x20, '[$.'}, {0x20, '!!^+'}], 0xa, "ef95718895002f1f5d0b59ea10c43c39562de1f6fea16b4fd350776a23ca00a101fbb3fb3924641d111992c80599eca9e872f951e4b66c76cbfcda2da8283a4bc893539558d0c0aeed92e0a2071f5dde3ac5f16dff18b1becd04113f78d1d6a9c97bbf90f37ce73dbb183d6a2c279d23d00645e87ff2d2865b83ac63df7a9ae2bfb032f703b18bb78d138a0f3d5e0c12b097f79c73999b27c3aaad82ede255cdb7243f9f452ac28ba50e53d408f615e5ecc198cf0c59b7aa187c22f3bcaf3aebb013623852fc8d083e7673ea74767e4a9ad3ee659a14eb46f53dd76a263239f93aa3a320305ce9b4"}, 0x111) 19:28:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", 0x0, 0x0, {0x0, 0x7ff}, {}, 0x0, [0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000140)={0x0, 0x1, 0x2}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 19:28:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xed) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 19:28:37 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) 19:28:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00'}) [ 1653.574196][ T27] audit: type=1804 audit(1687375717.541:437): pid=32249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1643/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:28:37 executing program 5: pipe(&(0x7f0000002440)) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) 19:28:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4098, 0x1002) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002140)="22160b368931408f2a5f13f2a331373f", 0x10}], 0x1}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f000000aa80)={'#! ', './file0', [{0x20, 'skcipher\x00'}], 0xa, "ef95718895002f1f5d0b59ea10c43c39562de1f6fea16b4fd350776a23ca00a101fbb3fb3924641d111992c80599eca9e872f951e4b66c76cbfcda2da8283a4bc893539558d0c0aeed92e0a2071f5dde3ac5f16dff18b1becd04113f78d1d6a9c97bbf90f37ce73dbb183d6a"}, 0x81) [ 1653.663492][ T27] audit: type=1804 audit(1687375717.591:438): pid=32249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1643/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:28:37 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:28:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4098, 0x1002) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002140)="22160b368931408f2a5f13f2a331373f", 0x10}], 0x1}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f000000aa80)={'#! ', './file0', [{0x20, 'skcipher\x00'}], 0xa, "ef95718895002f1f5d0b59ea10c43c39562de1f6fea16b4fd350776a23ca00a101fbb3fb3924641d111992c80599eca9e872f951e4b66c76cbfcda2da8283a4bc893539558d0c0aeed92e0a2071f5dde3ac5f16dff18b1becd04113f78d1d6a9c97bbf90f37ce73dbb183d6a"}, 0x81) 19:28:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 19:28:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r1, &(0x7f0000000f40)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)) 19:28:38 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000880)=@framed, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4098, 0x1002) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0xfefa) 19:28:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xed) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) connect$netlink(r0, &(0x7f0000000f40)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) 19:28:38 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e40), 0xffffffffffffffff) 19:28:38 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4008040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19:28:38 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100)) 19:28:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001100)=""/4098, 0x1002) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002140)="22160b368931408f2a5f13f2a331373f2f46f376d040f50de9bcb2cd1ba3d5a0", 0x20}], 0x1}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f000000aa80)={'#! ', './file0', [{0x20, 'skcipher\x00'}, {0x20, '\xc1!%'}], 0xa, "ef95718895002f1f5d0b59ea10c43c39562de1f6fea16b4fd350776a23ca00a101fbb3fb3924641d111992c80599eca9e872f951e4b66c76cbfcda2da8283a4bc893539558d0c0aeed92e0a2071f5dde3ac5f16dff18b1becd04113f78d1d6a9c97bbf90f37ce73dbb183d6a2c279d23d00645e87ff2d2865b83ac63df7a9ae2bfb032f703b18bb78d138a0f3d5e0c12b097f79c73999b27c3aaad82ede255cdb7243f9f452ac28ba50e53d408f615e5ecc198cf0c59b7aa187c22f3bcaf3aebb013623852fc8d083e7673ea74767e4a9ad3ee659a14eb46f53dd76a263239f93aa3a320305ce9b4"}, 0x101) 19:28:38 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:38 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@kfunc]}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:38 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000002440)) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000002a40)) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002b40)={0x14}, 0x14}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002e80)={'vcan0\x00'}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:28:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) [ 1654.683831][ T27] audit: type=1804 audit(1687375718.641:439): pid=32284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1644/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:28:38 executing program 0: socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 19:28:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001100)) [ 1654.794200][ T27] audit: type=1804 audit(1687375718.641:440): pid=32284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1644/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:28:39 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xed) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:39 executing program 5: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 19:28:39 executing program 1: pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r0) 19:28:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {r2, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x1473bf3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) socket$inet(0x2, 0x0, 0x0) socket(0x0, 0x0, 0x0) 19:28:39 executing program 4: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r1}, 0xc) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f00000000c0)) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x894c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) 19:28:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000f40), 0xc) 19:28:39 executing program 0: pipe(&(0x7f0000002a40)) 19:28:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', 0x0}) 19:28:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 19:28:39 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002e80)={'vcan0\x00'}) 19:28:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) [ 1655.497262][ T27] audit: type=1804 audit(1687375719.461:441): pid=32324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1645/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 19:28:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40) [ 1655.634098][ T27] audit: type=1804 audit(1687375719.461:442): pid=32324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1645/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 19:28:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 19:28:39 executing program 4: mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) 19:28:39 executing program 1: socketpair(0x2, 0xa, 0x7, &(0x7f0000000000)) 19:28:40 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x450502, 0x0) 19:28:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}]}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002040)='cpuset.effective_cpus\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000021c0), 0x200001, 0x0) 19:28:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 19:28:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) bpf$ITER_CREATE(0x21, 0x0, 0x0) 19:28:40 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x141402, 0x0) 19:28:40 executing program 4: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="d0eb6def5479c4e25ebd0c7881fc9b8cce674a51ee58a2a3e3e697b8b32cb22bf4180782a767ac1defb49ac56eb2c23eb6427b242930c88bfb48405fd7e244b2b033a2699ac6c2ddc7d71f63060a24fe2b652db77038c8151581408fd38b18fb5eb46a71b14a2e03310754962e83f165d801a3bc04af9ca543849d6ba0d1e90cb4975df3b0784847be908d2c917aaea05a08ada74c6c899bcee27ba7a57f963760a8cd60daaa8e483d1f1f76407def22267b7e02c29e", 0xb6}], 0x1}, 0x24004004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000280)="d2f54cd938396564b76e9b4f7b76c7a7d4aa", &(0x7f00000002c0), 0x5, 0x0, 0x63, 0x3, &(0x7f0000000300)="577719bfbdbae73b638ba016d603d7753c3d4397e398109aac9e0f410d2bc52d423605b1908b12f9fd314e07836536f99fb1c72feb78af9fbefb6370e181dec377288434544192b0d34a26b9cd2e2053cca4c38b6ebd193ba0bdbf84087618b8b54450", &(0x7f0000000380)="7ecf48", 0x0, 0x3}, 0x48) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0x88}, @map_idx={0x18, 0xac5d58b2ed958845, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x4, 0x0, 0x4, 0x5, 0x1, 0xffffffffffffffff, 0x10}]}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x2, 0x100}, 0x10, 0xffffffffffffffff, r3}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000640)={0x0, r3}, 0x10) close(r1) r4 = openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000006c0)=0xdc45) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000700)='./file0\x00', r5}, 0x10) ioctl$TUNSETLINK(r4, 0x400454cd, 0x300) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000840)) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000880)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r0, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000900)=@raw=[@generic={0x2, 0xe, 0x3, 0x3f}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1849}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @generic={0x7, 0xa, 0x7, 0x2, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000980)='GPL\x00', 0x8, 0x1000, &(0x7f00000009c0)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x5, 0x7, 0x0, 0x380}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001a40)=[r3, r4, r4, r3, r4, r4, r3, r4, r3]}, 0x80) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000001b00)=r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={r8, 0x2b, 0x0, 0x1, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001c00)='xprtrdma_mrs_zap\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001cc0)={0x0, r9, 0x0, 0x3, &(0x7f0000001c80)='{#\x00'}, 0x30) 19:28:40 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) close(r0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000880)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) 19:28:40 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) 19:28:40 executing program 5: socketpair(0xa, 0x5, 0xfffffffd, &(0x7f0000000040)) 19:28:40 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x401, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) 19:28:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x400}) [ 1656.419652][ T27] audit: type=1804 audit(1687375720.381:443): pid=32361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1646/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 19:28:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12) [ 1656.550891][ T27] audit: type=1804 audit(1687375720.421:444): pid=32361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1646/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 19:28:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}]}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'virt_wifi0\x00', 0x200}) 19:28:41 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) 19:28:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 19:28:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000060) 19:28:41 executing program 0: syz_clone(0x1208000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:41 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x29, 0x0, 0x0, &(0x7f0000000040)) 19:28:41 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0x88}, @map_idx={0x18, 0xac5d58b2ed958845, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x4, 0x0, 0x4, 0x5, 0x1, 0xffffffffffffffff, 0x10}]}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x2, 0x100}, 0x10, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000640), 0x10) close(r1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000840)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r0, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000900)=@raw=[@generic={0x2, 0xe, 0x3, 0x3f}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1849}, @generic, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000980)='GPL\x00', 0x8, 0x1000, &(0x7f00000009c0)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x5, 0x7, 0x0, 0x380}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000001b00)=r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 19:28:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x1800, 0x0) 19:28:41 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x200000, 0x0) 19:28:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) 19:28:41 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) mkdir(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) [ 1657.391870][ T27] audit: type=1804 audit(1687375721.361:445): pid=32391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1647/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1657.436760][ T27] audit: type=1804 audit(1687375721.371:446): pid=32391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1647/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}]}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:41 executing program 5: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 19:28:41 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84400, 0x0) 19:28:41 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x4000, 0x0) 19:28:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 19:28:41 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 19:28:41 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) 19:28:41 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_clone(0xa50c1600, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) 19:28:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) close(r0) 19:28:41 executing program 5: syz_clone(0xa50c1600, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)) [ 1658.151013][ T27] audit: type=1804 audit(1687375722.111:447): pid=32416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1648/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1658.244052][ T27] audit: type=1804 audit(1687375722.131:448): pid=32416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1648/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:42 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db59792"}, 0x81) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:42 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 19:28:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x20) 19:28:42 executing program 2: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x1ff) 19:28:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 19:28:42 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 19:28:42 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={0x0}, 0x10) socketpair(0xa, 0x4, 0x0, &(0x7f00000004c0)) 19:28:42 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x240, 0x0) 19:28:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x40049409, 0x0) 19:28:42 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x597502, 0x0) 19:28:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) 19:28:43 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={0xffffffffffffffff, 0x2b, 0x0, 0x0, &(0x7f0000001b80)=[0x0, 0x0, 0x0], 0x3}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001cc0)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001c80)='{#\x00'}, 0x30) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001d00)={'bridge0\x00', @multicast}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001d40)=0x2) 19:28:43 executing program 0: recvmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 19:28:43 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) 19:28:43 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121040, 0x0) 19:28:43 executing program 1: syz_clone(0xc0020000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0f587c9153b14fc9f87fe91d8db7b49204a031618cb8561867d590aa4e3453dfef21384b2d965c") syz_clone(0x2000000, &(0x7f0000000500)='M', 0x1, &(0x7f0000000540), 0x0, &(0x7f00000005c0)="a576e7f590600881fa7c4a162e764e9a0b375e7d9f591922940d39e779c0d6fb3c20615f") openat$tun(0xffffffffffffff9c, 0x0, 0x39d941, 0x0) 19:28:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db59792"}, 0x81) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:43 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) 19:28:43 executing program 4: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="d0eb6def5479c4e25ebd0c7881fc9b8cce674a51ee58a2a3e3e697b8b32cb22bf4180782a767ac1defb49ac56eb2c23eb6427b242930c88bfb48405fd7e244b2b033a2699ac6c2ddc7d71f63060a24fe2b652db77038c8151581408fd38b18fb5eb46a71b14a2e03310754962e83f165d801a3bc04af9ca543849d6ba0d1e90cb4975df3b0784847be908d2c917aaea05a08ada74c6c899bcee27ba7a57f963760a8cd60daaa8e483d1f1f76407def22267b7e02c29e", 0xb6}], 0x1}, 0x24004004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x63, 0x3, &(0x7f0000000300)="577719bfbdbae73b638ba016d603d7753c3d4397e398109aac9e0f410d2bc52d423605b1908b12f9fd314e07836536f99fb1c72feb78af9fbefb6370e181dec377288434544192b0d34a26b9cd2e2053cca4c38b6ebd193ba0bdbf84087618b8b54450", &(0x7f0000000380)="7ecf48", 0x0, 0x3}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x2, 0x100}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000640)={0x0, r1}, 0x10) close(0xffffffffffffffff) r2 = openat$cgroup_ro(r1, &(0x7f0000000680)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000006c0)=0xdc45) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000840)) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000880)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={r5, 0x2b, 0x0, 0x1, &(0x7f0000001b80)=[0x0], 0x1}, 0x20) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001c00)='xprtrdma_mrs_zap\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001cc0)={0x0, r6, 0x0, 0x0, 0x0}, 0x30) 19:28:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2, 0x0) 19:28:43 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) 19:28:43 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 19:28:43 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x92) 19:28:43 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x22441, 0x0) [ 1659.836547][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1659.836569][ T27] audit: type=1804 audit(1687375723.801:451): pid=32474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1650/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 19:28:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_all\x00', 0x2, 0x0) close(r1) 19:28:43 executing program 2: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) [ 1659.944734][ T27] audit: type=1804 audit(1687375723.801:452): pid=32474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1650/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 19:28:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff0df}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@noop, @cipso={0x86, 0x11, 0x0, [{0x0, 0x2}, {0x0, 0x3, "c1"}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0x1d, 0x0, [{0x0, 0x9, "24ac5c7f6d61ec"}, {0x0, 0x5, "3ca809"}, {0x0, 0x9, "b4661be0d78d5f"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x108}, 0x11) 19:28:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 19:28:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db59792"}, 0x81) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:44 executing program 4: syz_clone(0x0, 0x0, 0x38, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) syz_clone(0x8800000, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0) 19:28:44 executing program 5: socketpair(0x11, 0xa, 0x20000800, &(0x7f0000000ec0)) 19:28:44 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 19:28:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 19:28:44 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x5d340, 0x0) 19:28:44 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x101001, 0x0) 19:28:44 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x28}, 0x0) [ 1660.776024][ T27] audit: type=1804 audit(1687375724.741:453): pid=32508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1651/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x1}) 19:28:44 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 1660.896929][ T27] audit: type=1804 audit(1687375724.771:454): pid=32508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1651/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:44 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x5, 0x0, 0x5b, 0x0, &(0x7f0000000300)="577719bfbdbae73b638ba016d603d7753c3d4397e398109aac9e0f410d2bc52d423605b1908b12f9fd314e07836536f99fb1c72feb78af9fbefb6370e181dec377288434544192b0d34a26b9cd2e2053cca4c38b6ebd193ba0bdbf", 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0x88}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @alu={0x0, 0x0, 0x0, 0x5, 0x1}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000640), 0x10) close(r1) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)={&(0x7f0000000700)='./file0\x00'}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000840)) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000880)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000900)=@raw=[@btf_id, @call={0x85, 0x0, 0x0, 0x2f}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1849}, @map_fd, @cb_func], 0x0, 0x0, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 19:28:45 executing program 1: mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 19:28:45 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7"}, 0xba) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:45 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 19:28:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 19:28:45 executing program 5: recvmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 19:28:45 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004cc0)='./cgroup/syz0\x00', 0x200002, 0x0) 19:28:45 executing program 1: socketpair(0x10, 0x2, 0x0, &(0x7f00000000c0)) 19:28:45 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121040, 0x0) 19:28:45 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:28:45 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 19:28:45 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40000023) 19:28:45 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 19:28:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) [ 1661.688024][ T27] audit: type=1804 audit(1687375725.651:455): pid=32540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1652/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 1661.833900][ T27] audit: type=1804 audit(1687375725.681:456): pid=32540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1652/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 19:28:46 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7"}, 0xba) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x5460, 0x0) 19:28:46 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 19:28:46 executing program 0: syz_clone(0x88802080, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="87620000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="23003300d080000008021100000008021100000150505050505000000000000015"], 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2], 0x68}}, 0x0) 19:28:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x4, &(0x7f0000000a40)=@framed={{}, [@func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 19:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x486], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:28:46 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r0) [ 1662.572163][T32567] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1662.645601][ T27] audit: type=1804 audit(1687375726.611:457): pid=32565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1653/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:28:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="87620000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="23003300d080000008021100000008021100000150505050505000000000000015"], 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2], 0x68}}, 0x0) [ 1662.734147][ T27] audit: type=1804 audit(1687375726.611:458): pid=32565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1653/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:28:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) 19:28:46 executing program 5: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001380), 0x4000, 0x0) 19:28:46 executing program 4: openat$iommufd(0xffffffffffffff9c, &(0x7f0000002b80), 0x101803, 0x0) [ 1663.155697][T32582] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 19:28:47 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x5}) 19:28:47 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x0) 19:28:47 executing program 1: openat$drirender128(0xffffffffffffff9c, 0x0, 0x8382, 0x0) 19:28:47 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7"}, 0xba) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:47 executing program 2: syz_clone(0x280c5000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000061c0)) 19:28:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@usrquota}]}, 0xfe, 0x44a, &(0x7f0000000900)="$eJzs3MtvG8UfAPDv2nn0+Ut+pTxaWggURMUjadIHPXABgcQBJCQ4FHEKSVqFug1qgkSriAYO4YgqcUcckfgLOMEFASckrnBHlSqUSwsno7V3Uzexkzhx6pb9fKRtZ7xjzXx3d+zZGW8CKKyh9J8kYk9E/B4RA/XsnQWG6v/dWpqf+HtpfiKJavXtv5JauZtL8xN50fx9u+uZajXL9zepd/G9iPFKZepSlh+Zu/DhyOzlKy9MXxg/N3Vu6uLY6dMnjh/uOzV2siNxpnHdPPjJzKEDr7977c2JM9fe//nbtL17sv2NcXTKUP3oNvV0pyvrsr0N6aSniw2hLeWISE9Xb63/D0Q5di7vG4jXPutq44BtVa1Wq82+nzMLVeA/LIlutwDojvyLPr3/zbe7NPS4J9x4uX4DlMZ9K9vqe3qilJXpXXF/20lDEXFm4Z+v0i22aR4CAKDR9+n45/lm479SPNRQ7n/ZGspgRPw/IvZFxAMRsT8iHoyolX04Ih5ps/6VKySrxz+l65sKbIPS8d9L2drWneO/fPQXg+Ust7cWf29ydroydSw7Jkejtz/Nj65Rxw+v/vZFq32N4790S+vPx4JZO673rJigmxyfG99KzI1ufBpxsKdZ/EnkyzhJRByIiIObrGP62W8Otdq3fvxr6MA6U/XriGfq538hVsSfS1quT46+eGrs5MiOqEwdG8mvitV++XXxrVb1byn+DkjP/66m1/9y/IPJjojZy1fO19ZrZ9uvY/GPz1ve02z2+u9L3qml+7LXPh6fm7s0GtGXvLH69bHb783zefk0/qNHmvf/fXH7SDwaEelFfDgiHouIx7O2PxERT0bEkTXi/+mVpz5oP/41ZuU7KI1/cr3zH43nv/1E+fyP37Uffy49/ydqqaPZKxv5/NtoA7dy7AAAAOB+Uar9Bj4pDS+nS6Xh4fpv+PfHrlJlZnbuubMzH12crP9WfjB6S/lM10DDfOhoNjec58dW5I9n88ZflnfW8sMTM5XJbgcPBbe7Rf9P/VnuduuAbed5LSgu/R+KS/+H4tL/obj0fyiuZv3/ahfaAdx9vv+huPR/KC79H4pL/4dCavlsfGlLj/xLbDrRH/dEM9ZNRKndd13tepvvy0TPhv+YxSYT/U13dfuTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//86vuPK") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x1cb042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x47fffff, 0x11, r4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="23212000080000732f66696c653020202f6465762f6c6f6f700a72cb58d9f8ffff"], 0x26) ioctl$EXT4_IOC_SETFSUUID(r0, 0x6609, 0x0) 19:28:47 executing program 5: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000006280)) 19:28:47 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x82241, 0x0) 19:28:47 executing program 2: getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), 0x0) 19:28:47 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f00000016c0), 0x410002, 0x0) [ 1663.692130][T32602] loop0: detected capacity change from 0 to 512 [ 1663.737538][T32602] EXT4-fs: Ignoring removed bh option [ 1663.774424][ T27] audit: type=1804 audit(1687375727.741:459): pid=32597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1654/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1663.805040][T32602] /dev/loop0: Can't open blockdev 19:28:47 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)) 19:28:47 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d80), 0x2, 0x0) 19:28:47 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) connect(r0, &(0x7f0000001740)=@un=@file={0x1, './file0\x00'}, 0x80) [ 1663.899844][ T27] audit: type=1804 audit(1687375727.741:460): pid=32597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1654/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:28:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0fc79d0a0000000f06f0804d54fa0f01ca0f174d0f66b846008ee0c4e1c959e666baf80cb8bc63a187ef66bafc0cb8fa000000ef0f080f01c9", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:28:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e"}, 0xd6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000002c80)=ANY=[@ANYBLOB="f8140000010601012cbd7000ffdbdf25030000039293"], 0x14f8}}, 0x0) 19:28:48 executing program 5: openat$ptp0(0xffffffffffffff9c, &(0x7f00000010c0), 0x6000, 0x0) 19:28:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000006180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000061c0)=0x14) 19:28:48 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a40)=[{0x0}], 0x1}, 0x0) 19:28:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@usrquota}]}, 0xfe, 0x44a, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x1cb042, 0x0) ftruncate(r1, 0x2007ffb) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x47fffff, 0x11, r4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="23212000080000732f66696c653020202f6465762f6c6f6f700a72cb58d9f8ffff"], 0x26) ioctl$EXT4_IOC_SETFSUUID(r0, 0x6609, 0x0) [ 1664.814362][T32627] netlink: 5348 bytes leftover after parsing attributes in process `syz-executor.2'. 19:28:48 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f0000000f40)=@framed={{}, [@jmp={0x5, 0x0, 0xa}]}, &(0x7f0000001000)='GPL\x00', 0x3, 0xc0, &(0x7f0000001040)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:28:48 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) 19:28:48 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) [ 1664.932388][T32629] loop0: detected capacity change from 0 to 512 [ 1664.980928][T32629] EXT4-fs: Ignoring removed bh option [ 1665.018763][T32629] /dev/loop0: Can't open blockdev 19:28:49 executing program 2: syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 19:28:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x407fff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x5}]}}) [ 1665.076227][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1665.076248][ T27] audit: type=1804 audit(1687375729.041:463): pid=32631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1655/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 19:28:49 executing program 1: getresuid(&(0x7f0000000040), &(0x7f0000002c00), &(0x7f0000000000)) [ 1665.230061][ T27] audit: type=1804 audit(1687375729.051:464): pid=32631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1655/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 1665.372894][ T27] audit: type=1800 audit(1687375729.161:465): pid=32629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 1665.483382][ T27] audit: type=1804 audit(1687375729.191:466): pid=32629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3549108630/syzkaller.LyZfQK/1989/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1665.626473][ T27] audit: type=1804 audit(1687375729.321:467): pid=32647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3549108630/syzkaller.LyZfQK/1989/bus" dev="sda1" ino=1954 res=1 errno=0 [ 1665.767895][ T27] audit: type=1804 audit(1687375729.321:468): pid=32647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3549108630/syzkaller.LyZfQK/1989/bus" dev="sda1" ino=1954 res=1 errno=0 19:28:49 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x440100, 0x0) 19:28:49 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) 19:28:49 executing program 1: capget(&(0x7f00000028c0)={0x20080522, 0xffffffffffffffff}, 0x0) 19:28:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e"}, 0xd6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:49 executing program 5: syz_clone(0x280c5000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="06") [ 1665.927461][ T27] audit: type=1804 audit(1687375729.321:469): pid=32647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3549108630/syzkaller.LyZfQK/1989/bus" dev="sda1" ino=1954 res=1 errno=0 19:28:50 executing program 0: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000bff000/0x400000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000dae000/0x1000)=nil, &(0x7f0000cdc000/0x1000)=nil, &(0x7f0000f7e000/0x1000)=nil, &(0x7f0000c1d000/0x2000)=nil, &(0x7f0000c90000/0x4000)=nil, &(0x7f0000cd9000/0x1000)=nil, &(0x7f0000f22000/0x14000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000d5c000/0xd000)=nil, 0x0}, 0x68) 19:28:50 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x8382, 0x0) 19:28:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 1666.171558][ T27] audit: type=1804 audit(1687375730.141:470): pid=32659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1656/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 19:28:50 executing program 5: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000004f80), 0x161002, 0x0) [ 1666.300150][ T27] audit: type=1804 audit(1687375730.171:471): pid=32659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1656/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 1666.833735][T32649] loop2: detected capacity change from 0 to 32768 [ 1666.842436][T32649] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (32649) [ 1666.874492][T32649] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1666.889109][T32649] BTRFS info (device loop2): force clearing of disk cache [ 1666.899518][T32649] BTRFS info (device loop2): setting nodatasum [ 1666.905750][T32649] BTRFS info (device loop2): allowing degraded mounts [ 1666.937762][T32649] BTRFS info (device loop2): enabling disk space caching [ 1666.945250][T32649] BTRFS info (device loop2): disk space caching is enabled [ 1667.008306][T32649] BTRFS info (device loop2): enabling ssd optimizations [ 1667.020710][T32649] BTRFS info (device loop2): auto enabling async discard [ 1667.055216][T32649] BTRFS info (device loop2): rebuilding free space tree [ 1667.079916][T32649] BTRFS info (device loop2): disabling free space tree [ 1667.086989][T32649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1667.106543][T32649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1667.123796][T32649] BTRFS info (device loop2): checking UUID tree 19:28:51 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, 0x0, 0x0) 19:28:51 executing program 1: openat$iommufd(0xffffffffffffff9c, 0x0, 0x1d5040, 0x0) 19:28:51 executing program 0: ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0xc4043, 0x0) 19:28:51 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x44000, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:28:51 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e"}, 0xd6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:51 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002ec0), 0x200102, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) 19:28:51 executing program 1: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000004f40), 0xfff, 0x2) 19:28:51 executing program 4: openat$vimc1(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) 19:28:51 executing program 0: r0 = getpid() capget(&(0x7f0000002840)={0x20071026, r0}, &(0x7f0000002880)) 19:28:51 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) [ 1667.503204][ T27] audit: type=1804 audit(1687375731.471:472): pid=32698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1657/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 19:28:51 executing program 4: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000680), 0x10400, 0x0) 19:28:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000006c0)={0x0, 0x0, @ioapic}) [ 1667.587234][T32707] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 19:28:51 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@qipcrtr, 0x80, 0x0}, 0x0) 19:28:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="0fc79d0a0000000f06f0804d54fa0f01ca0f174d0f66b846008ee0c4e1c959e666baf80cb8bc63a187ef66bafc0cb8fa000000ef0f080f01c9", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x407fff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x6}]}}) 19:28:51 executing program 0: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000680), 0x10400, 0x0) 19:28:51 executing program 4: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 19:28:52 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361"}, 0xe4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:52 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 19:28:52 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) 19:28:52 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 19:28:52 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) 19:28:52 executing program 1: socket$tipc(0x1e, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:52 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000280), 0x10) 19:28:52 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), 0x14) 19:28:52 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000000)=0x4) 19:28:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 19:28:52 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/mdstat\x00', 0x0, 0x0) 19:28:52 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x7}]}}, &(0x7f00000002c0)=""/194, 0x26, 0xc2, 0x1}, 0x20) 19:28:53 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361"}, 0xe4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:53 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) 19:28:53 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x190, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xf9, 0x6, "f64e58532882d007432d032bd9ca66dd77be9c7ae0ae9e0672d5041d1b144bf80c5959c5f608ca1a62f9753835aafae99161233ce1b3cc1e6901ef3ce39592ee04e1befaaa37ccede451c1ada537c2156507f161a7872a7c5ec82b35f134858e6571b498e61f5f4bd4b25d13f6ec0fd204f18e385707817189c0414e9efc71576c36f9383c119cc4a1af64018bffe457857b7a51f580b4914d439890ec7021d6b3d08949de535b8efb8b1ebb5892afbfc535bebe104871c6f657fc5305fe9865b17923d42f1312a76951044773316911325fddfcfd75b5b9dbbe0e4a14d5ea257db38da89cb5d14fd167443a40087683b4e0075243"}, @NFTA_TABLE_USERDATA={0x6, 0x6, ']6'}, @NFTA_TABLE_USERDATA={0x56, 0x6, "c3e2ce687cefb5d2f6ea224c40929bea7aa5e39c27a9da67187b30574d2a6d1fa960756f041dcf764333b80be84c2db505f5daf99e2dab6f9fa9fb5444617311d4066986265fa19ec889d72b4e426f35b981"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @local, @remote}, &(0x7f00000006c0)=0xc) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x3c, r4, 0xc10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2a5b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}}, 0x4000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 19:28:53 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e800000064040e"], 0xe8}}, 0x0) 19:28:53 executing program 1: socketpair(0x1, 0x0, 0x3, &(0x7f0000000f40)) 19:28:53 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000002940)={0x0, 0x0, 0x4}, 0x10) 19:28:53 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/194, 0x1001, 0xc2, 0x1}, 0x20) 19:28:53 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000f40)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) 19:28:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 19:28:53 executing program 1: syz_clone(0x81800000, 0x0, 0x0, 0x0, 0x0, 0x0) 19:28:53 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3e03da9fa971d093, 0x0) 19:28:53 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f00000002c0)=""/194, 0x1a, 0xc2, 0x1}, 0x20) [ 1669.409343][T26830] usb 5-1: new high-speed USB device number 93 using dummy_hcd 19:28:53 executing program 2: socketpair(0x11, 0x3, 0x0, &(0x7f0000000f40)) 19:28:53 executing program 1: socketpair(0xf, 0x3, 0x0, &(0x7f0000000f40)) [ 1669.939477][T26830] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1669.948872][T26830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.957201][T26830] usb 5-1: Product: syz [ 1669.961816][T26830] usb 5-1: Manufacturer: syz [ 1669.971550][T26830] usb 5-1: SerialNumber: syz [ 1670.023963][T26830] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1670.599404][T26831] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1670.804751][T26830] usb 5-1: USB disconnect, device number 93 19:28:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 19:28:55 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361"}, 0xe4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:55 executing program 0: socketpair(0x1d, 0x800, 0x3, &(0x7f0000000580)) 19:28:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0xb, 0x101}, 0x14}}, 0x0) 19:28:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x6}]}]}}, &(0x7f00000002c0)=""/194, 0x32, 0xc2, 0x1}, 0x20) 19:28:55 executing program 2: socketpair(0x0, 0xd, 0x0, &(0x7f0000000f40)) 19:28:55 executing program 5: syz_io_uring_setup(0x371b, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:28:55 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x0) accept$unix(r0, 0x0, &(0x7f0000000180)) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x0, 0x0) 19:28:55 executing program 1: socket$inet(0x2, 0x669a84d7b4ec4734, 0x0) 19:28:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000020701"], 0x2c}}, 0x0) [ 1671.505958][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1671.505979][ T27] audit: type=1804 audit(1687375735.471:478): pid=324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1660/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 19:28:55 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000000)=""/217, 0x2e, 0xd9, 0x1}, 0x20) 19:28:55 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000180)=0x4) 19:28:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002e84cd"], 0x14}}, 0x0) [ 1671.633429][ T339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1671.639672][ T326] can: request_module (can-proto-3) failed. [ 1671.669559][T26831] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1671.676634][T26831] ath9k_htc: Failed to initialize the device [ 1671.706240][T26830] usb 5-1: ath9k_htc: USB layer deinitialized [ 1671.722683][ T27] audit: type=1804 audit(1687375735.481:479): pid=324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1660/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 19:28:56 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05"}, 0xeb) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000000)=""/217, 0x26, 0xd9, 0x1}, 0x20) 19:28:56 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 19:28:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) 19:28:56 executing program 5: socketpair(0xa, 0x2, 0x0, &(0x7f0000000f40)) 19:28:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2, 0x7}]}]}}, &(0x7f00000002c0)=""/194, 0x32, 0xc2, 0x1}, 0x20) 19:28:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x5}, 0x14}}, 0x0) 19:28:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 19:28:56 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 19:28:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000040)) 19:28:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@typedef={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000040)=""/194, 0x2e, 0xc2, 0x1}, 0x20) 19:28:56 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) [ 1672.488438][ T27] audit: type=1804 audit(1687375736.451:480): pid=355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1661/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 1672.594803][ T27] audit: type=1804 audit(1687375736.451:481): pid=355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1661/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 19:28:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05"}, 0xeb) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:57 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/59, 0x3b}}, 0x120) 19:28:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000002c0)=""/194, 0x26, 0xc2, 0x1}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 19:28:57 executing program 4: memfd_create(&(0x7f0000000140)='\xaa\xaa\xaa\xaa\xaa', 0x6) 19:28:57 executing program 0: syz_clone(0x0, &(0x7f0000000fc0)="9b", 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4e4, &(0x7f0000000380), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) 19:28:57 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000280)=@id, 0x10) 19:28:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x6}, 0x48) [ 1673.201811][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.235316][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 19:28:57 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 19:28:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 1673.256677][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.284599][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.320480][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.350969][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 19:28:57 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x10000000) 19:28:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000002c0)=""/194, 0x26, 0xc2, 0x1}, 0x20) 19:28:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x14}]}}, &(0x7f00000002c0)=""/194, 0x26, 0xc2, 0x1}, 0x20) [ 1673.380966][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.396075][ T27] audit: type=1804 audit(1687375737.361:482): pid=385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1662/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1673.412437][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.500632][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.538547][ T27] audit: type=1804 audit(1687375737.361:483): pid=385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1662/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1673.551898][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.660034][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.694835][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.707016][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.715477][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.730400][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.754773][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.778714][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.802806][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.814797][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.826219][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.839398][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.846931][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.855392][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.863374][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.873994][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.883892][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.895596][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.904501][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.912936][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.923000][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.931329][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.941011][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.948565][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.956592][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.966085][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.974021][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.985676][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.992218][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.993555][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1673.999548][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.006939][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.022403][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.034064][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.042080][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.051986][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.067695][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.076176][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.089140][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.096914][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 19:28:58 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05"}, 0xeb) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) [ 1674.114780][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.123500][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.138665][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.147779][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.165918][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.173503][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.191084][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.198556][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.211621][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.219094][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.235828][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.245626][ T5127] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1674.260675][ T27] audit: type=1804 audit(1687375738.231:484): pid=401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1663/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1674.264000][ T5127] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 19:28:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000020701020000002c8f0000000300000909"], 0x2c}}, 0x0) 19:28:58 executing program 2: syz_io_uring_setup(0x44e8, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:28:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 19:28:58 executing program 1: socketpair(0x1, 0x80002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 19:28:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/194, 0x18, 0xc2, 0x1}, 0x20) [ 1674.307476][ T27] audit: type=1804 audit(1687375738.261:485): pid=401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1663/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 19:28:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0xffffff57}}, 0x0) 19:28:58 executing program 1: pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x2}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 19:28:58 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00'}, 0x10) 19:28:58 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x5c, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/194, 0x32, 0xc2}, 0xffffffffffffffcb) [ 1674.487341][ T412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 19:28:58 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 19:28:58 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:28:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0xb, 0x1, 'batadv\x00'}]}, 0x20}}, 0x0) 19:28:59 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000ac0)={0x8, {"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", 0x1000}}, 0x1006) 19:28:59 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x96200, 0x0) 19:28:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000020701020000002c8f00000003000009094f"], 0x2c}}, 0x0) 19:28:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04"}, 0xef) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), 0x4) 19:28:59 executing program 0: socketpair(0x3, 0x0, 0x20000000, &(0x7f0000000000)) 19:28:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) bind$unix(r0, 0x0, 0x0) [ 1675.080727][ T433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:28:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0x2020) 19:28:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 19:28:59 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 19:28:59 executing program 0: syz_io_uring_setup(0x6b1e, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:28:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 19:28:59 executing program 4: socketpair(0x23, 0x0, 0x8000, &(0x7f0000000f40)) 19:28:59 executing program 5: socketpair(0x1, 0x80002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 19:28:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000005a40)={&(0x7f0000004240)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005a00)=[@cred={{0x1c}}], 0x20}, 0x0) [ 1675.419146][ T27] audit: type=1804 audit(1687375739.381:486): pid=444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1664/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1675.531334][ T27] audit: type=1804 audit(1687375739.411:487): pid=444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1664/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:28:59 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04"}, 0xef) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:28:59 executing program 5: pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x2}, &(0x7f0000000300)={0x6}, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x8001]}, 0x8}) 19:28:59 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 19:28:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:29:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000ffffff9c00001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:00 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x190, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xf9, 0x6, "f64e58532882d007432d032bd9ca66dd77be9c7ae0ae9e0672d5041d1b144bf80c5959c5f608ca1a62f9753835aafae99161233ce1b3cc1e6901ef3ce39592ee04e1befaaa37ccede451c1ada537c2156507f161a7872a7c5ec82b35f134858e6571b498e61f5f4bd4b25d13f6ec0fd204f18e385707817189c0414e9efc71576c36f9383c119cc4a1af64018bffe457857b7a51f580b4914d439890ec7021d6b3d08949de535b8efb8b1ebb5892afbfc535bebe104871c6f657fc5305fe9865b17923d42f1312a76951044773316911325fddfcfd75b5b9dbbe0e4a14d5ea257db38da89cb5d14fd167443a40087683b4e0075243"}, @NFTA_TABLE_USERDATA={0x6, 0x6, ']6'}, @NFTA_TABLE_USERDATA={0x56, 0x6, "c3e2ce687cefb5d2f6ea224c40929bea7aa5e39c27a9da67187b30574d2a6d1fa960756f041dcf764333b80be84c2db505f5daf99e2dab6f9fa9fb5444617311d4066986265fa19ec889d72b4e426f35b981"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @local, @remote}, &(0x7f00000006c0)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 19:29:00 executing program 5: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom1\x00', 0x0, 0x0) 19:29:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000040)=@raw=[@ldst], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000018c000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:00 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x20) 19:29:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) 19:29:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x40000022) [ 1676.469462][T15025] usb 5-1: new high-speed USB device number 94 using dummy_hcd 19:29:00 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04"}, 0xef) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x0, 0x3, 0x0, &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 19:29:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1880ffffff000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:00 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 19:29:00 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='cachefiles_ondemand_fd_write\x00', r0}, 0x10) [ 1677.059613][T15025] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1677.068742][T15025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.099491][T15025] usb 5-1: Product: syz [ 1677.107192][T15025] usb 5-1: Manufacturer: syz [ 1677.124836][T15025] usb 5-1: SerialNumber: syz [ 1677.180956][T15025] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1677.251545][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1677.251566][ T27] audit: type=1804 audit(1687375741.221:490): pid=491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1666/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1677.302175][ T27] audit: type=1804 audit(1687375741.251:491): pid=491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1666/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 1677.819452][T14889] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1678.025329][ T5127] usb 5-1: USB disconnect, device number 94 19:29:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3ffffff00000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001995"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:02 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) close(r0) 19:29:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xca1a, r0}, 0x80) 19:29:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8) 19:29:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fe"}, 0xf1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x0, 0xf4240, 0x0, &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:02 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000001995"], &(0x7f0000001c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 19:29:02 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) [ 1678.718049][ T27] audit: type=1804 audit(1687375742.681:492): pid=502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1667/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:29:02 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) socket(0x1d, 0x80000, 0x7fff) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 19:29:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='btrfs\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r4, 0x800) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) lseek(r4, 0x200, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1f600) 19:29:02 executing program 4: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 1678.802262][ T27] audit: type=1804 audit(1687375742.681:493): pid=502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1667/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:29:02 executing program 1: quotactl$Q_GETQUOTA(0x0, &(0x7f00000000c0)=@sg0, 0x0, 0x0) [ 1678.869517][T14889] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1678.876673][T14889] ath9k_htc: Failed to initialize the device [ 1678.912858][ T5127] usb 5-1: ath9k_htc: USB layer deinitialized 19:29:03 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="0f587c9153b14fc9f87fe91d8db7b49204a031618cb8561867d590aa4e3453dfef21384b2d965cc0bc") syz_clone(0x2000000, &(0x7f0000000500)='M', 0x1, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="a576e7f590600881fa7c4a162e764e9a0b375e7d9f591922940d39e779c0d6fb3c20615f012f6410e7") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x39d941, 0x0) 19:29:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) [ 1679.361250][ T27] audit: type=1804 audit(1687375743.331:494): pid=532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3549108630/syzkaller.LyZfQK/2016/bus" dev="sda1" ino=1969 res=1 errno=0 19:29:03 executing program 1: getresgid(0x0, &(0x7f0000000040), 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0xff, 0x0, {0x7, 0x25, 0x1, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x36, 0x6, {0x7, 0x25, 0x1, 0x82, 0x9, 0xfff}}}}}}}]}}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 19:29:03 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fe"}, 0xf1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) 19:29:03 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x4044, 0x4) 19:29:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:03 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000340)) [ 1679.849383][T15025] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1679.956745][ T27] audit: type=1804 audit(1687375743.921:495): pid=547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1668/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1680.099535][T15025] usb 2-1: Using ep0 maxpacket: 8 [ 1680.171709][ T27] audit: type=1804 audit(1687375743.931:496): pid=547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1668/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 1680.230141][T15025] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1680.239006][T15025] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1680.318683][T15025] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1680.539459][T15025] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1680.548675][T15025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.600245][T15025] usb 2-1: Product: syz [ 1680.604592][T15025] usb 2-1: Manufacturer: syz [ 1680.625260][T15025] usb 2-1: SerialNumber: syz [ 1680.979452][T15025] usb 2-1: 0:2 : does not exist [ 1681.058100][T15025] usb 2-1: USB disconnect, device number 31 19:29:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1c4}]}) 19:29:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 19:29:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:05 executing program 5: syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x4, "", "b263a0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x9, 0x0, "", "ed05"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5c, 0x36, 0x0, {0x7, 0x25, 0x1, 0x82, 0x0, 0xfff}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x20, 0x20, 0x6, 0x10, 0x3f}, 0x1a, &(0x7f0000000400)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x7, 0x7}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x47, 0x0, 0xfff7, 0x2}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x0, 0x0}, {0x0, 0x0}, {0xb2, &(0x7f00000006c0)=@string={0xb2, 0x3, "88d6a23338862d9e5d7a2762ecd2d7dc25dc66bd5d90f233485dee0a902ed6e96cce3e1dd60b4111f9e65d596e3aefad555a969921f4d8522385fd704df76ab2ce10b516672873d42dfbc2109edaeced7db814d5a7aa464ea92c72844b5473588b677bb88a4926d56c3be687f5926ac624a2b64a568fead08eeefaf781ac46ab1b528e8a54b63f88653c9a3c4b5ffcf2b13161ab35a04a12accfe09b0da61dfe0118252e9806e121f6a4c5dc92388820"}}, {0xab, &(0x7f00000007c0)=@string={0xab, 0x3, "5838c8ac99828b1d26069de5a98d2cd25471c0fca1d568cd812e29f79100169bd84d3197302024e04ef697cce09ac4b1499877d90f9092d6dde246c6df8e1a735ce74ebb43c1da814b515826a5001d8e3851568426ab380ab1ddfe9e99fe4f7bdd1e89608d8cece2de81fda23a17b67e88cacd172dd577762fd17dead626463318ce7390bca6c33ea5eda30580e46b57e00262f8cd9b0be394c9f9c498b0282556dfe09bfcfb2fdfb7"}}]}) 19:29:05 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fe"}, 0xf1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:05 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000000340)) 19:29:05 executing program 1: open$dir(&(0x7f0000000180)='./file0\x00', 0x48243, 0x0) 19:29:05 executing program 1: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) 19:29:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x55, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)={0x2}) dup(0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) [ 1681.584412][ T27] audit: type=1804 audit(1687375745.551:497): pid=563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1669/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 19:29:05 executing program 2: fsopen(&(0x7f00000000c0)='rootfs\x00', 0x0) 19:29:05 executing program 0: open$dir(0x0, 0x280001, 0x0) [ 1681.722167][ T27] audit: type=1804 audit(1687375745.601:498): pid=563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1669/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 19:29:05 executing program 0: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 19:29:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1681.930393][T26832] usb 6-1: new high-speed USB device number 13 using dummy_hcd 19:29:05 executing program 0: openat$dir(0xffffffffffffff9c, 0x0, 0x519200, 0x0) 19:29:06 executing program 1: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x38, 0x2, r1}) [ 1682.133352][ T597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1682.148639][ T596] iommufd_mock iommufd_mock0: Removing from iommu group 0 [ 1682.169382][T26832] usb 6-1: Using ep0 maxpacket: 8 [ 1682.389495][T26832] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1682.398391][T26832] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1682.418021][T26832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1682.979682][T26832] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1682.988773][T26832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.000613][T26832] usb 6-1: SerialNumber: 횈㎢蘸鸭穝戧틬뵦遝㏲嵈૮⺐칬ᴾ௖ᅁ奝㩮귯婕首勘蔣烽뉪჎ᚵ⡧푳שּׂჂ롽픔ꪧ乆ⲩ葲呋塳枋롻䦊픦㭬蟦鋵왪ꈤ䪶轖탪겁ꭆ创誎뙔蠿㱥㲚彋ㆱꭡꀵቊ쾬鯠꘍︝᠁⸥ژ⇡ꓶ㢒₈ [ 1683.349590][T26832] usb 6-1: 0:2 : does not exist [ 1683.367338][T26832] usb 6-1: USB disconnect, device number 13 19:29:07 executing program 5: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) 19:29:07 executing program 1: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r0) 19:29:07 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(0x0) 19:29:07 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000280)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 19:29:07 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:07 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x0) read$ptp(r0, 0x0, 0x0) 19:29:07 executing program 5: renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xb1128e84dbe93d80) 19:29:07 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x20) 19:29:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000012000301"], 0x30}}, 0x0) 19:29:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000000c0)="504e7c97", 0x4) [ 1683.991611][ T620] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:29:08 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8918, 0x0) 19:29:08 executing program 5: r0 = socket(0x2, 0x3, 0x9) recvfrom$llc(r0, 0x0, 0x0, 0x22003, 0x0, 0x0) [ 1684.032884][ T27] audit: type=1804 audit(1687375748.001:499): pid=605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1670/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 1684.048561][ T620] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 19:29:08 executing program 1: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 19:29:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x40000000, 0x0, 0x1}, {0x1, 0xfffff5c1, 0x1, 0x1}]}) 19:29:08 executing program 0: r0 = socket(0xa, 0x3, 0x3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) [ 1684.133929][ T27] audit: type=1804 audit(1687375748.031:500): pid=605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1670/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:29:08 executing program 5: r0 = socket(0xa, 0x3, 0x3) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:29:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:08 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:29:08 executing program 1: r0 = socket(0x2, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8}, 0x0) 19:29:08 executing program 2: r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000010c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x1, &(0x7f00000013c0)=@raw=[@generic], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 19:29:08 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:08 executing program 0: r0 = socket(0x2, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x700}, 0x0) 19:29:08 executing program 1: r0 = socket(0xa, 0x3, 0x3) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0xa, 0x0, 0x0, @private1}, 0x20) 19:29:08 executing program 2: request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) 19:29:08 executing program 1: r0 = socket(0x2, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000000040)={0x0}}, 0x0) 19:29:08 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}, 0x3010d) 19:29:08 executing program 1: r0 = socket(0xa, 0x3, 0x3) recvfrom$llc(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 1685.031694][ T27] audit: type=1804 audit(1687375749.001:501): pid=654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1671/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 1685.156685][ T27] audit: type=1804 audit(1687375749.031:502): pid=654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1671/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 19:29:09 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001b80)='net/nfsfs\x00') syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x1f8}, 0x0, 0x0) 19:29:09 executing program 2: r0 = socket(0x2, 0x3, 0x9) accept4$llc(r0, 0x0, 0x0, 0x0) 19:29:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:09 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x38) 19:29:09 executing program 1: r0 = socket(0x11, 0x3, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 19:29:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) 19:29:09 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, &(0x7f0000000000)={'vcan0\x00'}) 19:29:09 executing program 0: openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, &(0x7f0000000000)={'vcan0\x00'}) 19:29:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:09 executing program 0: r0 = socket(0xa, 0x3, 0x3) sendmsg$nfc_llcp(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8e2c63ddd38e895ba52dc3396a8218cf521595180150f15fdab30bfa8de3439ffcad5532ba4b4e572ea07af5a3513d9b380d070ae9f6a7921ee4d65de64c01"}, 0x58, 0x0}, 0x0) 19:29:09 executing program 2: r0 = socket(0x2, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0, 0xffff0000}}, 0x0) [ 1685.886711][ T27] audit: type=1804 audit(1687375749.851:503): pid=673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1672/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 1685.978276][ T27] audit: type=1804 audit(1687375749.901:504): pid=673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1672/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 19:29:10 executing program 5: r0 = socket(0xa, 0x3, 0x3) getsockname$llc(r0, 0x0, &(0x7f00000002c0)) 19:29:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="d9"], 0x24}}, 0x0) 19:29:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f00000002c0)=""/233, 0x26, 0xe9, 0x1}, 0x20) 19:29:10 executing program 2: r0 = socket(0xa, 0x3, 0x3) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x20) 19:29:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:10 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:10 executing program 1: r0 = syz_io_uring_setup(0x1b6d, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x17, 0xffffffffffffffff, 0x1) 19:29:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x0, 0xac}, 0x0) 19:29:10 executing program 2: r0 = socket(0xa, 0x3, 0x3) recvfrom$llc(r0, 0x0, 0x0, 0x10013, 0x0, 0x0) 19:29:10 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) 19:29:10 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 19:29:10 executing program 5: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, &(0x7f0000000000)={'vcan0\x00'}) [ 1686.870323][ T27] audit: type=1804 audit(1687375750.821:505): pid=708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1673/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:29:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001ac0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:10 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 19:29:10 executing program 0: r0 = io_uring_setup(0x5b54, &(0x7f0000000180)) r1 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) 19:29:11 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$llc(r0, 0x0, 0x0) [ 1686.967670][ T27] audit: type=1804 audit(1687375750.831:506): pid=708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1673/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 19:29:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r5, r1, 0x0, 0x18a038) 19:29:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200000002900000032000000ff010000000000080000000000000001", @ANYRES32, @ANYBLOB="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"], 0x144}, 0x4050) 19:29:11 executing program 2: r0 = socket(0xa, 0x3, 0x3) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0xa, 0x0, 0x0, @private1}, 0x20) 19:29:11 executing program 0: r0 = socket(0x2, 0x3, 0x9) bind$nfc_llcp(r0, 0x0, 0x0) 19:29:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:11 executing program 0: r0 = socket(0x2, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa}, 0xffffff69, &(0x7f0000000040)={0x0}}, 0x0) 19:29:11 executing program 1: r0 = socket(0x2, 0x3, 0x101) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x20) 19:29:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 19:29:11 executing program 0: r0 = io_uring_setup(0x5b54, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 1687.931867][ T27] audit: type=1804 audit(1687375751.901:507): pid=756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1674/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 19:29:12 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000880)=0xf7, 0x8) [ 1688.095925][ T27] audit: type=1804 audit(1687375751.901:508): pid=756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir855472179/syzkaller.U0CrX9/1674/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 19:29:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r5, r1, 0x0, 0x18a038) 19:29:12 executing program 0: r0 = socket(0x2, 0x3, 0x9) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 19:29:12 executing program 1: r0 = socket(0x18, 0x0, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) [ 1688.409073][ T778] ================================================================== [ 1688.417179][ T778] BUG: KASAN: stack-out-of-bounds in ipmr_ioctl+0xb4a/0xbd0 [ 1688.424631][ T778] Write of size 8 at addr ffffc9000c9a7ae8 by task syz-executor.0/778 [ 1688.432807][ T778] [ 1688.435142][ T778] CPU: 1 PID: 778 Comm: syz-executor.0 Not tainted 6.4.0-rc7-next-20230621-syzkaller #0 [ 1688.444882][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 1688.455059][ T778] Call Trace: [ 1688.458374][ T778] [ 1688.461334][ T778] dump_stack_lvl+0xd9/0x150 [ 1688.466021][ T778] print_address_description.constprop.0+0x2c/0x3c0 [ 1688.472657][ T778] kasan_report+0x11d/0x130 [ 1688.477219][ T778] ? ipmr_ioctl+0xb4a/0xbd0 [ 1688.481802][ T778] ipmr_ioctl+0xb4a/0xbd0 [ 1688.486178][ T778] ? ip_mroute_getsockopt+0x530/0x530 [ 1688.492075][ T778] raw_ioctl+0x4e/0x1e0 [ 1688.496282][ T778] sk_ioctl+0x151/0x440 [ 1688.500481][ T778] ? sock_ioctl_inout+0x150/0x150 [ 1688.505562][ T778] ? mark_held_locks+0x9f/0xe0 [ 1688.510363][ T778] ? kasan_quarantine_put+0xf9/0x220 [ 1688.515806][ T778] ? find_held_lock+0x2d/0x110 [ 1688.520609][ T778] inet_ioctl+0x18c/0x380 [ 1688.525270][ T778] ? ipip_gro_complete+0x140/0x140 [ 1688.530407][ T778] ? lock_downgrade+0x690/0x690 [ 1688.535336][ T778] ? tomoyo_path_number_perm+0x43b/0x570 [ 1688.541088][ T778] ? __kmem_cache_free+0xb8/0x2d0 [ 1688.546185][ T778] ? tomoyo_path_number_perm+0x166/0x570 [ 1688.551869][ T778] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1688.557745][ T778] sock_do_ioctl+0xcc/0x230 [ 1688.562459][ T778] ? get_user_ifreq+0x250/0x250 [ 1688.567379][ T778] ? vfs_fileattr_set+0xc40/0xc40 [ 1688.572607][ T778] sock_ioctl+0x1f8/0x680 [ 1688.577012][ T778] ? br_ioctl_call+0xb0/0xb0 [ 1688.581687][ T778] ? receive_fd+0x110/0x110 [ 1688.586260][ T778] ? __fget_files+0x261/0x470 [ 1688.591093][ T778] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1688.596097][ T778] ? br_ioctl_call+0xb0/0xb0 [ 1688.600758][ T778] __x64_sys_ioctl+0x19d/0x210 [ 1688.605593][ T778] do_syscall_64+0x39/0xb0 [ 1688.610083][ T778] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1688.616018][ T778] RIP: 0033:0x7fa6bb48c389 [ 1688.620457][ T778] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1688.640094][ T778] RSP: 002b:00007fa6bc21b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1688.648547][ T778] RAX: ffffffffffffffda RBX: 00007fa6bb5abf80 RCX: 00007fa6bb48c389 [ 1688.656563][ T778] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 1688.664563][ T778] RBP: 00007fa6bb4d7493 R08: 0000000000000000 R09: 0000000000000000 [ 1688.672563][ T778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1688.680566][ T778] R13: 00007ffc37484bcf R14: 00007fa6bc21b300 R15: 0000000000022000 [ 1688.688618][ T778] [ 1688.691748][ T778] [ 1688.694110][ T778] The buggy address belongs to stack of task syz-executor.0/778 [ 1688.701770][ T778] and is located at offset 40 in frame: 19:29:12 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vxcan1\x00'}) 19:29:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, 0x0, 0x0) getresgid(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1688.707435][ T778] sk_ioctl+0x0/0x440 [ 1688.711455][ T778] [ 1688.713787][ T778] This frame has 2 objects: [ 1688.718294][ T778] [32, 36) 'karg' [ 1688.718310][ T778] [48, 88) 'buffer' [ 1688.722046][ T778] [ 1688.728310][ T778] The buggy address belongs to the virtual mapping at [ 1688.728310][ T778] [ffffc9000c9a0000, ffffc9000c9a9000) created by: [ 1688.728310][ T778] kernel_clone+0xeb/0x890 [ 1688.745862][ T778] [ 1688.748203][ T778] The buggy address belongs to the physical page: [ 1688.754675][ T778] page:ffffea00018fae40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63eb9 [ 1688.765141][ T778] memcg:ffff88807e2e2a02 [ 1688.769412][ T778] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1688.776542][ T778] page_type: 0xffffffff() [ 1688.780890][ T778] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1688.789511][ T778] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88807e2e2a02 [ 1688.798108][ T778] page dumped because: kasan: bad access detected [ 1688.804540][ T778] page_owner tracks the page as allocated [ 1688.810366][ T778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 706, tgid 706 (syz-executor.3), ts 1686718608952, free_ts 1685900165630 [ 1688.829300][ T778] post_alloc_hook+0x2db/0x350 [ 1688.834114][ T778] get_page_from_freelist+0xfc2/0x2b00 [ 1688.839598][ T778] __alloc_pages+0x1cb/0x4a0 [ 1688.844218][ T778] alloc_pages+0x1aa/0x270 [ 1688.848679][ T778] __vmalloc_node_range+0xb73/0x14b0 [ 1688.854040][ T778] copy_process+0x13bb/0x75c0 [ 1688.858959][ T778] kernel_clone+0xeb/0x890 [ 1688.863399][ T778] __do_sys_clone+0xba/0x100 [ 1688.868019][ T778] do_syscall_64+0x39/0xb0 [ 1688.872471][ T778] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1688.878398][ T778] page last free stack trace: [ 1688.883079][ T778] free_unref_page_prepare+0x4dd/0xb90 [ 1688.888560][ T778] free_unref_page_list+0xe3/0xa70 [ 1688.893690][ T778] release_pages+0xcd8/0x1380 [ 1688.898412][ T778] tlb_batch_pages_flush+0xa8/0x1a0 [ 1688.903680][ T778] tlb_finish_mmu+0x14b/0x7e0 [ 1688.908377][ T778] exit_mmap+0x2cd/0x960 [ 1688.912632][ T778] __mmput+0x128/0x4c0 [ 1688.916735][ T778] mmput+0x60/0x70 [ 1688.920501][ T778] do_exit+0x9a7/0x2a30 [ 1688.924679][ T778] do_group_exit+0xd4/0x2a0 [ 1688.929265][ T778] get_signal+0x249b/0x25f0 [ 1688.933820][ T778] arch_do_signal_or_restart+0x79/0x5c0 [ 1688.939394][ T778] exit_to_user_mode_prepare+0x11f/0x240 [ 1688.945042][ T778] syscall_exit_to_user_mode+0x1d/0x50 [ 1688.950518][ T778] do_syscall_64+0x46/0xb0 [ 1688.954969][ T778] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1688.960902][ T778] [ 1688.963232][ T778] Memory state around the buggy address: [ 1688.968869][ T778] ffffc9000c9a7980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 [ 1688.976947][ T778] ffffc9000c9a7a00: f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 [ 1688.985017][ T778] >ffffc9000c9a7a80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 04 f2 00 00 [ 1688.993083][ T778] ^ [ 1689.000540][ T778] ffffc9000c9a7b00: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 19:29:13 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x890b, &(0x7f0000000000)={'vcan0\x00'}) [ 1689.008635][ T778] ffffc9000c9a7b80: 00 00 00 f1 f1 f1 f1 f1 f1 00 00 00 00 00 f2 f2 [ 1689.016702][ T778] ================================================================== 19:29:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, '{+\\\x06'}], 0xa, "31913b227e2082ae78bf6f8218e5fcb780a8255e5b0c5e30a6bc983f982071f04e2c124f1df5b24256b772a7431676bf03f4f58a74956905110da26df0dd2a81afd15782e75755e56d811feee9a0336e8b76ecee3cd646f34b728a7929c6bb62ea044d42ae78847929609134117db597926f311a6942b0104d311626352091f8311323bc96934ea649e3779fdee3bd7366821d4143039dd010245f0841b765834b88b8cc03dfa883fbb7875467d689038d7ad4d793af70b621ef3256ce806e2d7d2dfdac3d9e8fbb3f39ade917b52c406a16f361a1a8e8202f6a05c5d12d04b4fef4"}, 0xf2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 19:29:13 executing program 2: r0 = syz_io_uring_setup(0x1b6d, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x11, 0xffffffffffffffff, 0x1) [ 1689.229382][ T778] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1689.236650][ T778] CPU: 0 PID: 778 Comm: syz-executor.0 Not tainted 6.4.0-rc7-next-20230621-syzkaller #0 [ 1689.246416][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 1689.256483][ T778] Call Trace: [ 1689.259767][ T778] [ 1689.262705][ T778] dump_stack_lvl+0xd9/0x150 [ 1689.267330][ T778] panic+0x686/0x730 [ 1689.271260][ T778] ? panic_smp_self_stop+0xa0/0xa0 [ 1689.276410][ T778] ? preempt_schedule_thunk+0x1a/0x30 [ 1689.281881][ T778] ? preempt_schedule_common+0x45/0xb0 [ 1689.287372][ T778] check_panic_on_warn+0xb1/0xc0 [ 1689.292362][ T778] end_report+0x108/0x150 [ 1689.296728][ T778] kasan_report+0xfa/0x130 [ 1689.301176][ T778] ? ipmr_ioctl+0xb4a/0xbd0 [ 1689.305825][ T778] ipmr_ioctl+0xb4a/0xbd0 [ 1689.310197][ T778] ? ip_mroute_getsockopt+0x530/0x530 [ 1689.315623][ T778] raw_ioctl+0x4e/0x1e0 [ 1689.319810][ T778] sk_ioctl+0x151/0x440 [ 1689.324004][ T778] ? sock_ioctl_inout+0x150/0x150 [ 1689.329084][ T778] ? mark_held_locks+0x9f/0xe0 [ 1689.333890][ T778] ? kasan_quarantine_put+0xf9/0x220 [ 1689.339212][ T778] ? find_held_lock+0x2d/0x110 [ 1689.344040][ T778] inet_ioctl+0x18c/0x380 [ 1689.348398][ T778] ? ipip_gro_complete+0x140/0x140 [ 1689.353538][ T778] ? lock_downgrade+0x690/0x690 [ 1689.358429][ T778] ? tomoyo_path_number_perm+0x43b/0x570 [ 1689.364099][ T778] ? __kmem_cache_free+0xb8/0x2d0 [ 1689.369154][ T778] ? tomoyo_path_number_perm+0x166/0x570 [ 1689.374833][ T778] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1689.380679][ T778] sock_do_ioctl+0xcc/0x230 [ 1689.385216][ T778] ? get_user_ifreq+0x250/0x250 [ 1689.390102][ T778] ? vfs_fileattr_set+0xc40/0xc40 [ 1689.395161][ T778] sock_ioctl+0x1f8/0x680 [ 1689.399525][ T778] ? br_ioctl_call+0xb0/0xb0 [ 1689.404145][ T778] ? receive_fd+0x110/0x110 [ 1689.408673][ T778] ? __fget_files+0x261/0x470 [ 1689.413384][ T778] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1689.418342][ T778] ? br_ioctl_call+0xb0/0xb0 [ 1689.422963][ T778] __x64_sys_ioctl+0x19d/0x210 [ 1689.427753][ T778] do_syscall_64+0x39/0xb0 [ 1689.432225][ T778] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1689.438159][ T778] RIP: 0033:0x7fa6bb48c389 [ 1689.442603][ T778] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1689.462332][ T778] RSP: 002b:00007fa6bc21b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1689.470779][ T778] RAX: ffffffffffffffda RBX: 00007fa6bb5abf80 RCX: 00007fa6bb48c389 [ 1689.478772][ T778] RDX: 0000000000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 1689.486854][ T778] RBP: 00007fa6bb4d7493 R08: 0000000000000000 R09: 0000000000000000 [ 1689.494846][ T778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1689.503015][ T778] R13: 00007ffc37484bcf R14: 00007fa6bc21b300 R15: 0000000000022000 [ 1689.511028][ T778] [ 1689.514324][ T778] Kernel Offset: disabled [ 1689.518664][ T778] Rebooting in 86400 seconds..